Kamora ho lokolloa ha Red Hat Enterprise Linux 9.2, ho phatlalalitsoe ntlafatso lekaleng le fetileng la Red Hat Enterprise Linux 8.8, e tsamaisanang le lekala la RHEL 9.x mme e tla tšehetsoa ho fihlela bonyane 2029. Mehaho ea ho kenya e lokiselitsoe bakeng sa meralo ea x86_64, s390x (IBM System z), ppc64le le Aarch64, empa e fumaneha bakeng sa ho jarolleloa feela ho basebelisi ba ngolisitsoeng ba Red Hat Customer Portal (Litšoantšo tsa iso tsa CentOS Stream 9 le RHEL e hahelang bahlahisi le eona e ka ba teng. sebedisoa). Liphutheloana tsa Red Hat Enterprise Linux 8 rpm li tsamaisoa ka polokelo ea CentOS Git.
Tokisetso ea litokollo tse ncha e etsoa ho ea ka potoloho ea nts'etsopele, e bolelang ho thehoa ha litokollo likhoeli tse ling le tse ling tse tšeletseng ka nako e reriloeng esale pele. Ho fihlela ka 2024, lekala la 8.x le tla be le le mothating oa ts'ehetso e felletseng, e kenyelletsang ho kenyelletsa ntlafatso ea ts'ebetso, ka mor'a moo e tla fetela mohatong oa tlhokomelo, moo lintho tse tlang pele li tla fetohela ho lokisa liphoso le ts'ireletso, ka lintlafatso tse nyane tse amanang. ho tšehetsa litsamaiso tsa bohlokoa tsa hardware.
Liphetoho tsa bohlokoa:
- Liphutheloana tse ntlafalitsoeng tsa seva le tsamaiso: nginx 1.22, Libreswan 4.9, OpenSCAP 1.3.7, Grafana 7.5.15, powertop rebased 2.15, tuned 2.20.0, NetworkManager 1.40.16, mod_security 2.9.6, samba 4.17.5
- Liphetolelo tse ncha tsa li-comilers le lisebelisoa tsa ntlafatso li kenyelelitsoe: GCC Toolset 12, LLVM Toolset 15.0.7, Rust Toolset 1.66, Go Toolset 1.19.4, Python 3.11, Node.js 18.14, PostgreSQL 15, Git 2.39.1nd 3.19nd. , Apache Tomcat 4.8.
- Litlhophiso tsa mokhoa oa FIPS li fetotsoe hore li lumellane le maemo a FIPS 140-3. E holofalitsoeng 3DES, ECDH le FFDH, boholo ba linotlolo tsa HMAC bo lekanyelitsoe ho li-bits tse 112, le linotlolo tsa RSA li lekanyelitsoe ho li-bits tse 2048, tse holofetseng SHA-224, SHA-384, SHA512-224, SHA512-256, SHA3-224 le SHA3B hashes pseudo-random nomoro jenereithara -384.
- Melao e ntlafalitsoeng ea SELinux ho ts'ehetsa systemd-socket-proxyd.
- Motsamaisi oa sephutheloana sa yum o sebelisa taelo ea ntlafatso ea kantle ho marang-rang ho sebelisa lintlafatso ho sistimi e kantle ho naha. Moko oa ntlafatso ea offline ke hore pele, liphutheloana tse ncha li jarolleloa ka taelo ea "yum offline-upgrade download", ka mor'a moo taelo ea "yum offline-upgrade reboot" e etsoa ho qala sistimi sebakeng se fokolang le ho kenya tse fumanehang. lintlafatso ho eona ntle le ho kena-kenana le mekhoa ea basebetsi. Kamora ho kenya liapdeite ho phethetsoe, sistimi e qala hape sebakeng se tloaelehileng sa ho sebetsa. Ha u khoasolla liphutheloana bakeng sa liapdeite tsa offline, u ka sebelisa lihloela, mohlala, "--advisory", "--security", "--bugfix".
- Sephutheloana se secha sa synce4l se kenyelelitsoe ho sebelisa theknoloji ea ho lumellana ha maqhubu a SyncE (Synchronous Ethernet) e tšehetsoeng ka likarete tse ling tsa marang-rang le li-switches tsa marang-rang, tse ka ntlafatsang katleho ea puisano lits'ebetsong tsa RAN (Radio Access Network) ka lebaka la ho lumellana ha nako e nepahetseng haholoanyane.
- Faele e ncha ea tlhophiso /etc/fapolicyd/rpm-filter.conf e kentsoe moralong oa fapolicyd (File Access Policy Daemon), e u lumellang hore u tsebe hore na ke mananeo afe a ka tsamaisoang ke mosebelisi ea itseng le a ke keng a khona, ho hlophisa lenane. ea lifaele tse tsoang bobolokelong bakeng sa molaoli oa sephutheloana sa RPM se sebetsanang le fapolicyd. Mohlala, faele e ncha ea litlhophiso e ka sebelisoa ho qhelela ka thoko lits'ebetso tsa motho ka mong tse kentsoeng ke molaoli oa liphutheloana tsa RPM ho maano a phihlello.
- Ka kernel, ha u lahlela tlhahisoleseding e mabapi le moroallo oa SYN o fumanoeng ka har'a log, tlhahisoleseding e mabapi le aterese ea IP e amohetseng khokahanyo e fanoa e le ho nolofatsa boikemisetso ba sepheo sa moroallo ho litsamaiso tse nang le bahlokomeli ba tlameletsoeng ho liaterese tse fapaneng tsa IP.
- E kentse karolo ea sistimi bakeng sa podman toolkit ho laola litlhophiso tsa Podman, lijana, le lits'ebeletso tsa systemd tse tsamaisang lijana tsa Podman. Podman e ekelitse tšehetso bakeng sa ho hlahisa liketsahalo tsa tlhahlobo, ho hokela lihoko tsa pele ho qala (/usr/libexec/podman/pre-exec-hook le /etc/containers/pre-exec-hook), le ho sebelisa sebopeho sa Sigstore ho boloka li-signature tsa dijithale. ka litšoantšo tsa setshelo.
- Lisebelisoa tse ntlafalitsoeng tsa lijana tsa ho laola lijana tse ka thoko, ho kenyeletsoa liphutheloana tse kang Podman, Buildah, Skopeo, crun le runc.
- Ho kenyelitsoe lisebelisoa tsa lebokose la lithulusi tse u lumellang hore u qale sebaka se seng se ka thōko, se ka hlophisoang ka mokhoa o ikemetseng ho sebelisa mookameli oa sephutheloana oa DNF. Moqapi o hloka feela ho phethahatsa taelo ea "toolbox create", ka mor'a moo ka nako leha e le efe a ka kenya tikoloho e hlahisitsoeng ka taelo ea "toolbox enter" mme a kenye liphutheloana leha e le life tse sebelisang yum utility.
- Tšehetso e ekelitsoeng bakeng sa litšoantšo tsa Microsoft Azure vhd bakeng sa meralo ea ARM64.
- SSSD (System Security Services Daemon) e ekelitse ts'ehetso bakeng sa mabitso a li-directory tsa lapeng tse nyane (ho sebelisa "%h" sebaka sa tšobotsi ea override_homedir e boletsoeng ho /etc/sssd/sssd.conf). Ho phaella moo, basebelisi ba lumelloa ho fetola phasewete e bolokiloeng ho LDAP (e lumelloa ka ho beha ldap_pwd_policy tšobotsi ho /etc/sssd/sssd.conf ho moriti).
- glibc e sebelisa algorithm e ncha ea ho hlopha bakeng sa khokahano e matla ea DSO e sebelisang mokhoa oa ho batla ka botebo (DFS) ho rarolla mathata a ts'ebetso ho sebetsana le ho its'etleha ka looped. Ho khetha algorithm ea mofuta oa DSO, ho hlahisoa parameter ea glibc.rtld.dynamic_sort=2, e ka abeloang boleng "1" ho khutlela ho algorithm ea khale.
- Ts'ebeliso ea rteval e fana ka tlhaiso-leseling e akaretsang mabapi le downloads ea mananeo, likhoele, le CPU e amehang ho phetheng likhoele tseo.
- Likhetho tse ling li kenyellelitsoe ts'ebelisong ea oslat bakeng sa ho lekanya latency.
- E kentse bakhanni ba bacha ba SoC Intel Elkhart Lake, Solarflare Siena, NVIDIA sn2201, AMD SEV, AMD TDX, ACPI Video, Intel GVT-g bakeng sa KVM, HP iLO/iLO2.
- Ts'ehetso e kenyellelitsoeng ea liteko bakeng sa likarete tsa litšoantšo tsa Intel Arc (DG2/Alchemist). Ho etsa hore hardware e potlakele likareteng tse joalo tsa video, hlakisa PCI ID ea karete nakong ea boot ka "i915.force_probe=pci-id" parameter ea kernel.
- Sephutheloana sa inkscape inkscape1 se nkeloe sebaka ke inkscape1, e sebelisang Python 3. Phetolelo ea Inkscape e ntlafalitsoe ho tloha 0.92 ho ea 1.0.
- Mokhoa oa Kiosk o fana ka bokhoni ba ho sebelisa GNOME On-Screen Keyboard.
- Laeborari ea libsoup le moreki oa mangolo oa Evolution li kentse tšehetso bakeng sa netefatso ho Microsoft Exchange Server ho sebelisa protocol ea NTLMv2.
- GNOME e fana ka bokhoni ba ho ikamahanya le menu ea moelelo o bontšitsoeng ha o tobetsa ka ho le letona ho desktop. Joale mosebelisi a ka eketsa lintho ho menu ho tsamaisa litaelo tse sa reroang.
- GNOME e u lumella ho tima ho fetola li-desktops ka ho suthela holimo kapa tlase ka menoana e meraro ho touchpad.
- E tsoela pele ho fana ka ts'ehetso ea liteko (Technology Preview) bakeng sa AF_XDP, XDP offloading hardware, Multipath TCP (MPTCP), MPLS (Multi-protocol Label Switching), DSA (data streaming accelerator), KTLS, dracut, kexec fast reboot, nispor, DAX in ext4 le xfs, systemd-resolved, accel-config, igc, OverlayFS, Stratis, Software Guard Extensions (SGX), NVMe/TCP, DNSSEC, GNOME ho litsamaiso tsa ARM64 le IBM Z, AMD SEV bakeng sa KVM, Intel vGPU, Toolbox.
Source: opennet.ru