We’ve just released the Oracle Solaris 11.4 SRU94 CPU. It is available via ‘pkg update’ from the support repository or by downloading the SRU from (My Oracle Support Doc ID KB631614.)

Oracle Solaris 11.4 SRU94 is the latest Critical Patch Update (CPU) for Oracle Solaris 11.4 systems. It delivers security fixes, package updates, and general bug fixes while preserving the feature content introduced in 11.4 SRU93. Together, the 11.4 SRU93 and the 11.4 SRU94 content represent the features and fixes between this CPU and the previous CPU 11.4 SRU92.

11.4 SRU94 includes updates for Puppet Solaris providers, key web and application runtimes, browser and mail components, database clients, cryptographic libraries, Python components, and X11 packages. It also includes Java 8 package update guidance.

Notable package updates

11.4 SRU94 includes an updated puppet oracle-solaris_providers package to version 2.0.4. The SRU also updates several components while addressing related security issues, including Apache HTTP Server to 2.4.68, Apache Tomcat to 9.0.118, dulwich to 1.2.6, Evince to 48.4, Firefox to 140.11.0esr, Golang to 1.25.10, MySQL 8.0 to 8.0.46, MySQL 8.4 to 8.4.9, OpenSSL 3 to 3.0.21, PHP 8.2 to 8.2.31, PHP 8.3 to 8.3.31, PHP 8.4 to 8.4.21, PHP 8.5 to 8.5.6, Pillow to 12.2.0, rsync to 3.4.4, Ruby 3.3 to 3.3.11, Thunderbird to 140.11.0esr, Twisted to 26.4.0, Unbound to 1.25.1, urllib3 to 2.7.0, Wireshark to 4.6.6, and xorg-server to 21.1.22 and 21.1.23.

Security updates

This SRU includes security fixes for Puppet, Python, X11 libX11, Apache HTTP Server, Apache Tomcat, dulwich, Evince, Firefox, Golang, MySQL, OpenSSL, PHP, Pillow, rsync, Ruby, Thunderbird, Twisted, Unbound, urllib3, Wireshark, and xorg-server. The fixes address a broad set of CVEs across web servers, browsers, mail clients, databases, cryptographic libraries, language runtimes, Python packages, netw

Java 8 update note

Java 8 packages are incorporated in this SRU. Systems updated with pkg update should receive the Java 8 package updates as part of the normal SRU update process.

Full details of this SRU can be found in My Oracle Support Doc KB919995. For the list of Service Alerts affecting each Oracle Solaris 11.4 SRU, see Important Oracle Solaris 11.4 SRU Issues (Doc ID KB620396).