We’ve just released the Oracle Solaris 11.4 SRU81. It is available via ‘pkg update’ from the support repository or by downloading the SRU from My Oracle Support Doc ID 2433412.1.

This SRU adds the following new features or modified interfaces:

  • Auto-Unlock after timer expiry for non-password authentication
  • CTF version 3
  • x86 boot loader upgraded to GRUB 2.12 and Shim 15.8
  • KMIP “failover_limit” obsoleted
  • Login SLEEPTIME moved to pam_unix_auth
  • Non-global zone init(8) and zsched having virtual PIDs 1 and 0
  • Synchronized system time enforcement for zone migration
  • Tunables to prevent sending of ICMP unreachable messages
  • dladm(8) subcommand to show transceiver information
  • getpeereid(3c) added to libc
  • link-editor support for CTF generation (ld -z ctf)
  • solaris10 branded zone compressed ustar/xustar/pax installation archives
  • sulogin: allow users with root role
  • PHP 8.4 added
  • New options for configuring verbosity and function annotation for ldmd logging via ‘ldm set-logctl’. See ldm(8).
  • Improved columnar output of ‘ldm list’ for ‘disk’, ‘hba’, and ‘san’ by allowing column width to vary based on content
  • Generate warnings when tunables are set that could impact vnet performance
  • vHBA robustness improvements around service domain reboots and LDC channel resets

The following packages have been updated to address security issues:

  • Django to 4.2.20
  • Firefox to 128.9.0esr
  • Golang to 1.23.8
  • GRUB to 2.12
  • Java 8 to jdk8u451 (Bugs 3774024
  • MySQL 8.0 to 8.0.41
  • RequireJS to 2.3.7
  • Subversion to 1.14.5
  • Thunderbird to 128.9.1esr
  • Wireshark to 4.4.5
  • ansible-core to 2.18.1
  • avahi to 0.8.2024.12
  • curl to 8.12.0
  • ghostscript to 10.05.0
  • git to 2.48.1
  • gst-plugins-base to 1.24.12
  • iperf3 to 3.18
  • libexpat to 2.6.4
  • libtasn1 to 4.20.0
  • libxml2 to 2.13.6
  • openjpeg to 2.5.3
  • poppler to 25.02.0
  • rsync to 3.4.1
  • ruby 3.1 to 3.1.7
  • shim to 15.8
  • suricata to 7.0.8
  • xorg-server to 21.1.16
  • gnome/libraries, library/libarchive, library/libsoftcrypto, service/proftpd & utility/emacs

The following have also been updated:

  • AMD CPU microcode to 2024-11-21 release
  • CherryPy to 18.10.0
  • ImageMagick 7
  • Intel CPU microcode to 2025.1 IPU
  • LLVM/Clang 19
  • LZ4 to 1.10.0
  • OpenLDAP to 2.6.9
  • PHP to 8.4.5
  • ProFTPd to 1.3.8c
  • Sphinx to 8.2.0
  • Valgrind to 3.24.0
  • a2ps to 4.15.6
  • alabaster to 1.0.0
  • asgiref to 3.8.1
  • buildbot-worker to 4.2.1
  • cairo to 1.18.2
  • dbus to 1.16.0
  • diffstat to 1.67
  • espeak-ng to 1.52.0
  • fetchmail to 6.5.1
  • fslsfonts 1.0.7
  • gjs to 1.78.5
  • gom to 0.5.3
  • gtk3 to 3.24.48
  • gtk4 to 4.14.5
  • jsonschema to 4.23.0
  • libICE 1.1.2
  • libSM 1.2.5
  • libXau 1.0.12
  • libXcursor 1.2.3
  • libXi 1.8.2
  • libXrender 0.9.12
  • libXt 1.3.1
  • libXv 1.0.13
  • libXxf86vm 1.1.6
  • libexif to 0.6.25
  • libgee to 0.20.8
  • libxcvt 0.1.3
  • libxshmfence 1.3.3
  • libxslt to 1.1.42
  • lndir 1.0.5
  • mm-common to 1.0.6
  • mod_wsgi to 5.0.2
  • nano to 8.2
  • net-snmp to 5.9.4
  • oclock 1.0.6
  • pango to 1.55.5
  • pcaudiolib 1.3
  • pcre2 to 10.44
  • perl DBI module to 1.647
  • procmail to 3.24
  • pv to 1.9.7
  • pylxml to 5.3.0
  • pyrsistent to 0.20.0
  • python 3.11 to 3.11.11
  • python 3.13 to 3.13.1
  • python 3.9 to 3.9.21
  • python oracledb to 3.0.0
  • rpdb to 0.2.0
  • ruby-augeas to 0.6.0
  • samba to 4.21.3
  • totem to 43.1
  • transset 1.0.4
  • unrar to 7.1.2
  • util-macros 1.20.2
  • virtualenv to 20.29.2
  • xcompmgr 1.1.10
  • xf86-input-keyboard 2.1.0
  • xf86-video-mach64 6.10.0
  • xf86-video-mga 2.1.0
  • xf86-video-r128 6.13.0
  • xf86-video-vboxvideo 1.0.1
  • xlogo 1.0.7
  • xmag 1.0.8
  • xtrans 1.5.2
  • zlib to 1.3.1

Full details of this SRU can be found in My Oracle Support Doc 3086201.1. For the list of Service Alerts affecting each Oracle Solaris 11.4 SRU, see Important Oracle Solaris 11.4 SRU Issues (Doc ID 2445150.1).