We’ve just released the Oracle Solaris 11.4 SRU36. It is available via ‘pkg update’ from the support repository or by downloading the SRU from My Oracle Support Doc ID 2433412.1.

The following new components have been added to Solaris:

  • Root Pool Configuration Service for cloud images which automates setting the ZFS GUID on the image and sets the autoexpand property to on.
  • The Netwide Assembler, NASM –  an 80×86 and x86-64 assembler designed for portability and modularity. It supports all currently known x86 architectural extensions, and has strong support for macros.
  • asgiref – ASGI is a standard for Python asynchronous web apps and servers to communicate with each other, and positioned as an asynchronous successor to WSGI.
  • RapidJSON – an extremely fast C++ JSON parser and serialization library: this module wraps it into a Python 3 extension, exposing its serialization/deserialization and JSON Schema validation capabilities.
  • rlwrap – a ‘readline wrapper’, a small utility that uses the GNU Readline library to allow the editing of keyboard input for any command.

Some noteworthy improvements include:

  • OS install creates root pool with compression=on by default
  • Zone “description” added to zone config properties
  • Updated auto-update SMF service which includes:
    • shutdown-grace-period property
    • new instances for updating stackdb & EHC checks
  • New checks in Enterprise Health Checks (EHC) for:
    • LDoms
    • ZFS pools not configured with RAID
  • NFS v4 client now retries on NFS4ERR_DELAY responses
  • statd_servers property added to statd SMF service
  • SMB 1.0 disabled by default in native SMB server to improve security
  • pam_list filter on source user for use with su(8)
  • New -u option added to admhist for per user filtering
  • Improved system version information at login (previously this information was included in /etc/motd)
  • New -V option added to uname for displaying virtualization environment, -a option was also updated with this information
  • sstore now allows use of -i with -p
  • Improved creation time for fast lookup in Image Packaging System (IPS) database
  • I219-LM11 support added to e1000g driver
  • CX-5 OCP support added to mlxng driver
  • Support for auditing LDoms resource reconfiguration events

The following components have also been updated:

  • GNOME upgrade from 3.34 to 3.38 is completed:
    • adwaita-icon-theme has been updated to 3.38.0
    • background-logo-extension has been updated to 3.37.3
    • cantarell-fonts has been updated to 0.301
    • file-roller has been updated to 3.38.1
    • gdm has been updated to 3.38.2.1
    • gnome-online-accounts to 3.38.0
    • gnome-desktop to 3.38.3
    • gnome-session to 3.38.0
    • gnome-settings-daemon to 3.38.0
    • gnome-shell to 3.38.1
    • gnome-shell-extensions to 3.38.1
    • gnome-backgrounds to 3.38.0
    • gnome-control-center to 3.38.3
    • gnome-getting-started-docs to 3.38.1
    • gvfs has been updated to 1.46.2
    • mutter has been updated to 3.38.4
    • vte to 0.62.3/gnome-terminal to 3.38.3
  • Apache Tomcat has been updated to 8.5.65
  • Coverage has been updated to 5.5
  • Django 3.2 has been updated to 3.2.4
  • GCC 10 has been updated to 10.3.0
  • GCC 7 has been updated to 7.5.0
  • GCC 9 has been updated to 9.4.0
  • GNU debugger has been updated to 10.2
  • GNU emacs has been updated to 27.2
  • Ghostscript has been updated to 9.54.0
  • ICU has been updated to 68.2
  • MIT Kerberos has been updated to 1.18
  • WebOb has been updated to 1.8.7
  • bash has been updated to 5.1
  • buildbot-worker has been updated to 3.1.1
  • cups-filters has been updated to 1.28.8
  • git has been updated to 2.31.1
  • gutenprint has been updated to 5.3.4
  • hplip has been updated to 3.21.2
  • idna has been updated to 2.10
  • incremental has been updated to 21.3.0
  • irssi has been updated to 1.2.3
  • json-glib has been updated to 1.6.0
  • jsonrpclib has been updated to 0.4.2
  • lazy-object-proxy has been updated to 1.6.0
  • less has been updated to 581.2
  • libfastjson has been updated to 0.99.9
  • monotonic has been updated to 1.6
  • netaddr has been updated to 0.8.0
  • nss has been updated to 3.63
  • openscap updated to 1.3.4
  • p11-kit has been updated to 0.23.22
  • pango has been updated to 1.48.4
  • pathlib2 has been updated to 2.3.5
  • pip has been updated to 20.3.4
  • polkit has been updated to 0.118
  • ptyprocess has been updated to 0.7.0
  • pulseaudio has been updated to 14.2
  • qpdf has been updated to 10.3.1
  • qemu-img has been updated to 6.0.0
  • rsyslog has been updated to 8.2104.0
  • service_identity has been updated to 21.1.0
  • sortedcontainers has been updated to 2.4.0
  • unixodbc has been updated to 2.3.9
  • unrar has been updated to 6.0.5
  • util-macros has been updated to 1.19.3

The following components have been updated to address security issues:

  • GNU binutils has been updated to 2.36.1
  • GNU Tar has been updated to 1.34
  • ISC DHCP has been updated to 4.4.2-P1
  • Node.js 12 has been updated to 12.22.1
  • Node.js 14 has been updated to 14.17.0
  • Pillow has been updated to 8.2.0
  • Wireshark has been updated to 3.4.6
  • c-ares library has been updated to 1.17.1
  • curl has been updated to 7.76.0
  • gnutls has been updated to 3.7.1
  • libgcrypt has been updated to 1.8.8
  • libX11 has been updated to 1.7.2
  • nettle has been updated to to 3.7.2
  • pylxml has been updated to 4.6.3
  • python 3.9 has been updated version 3.9.4
  • stunnel has been updated to 5.59
  • driver/qlt, filesystem/zfs, install/installadm, kernel/icmp, library/openjpeg, python-mod/urllib3, & utility/snoop

Full details of this SRU can be found in My Oracle Support Doc 2801088.1. For the list of Service Alerts affecting each Oracle Solaris 11.4 SRU, see Important Oracle Solaris 11.4 SRU Issues (Doc ID 2445150.1).