We’ve just released the Oracle Solaris 11.4 SRU90, the January 2026 CPU. It is available via ‘pkg update’ from the support repository or by downloading the SRU from (My Oracle Support Doc ID KB631614.)

This SRU adds the following new features or modified interfaces:

  • Boot Environment preservation policy
  • Bufmod Y2038 timestamp extension
  • Changing restricted retention properties on receive of new file system.
  • Clean up ldm(8) CLI error messages and help output
  • Early core dump preservation revisited
  • Fix T4-specific memory management issue leading to ldmd or Hypervisor aborts
  • Kernel Zone Memory LZR support with SPARC migration classes ‘generic’ and ‘migration-class1’ disabled
  • Limiting Send To All signaling
  • Multiple issues addressed regarding dynamic updating of vswitch and vnet MTUs
  • Scan with pending free
  • Selecting the DHCP address for Automatic DNS configuration
  • Solaris ELF support for Zstandard section compression
  • Unsigned 32-bit time types
  • bootadm support for unrestricted property on GRUB menu entries
  • ctfdump refresh
  • devnm -s option
  • gfx_private firmware load
  • ikev2cert PIN from SMF
  • ipadm parity with ifconfig for dhcp release
  • ls -s output with the -h (human readable) option

The following packages have been updated to address security issues:

  • BIND to 9.20.15
  • c-ares to 1.34.6
  • cups to 2.4.15
  • curl to 8.17.0
  • Django 5.2 to 5.2.7, Django 4.2 to 4.2.25
  • fetchmail to 6.5.6
  • filelock to 3.20.1
  • Golang to 1.25.5
  • GNU Binutils to 2.45
  • ImageMagick to 7.1.2-8
  • libexpat to 2.7.3
  • libpng to 1.6.52
  • libtiff to 4.7.1
  • lighttpd to 1.4.82
  • openssl-3 to 3.0.18
  • PHP 8.4 to 8.4.16, PHP 8.3 to 8.3.29, PHP 8.2 to 8.2.30
  • poppler to 25.10.0
  • pypdf to 6.4.0
  • python 3.13 to 3.13.9, python 3.11 to 3.11.14
  • python-ldap to 3.4.5
  • sqlite to 3.51.0
  • suricata to 8.0.2
  • urllib3 to 2.6.0
  • xorg-server to 21.1.20

The following have also been updated:

  • a2ps to 4.15.7
  • Ant to 1.10.15
  • argcomplete to 3.6.3
  • astroid to 3.3.11
  • at-spi2-core to 2.58.1
  • bcrypt to 5.0.0
  • beautifulsoup4 to 4.14.2
  • build to 1.3.0
  • cffi to 2.0.0
  • cryptography to 46.0.3
  • Firefox to 140.4.0esr
  • flit_core to 3.12.0
  • fltk to 1.4.4
  • FreeType to 2.14.1
  • gdbm to 1.26
  • gdk-pixbuf to 2.44.4
  • glib to 2.85.4
  • GNU Screen to 5.0.1
  • gobject-introspection to 1.84.0
  • gtk3 to 3.24.51
  • isort to 6.0.1
  • lcms2 to 2.17
  • less to 685
  • libnotify to 0.8.6
  • libogg to 1.3.6
  • libpng16 to 1.6.50
  • libxml2 to 2.14.6
  • msgpack to 1.1.2
  • maturin to 1.9.6
  • NASM to 3.01
  • NumPy to 2.3.4
  • pango to 1.56.4
  • pipx to 1.8.0
  • platformdirs to 4.5.0
  • puremagic to 1.30
  • pycparser to 2.23
  • pyopenssl to 25.3.0
  • pygobject3 to 3.52.3
  • psutils to 3.3.14
  • samba to 4.22.6
  • service_identity to 24.2.0
  • setuptools-rust to 1.12.0
  • tcpdump to 4.99.5
  • Thunderbird to 140.4.0esr
  • thor to 1.4.0
  • tigervnc to 1.14.1
  • Unbound to 1.24.1
  • unixodbc to 2.3.14
  • vala to 0.56.18
  • valgrind to 3.26.0
  • wand to 0.6.13
  • wcwidth to 0.2.14
  • wheel to 0.46.1
  • Wireshark to 4.6.0
  • xattr to 1.3.0
  • xkbcomp to 1.5.0
  • xz to 5.8.1
  • zsh to 5.9

The timezone data has been updated to 2025c

Full details of this SRU can be found in My Oracle Support Doc KB873743. For the list of Service Alerts affecting each Oracle Solaris 11.4 SRU, see Important Oracle Solaris 11.4 SRU Issues (Doc ID KB620396).