Oracle has released the Solaris 11.4 SRU 84 (Support Repository Update) operating system update, which offers a series of significant changes and improvements for the Solaris 11.4 branch. To install the proposed fixes in the update, simply run the command ‘pkg update’. Users can also take advantage of the free Solaris 11.4 CBE (Common Build Environment), developed using a continuous release model for new versions.
Among the changes in the new version:
- The sxadm command has been enhanced with RFDS_CLEAR and RFDS_NO options to manage protection against the RFDS (Register File Data Sampling) vulnerability in Intel processors.
- The format utility now includes the ‘-r’ option, which when specified, iterates over and queries the parameters of all devices in the /dev directory, instead of loading parameters from the dev_info cache. This option may be useful in clustered configurations with shared disks, where disk parameters can change without updating the cache on other nodes.
- The format utility has added the ‘-n’ and ‘-q’ options for simplifying calls from scripts in non-interactive mode. The ‘-n’ option outputs a list of disks and their attributes, while the ‘-q’ option restricts the output to just the list and parameters of the disks.
- The behavior of the fmthard utility has been adjusted to resemble that of the format utility concerning the prohibition of writing disk labels when file systems are mounted, ZFS pools are entered, or SVM or VXVM partitions are present. An additional ‘-f’ option has been added to forcibly perform operations on the disk, regardless of mounted partitions or active ZFS pools.
- The implementation of the IKEv1 (Internet Key Exchange Version 1) protocol, previously declared obsolete, has been separated into its own package pkg:/system/network/ike-v1, which is scheduled for removal in future releases. The pkg:/system/network/ike package retains only support for IKEv2.
- The IPQoS network packet classification system (pkg://solaris/system/network/ipqos) has been declared obsolete and scheduled for removal. It is recommended to use the dladm, dlstat, flowadm, and flowstat utilities for bandwidth reservation.
- The truss utility now ensures the transmission of the exit code returned by the processed child process, similar to the ptime and ppriv utilities.
- The sstore utility now provides warnings about running out of space in the /tmp partition, which are displayed when the partition is more than 95% full or occupies more than 10 GB.
- Dynamic timeout adjustments for active LDoms virtual disks are allowed using the command "ldm set-vdisk timeout=N."
- Stability of the nscd (name service cache) service has been improved, now running two processes — one for handling requests (nscd-worker) and another for monitoring the availability of the working process (nscd).
- The csh command interpreter and the which utility have been moved from the core set (pkg:/system/core-os) to a separate package pkg:/legacy/shell/csh, which continues to be installed by default.
- The file utility has improved detection of the presence of CTF (Compact C Type Format) debugging information in executable files and libraries.
- Support has been added for translating CTF debugging information generated by GCC (GNU CTF) into the Solaris CTF representation.
- The libsodium cryptographic library and extensions for its use in PHP have been included.
- The Node.js package has been updated to version 22.
- OpenSSH has been updated to version 10.0, which removes support for the DSA algorithm.
- Software versions have been updated, including Apache httpd 2.4.63, BIND 9.18.37, cups 2.4.12, Django 4.2.23, Emacs 30.1, git 2.50.1, GnuPG 2.5.6, gnutls 3.8.9, Golang 1.23.10, Postfix 3.9.1, Python 3.13.3, ruby 3.1.7, Samba 4.21.7, sqlite 3.49.1, sudo 1.9.17p1, wxwidgets 3.2.7, xorg-server 21.1.18.
Source: opennet.ru
