I-Oracle ikhiphe i-Unbreakable Enterprise Kernel R5U4

Inkampani ye-Oracle kukhishwe isibuyekezo sesine sokusebenza se-kernel I-Inbreakable Enterprise Kernel R5, ibekwe ukuze isetshenziswe ekusatshalalisweni kwe-Oracle Linux njengenye indlela yephakheji evamile ene-kernel evela ku-Red Hat Enterprise Linux. I-kernel iyatholakala kuma-architectures we-x86_64 kanye ne-ARM64 (aarch64). Imithombo ye-Kernel, okuhlanganisa ukuhlukaniswa kube iziqephu ngazinye, eshicilelwe endaweni yokugcina ye-Oracle Git yomphakathi.

I-Unbreakable Enterprise Kernel 5 isekelwe ku-kernel Linux 4.14 (I-UEK R4 yayisekelwe ku-4.1 kernel, kanye UEK R6 ku-5.4), elekelelwa ngezici ezintsha, ukulungiselelwa nokulungiswa, futhi ihlolelwa ukuhambisana nezinhlelo zokusebenza eziningi ezisebenza ku-RHEL, futhi ithuthukiswe ngokukhethekile ukuze isebenze nesofthiwe yezimboni ne-Oracle hardware. Ukufakwa namaphakheji we-src nge-UEK R5U4 kernel ilungisiwe ye-Oracle Linux 7 (azikho izithiyo ekusebenziseni le kernel ezinguqulweni ezifanayo ze-RHEL, i-CentOS ne-Scientific Linux).

Ukhiye ukuthuthukiswa:

• Ukwesekwa okwengeziwe kokugcina ububanzi besikhala sekheli elibonakalayo lenqubo (Cubungula Ukubhukha Isikhala Sekheli Elibonakalayo), okuvumela ukukhulisa ukuzinza kwe-Oracle DBMS lapho i-randomization ye-space layout (ASLR) inikwe amandla.
• Ukulungiswa nokulungiselelwa kwe-NFS okuhlobene nokufinyelela kwenqolobane yekhasi, ukucutshungulwa kwezingcingo ze-RPC, nokusekelwa kweklayenti le-NFSv4 kuye kwadluliselwa kusuka ekukhishweni kwakamuva kwe-kernel eyinhloko. Izinkinga nge-NFS egijima phezu kwe-OCSF2 sezixazululiwe.
• Amathuluzi okuxilonga isitaki se-TCP anwetshiwe, usekelo lwamaphoyinti okulandelela asekelwe ku-eBPF lwengeziwe, futhi ukulandelela okungaphezulu kwehlisiwe.
• Iziqephu ezintsha zidlulisiwe zisuka ku-kernel 5.6 ukuze zivikeleke ezingozini zekilasi le-Specter v1.
• Izishayeli zedivayisi zibuyekeziwe, okuhlanganisa izinguqulo ezintsha zabashayeli be-BCM573xx (bnxt_en), Intel Ethernet Switch Host Interface (fm10k), Intel Ethernet Connection XL710 (i40e), Broadcom MegaRAID SAS (megaraid_sas), LSI MPT Fusion SAS 3.0 (mpt3sas), I-Fiber Channel HBA (qla2xxx), i-Microsemi Smart Family Controller (smartpqi), i-Intel Volume Management Device (vmd) kanye ne-Mware Virtual Machine Communication Interface (vmw_vmci).

Source: opennet.ru