Oracle is pleased to announce the availability of the Oracle Linux 8 Update 4 for the 64-bit Intel and AMD (x86_64) and 64-bit Arm (aarch64) platforms. Oracle Linux brings the latest open source innovations, business-critical performance, and security optimizations for cloud and on-premises deployment. Oracle Linux maintains user space compatibility with Red Hat Enterprise Linux (RHEL) and CentOS, which is independent of the kernel version that underlies the operating system. Existing applications in user space will continue to run unmodified on Oracle Linux 8 Update 4 with Unbreakable Enterprise Kernel Release 6 (UEK R6) and applications already certified on previous releases of Red hat Enterprise Linux 8 or Oracle Linux 8 do not require a certification with this new release.
Oracle Linux 8 Update 4 includes the UEK R6 Update 2 on the installation image, along with the Red Hat Compatible Kernel (RHCK). For new installations, UEK R6 is enabled and installed by default and is the default kernel on first boot. UEK R6, the kernel developed, built, and tested by Oracle is based on the mainline Linux Kernel 5.4, and deliversmore innovation than other commercial Linux kernels.
Oracle Linux 8 Update 4 release includes:
mysql-selinux packageincludes an SELinux module that provides rules for the MySQL database.
python-PyMySQL package has been updated to version 0.10.1. This package is included in the python36, python38 and python39 modules.
python3-pyodbc package provides access to Open Database Connectivity (ODBC) databases.
Bind, updated to version 9.11.26, provides several bug fixes and enhancements over the previous version.
ghostscript, updated to version 9.27, provides fixes for several vulnerabilities.
Updated tcpdump provides the ability to capture RDMA traffic; as a result, you can also use the tcpdump command to view RDMA-capable devices, capture RoCE and VMA traffic, as well as analyze its content.
libreswan, updated to version 4.3, provides several fixes and improvements for IKE, IKEv2, IPSec, as well as the following other notable improvements:
adds support for IPsec-based VPN over TCP encapsulation, per RFC 8229
includes Internet Key Exchange version 2 (IKEv2) support of Security Labels for IPsec
OpenSCAP packages, updated to version 1.3.4, provide a fix for memory issues and leaks, as well as other fixes for issues that resulted in systems with large amounts of files to run out of memory; other notable changes:
A new RPM plugin that notifies fapolicyd about any changes during RPM transactions has been added; the RPM plugin replaces the YUM plugin because its functionality is not limited to YUM transactions, while also accounting for any changes made by RPM.
scap-security-guide packages, updated to 0.1.54, provide several bug fixes and improvements over the previous version, including an updated Operating System Protection Profile, a family of profiles that are based on ANSSI BP-028 recommendations.
Updated scap-workbench includes support for scanning remote systems by using passwordless sudo access; this improvement reduces the security risk that is imposed by supplying root's credentials.
Red Hat Compatible Kernel (RHCK)
EDAC module included. (EDAC) kernel module, part of RHCK, primarily handles Error Code Correction (ECC) memory and detects and reports PCI bus parity errors.
Free memory page feature added. The Oracle Linux 8 host kernel is capable of returning memory pages that are not used by its VMs back to the hypervisor. This feature change improves the stability and resource efficiency of the host.
kmod-redhat-oracleasm package added. The kmod-redhat-oracleasm package has been added in this release. This package provides the kernel module part of the ASMLib utility. Oracle Automated Storage Management (ASM) is a data volume manager for Oracle databases. ASMLib is an optional utility that you can use on Oracle Linux systems to manage Oracle ASM devices.
Note: those features was formerly only available in the Unbreakable Enterprise Kernel.
Web Console includes Graphical Performance Analysis Capability with a new "View details and history" page, which is dedicated to analyzing the performance of a system by clicking View details and history on the Overview page.
Oracle Linux 8 Update 4 includes the following kernel packages:
kernel-uek-5.4.17-2102.201.3 for x86_64 and aarch64 platforms - The Unbreakable Enterprise Kernel Release 6 Update 2, which is the default kernel.
kernel-4.18.0-305 for x86_64 platform - The latest Red Hat Compatible Kernel (RHCK).
Individual RPM packages are available on the Unbreakable Linux Network (ULN) and the Oracle Linux yum server. ISO installation images are available from the Oracle Linux yum server and Oracle Software Delivery Cloud and container images are available via Oracle Container Registry, GitHub Container Registry and Docker Hub.
Oracle Linux can be downloaded, used, and distributed free of charge and all updates and errata are freely available. Customers decide which of their systems require a support subscription. This makes Oracle Linux an ideal choice for development, testing, and production systems, since support coverage can be optimized for each individual system, while keeping all systems up to date and secure.
A 19-year Oracle veteran, Simon Coter is an experienced product manager and open source community member. He leads a team responsible for several Oracle Linux and Virtualization offerings, including Oracle Linux, the Unbreakable Enterprise Kernel for Oracle Linux, Oracle Cloud Native Environment, Oracle Linux KVM, Oracle Linux Virtualization Manager, Oracle Linux Automation Manager, Gluster, Oracle VM, and VirtualBox. Prior to this, Simon was a technical consultant focused on project management, architectures definition, sizing and implementation, best practices, and technical references for customers.