Oracle yatulutsa Unbreakable Enterprise Kernel R5U4

Kampani ya Oracle anamasulidwa Kusintha kwachinayi kwa kernel Enterprise Kernel R5, yoyikidwa kuti igwiritsidwe ntchito pakugawa kwa Oracle Linux ngati njira ina ya phukusi lokhazikika ndi kernel kuchokera ku Red Hat Enterprise Linux. Kernel ikupezeka pa x86_64 ndi ARM64 (aarch64) zomangamanga. Magwero a Kernel, kuphatikiza kugawanika kukhala zigamba pawokha, lofalitsidwa m'malo agulu a Oracle Git.

Enterprise Kernel 5 yosasweka idakhazikitsidwa ndi kernel Linux 4.14 (UEK R4 idakhazikitsidwa pa 4.1 kernel, ndi UEK R6 pa 5.4), yomwe imaphatikizidwa ndi zatsopano, kukhathamiritsa ndi kukonza, ndipo imayesedwanso kuti igwirizane ndi mapulogalamu ambiri omwe akuyenda pa RHEL, ndipo amakonzedwa kuti azigwira ntchito ndi mapulogalamu a mafakitale ndi Oracle hardware. Kuyika ndi src phukusi ndi UEK R5U4 kernel kukonzekera kwa Oracle Linux 7 (palibe zopinga kugwiritsa ntchito kernel iyi m'matembenuzidwe ofanana a RHEL, CentOS ndi Scientific Linux).

Chinsinsi kuwongolera:

• Thandizo lowonjezera la kusungirako magawo a malo adiresi ya ndondomeko (Process Virtual Address Space Reservation), yomwe imalola kuonjezera kukhazikika kwa Oracle DBMS pamene adilesi ya malo randomization (ASLR) yayatsidwa.
• Kukonza ndi kukhathamiritsa kwa NFS zokhudzana ndi mwayi wofikira pamasamba, kukonza mafoni a RPC, ndi chithandizo chamakasitomala a NFSv4 zatengedwa kuchokera ku zotulutsa zaposachedwa za kernel yayikulu. Mavuto ndi NFS yomwe ikuyenda pa OCSF2 yathetsedwa.
• Zida zowunikira ma stack za TCP zakulitsidwa, chithandizo cha malo otsata a eBPF awonjezedwa, ndipo kutsata pamwamba kwachepetsedwa.
• Zigamba zatsopano zasamutsidwa kuchokera ku kernel 5.6 kuti ziteteze ku chiwopsezo cha Specter v1 class.
• Madalaivala achipangizo asinthidwa, kuphatikiza mitundu yatsopano yoyendetsa ya BCM573xx (bnxt_en), Intel Ethernet Switch Host Interface (fm10k), Intel Ethernet Connection XL710 (i40e), Broadcom MegaRAID SAS (megaraid_sas), LSI MPT Fusion SAS 3.0 (QLogist3sas), Fiber Channel HBA (qla2xxx), Microsemi Smart Family Controller (smartpqi), Intel Volume Management Device (vmd) ndi Mware Virtual Machine Communication Interface (vmw_vmci).

Source: opennet.ru