Table of Contents
- Title and Copyright Information
- Preface
- 1 About Oracle Linux 9
-
2
New Features and Changes
- Installation
- Operating System and Software Management
- Infrastructure Services
-
Security
- Keylime Updated to Version 7.3.0
- Keylime SELinux Policy Improvements
- crypto-policies Includes the NO-ENFORCE-EMS Subpolicy for TLS 1.2 Connections in FIPS Mode
- GnuTLS Requires EMS With TLS 1.2 in FIPS Mode
- NSS Enforce EMS in FIPS Mode
- EMS in FIPS Mode Can Be Disabled in OpenSSL
- OpenSSH Enforces SHA-2
- OpenSSL Elliptic Curve Cryptography Works With Brainpool Curves
- pcsc-lite-ccid Updated to 1.5.2
- opensc Package Updated to 0.23
- New SELinux Systemd Service Rules
- OpenSCAP Updated to 1.3.8
- SCAP Security Guide Updated to Version 0.1.69
- SCAP Security Guide Updated ANSSI-BP-028 Security Profiles to Version 2.0
- Expanded fanotify Information in Audit Logs
- fapolicyd Includes Rule Numbers in Audit Output
- setools Updated to 4.4.3
- python3-greenlet-devel Package Available
-
Networking
- iproute Packages Updated to Version 6.2.0
- NetworkManager Updated With Latest Upstream Version
- SCTP Updated With Latest Kernel Version of Networking Tree
- Network Manager Includes an Option to Suppress AAAA Queries
- Network Manager Notifies of Deprecated ifcfg Profile Formats
- Network Manager Includes New Active Bonding Mode for Sending LACPDU Frames
- Network Manager Includes New ns_ip6_target Bonding Option Available
- Network Manager Can Handle Static and DHCP IP on Same Network Interface
- Network Manager Connection Profiles Include Configurable Link Properties
- Network Manager Includes New arp_missed_max Property for Reporting Port as Down
- Network Manager Includes New bond-port.prio Property to Activate Bond Ports in a Specific Order
- nmstate Can Directly Configure a MAC Address Identified Network Interface
- nmstate API Includes dhcp-send-hostname And dhcp-custom-hostname
- nmstate Includes Option to Filter Untagged Traffic on Bridge VLAN Interfaces
- nmstate Can Handle Static DNS Search With Dynamic DNS Name Server
- Kernel and System Libraries
- File Systems and Storage
- High Availability and Clusters
- Dynamic Programming Languages, Web and Database Servers
-
Compilers and Development Tools
- glibc Performance Enhancement for Intel Xeon V5 Hardware
- System GCC Compiler Updated to Version 11.4.1
- GCC Preserves Register Arguments
- GCC Toolset 13
- bintuils Updated to Version 2.40 in GCC Toolset 13
- libabigail Updated to Version 2.3
- New Flag Available in debugedit Utility
- systemtap Updated to Version 4.9
- elfutils Updated to Version 0.189
- libpfm Updated to Version 4.13
- LLVM Toolset Updated to Version 16.0.6
- Rust Toolset Updated to Version 1.71.1
- pcp Updated to Version 6.0.5
- pmie Utility Generates Webhook Events
- Availability of .NET 8.0
- Virtualization
- Containers
- Support
- Cloud Environment
- 3 Technology Preview
- 4 Deprecated Features
-
5
Known Issues
- Installation Issues
- Virtualization Issues
- Kernel Issues
- Cockpit Podman Interface Might Require Additional Proxy Configuration
- (aarch64) Some GUI Elements Aren't Displayed During Installation and Boot Using VGA Output
- Certain SEV Guest Configurations Might Cause Hypervisor CPU Soft-Lockup Warnings
- Tuned Profile Packages for Oracle Cloud Infrastructure Are Moved
- Systems With Btrfs Fail to Boot in FIPS Mode
-
6
Package Changes From the Upstream Release
-
Changes to Binary Packages
- Added Binary Packages for BaseOS by Oracle
- Added Binary Packages for AppStream by Oracle
- Added Binary Packages for CodeReady Linux Builder by Oracle
- Modified BaseOS Binary Packages
- Modified Binary Packages for CodeReady Linux Builder by Oracle
- Modified AppStream Binary Packages
- Removed BaseOS Binary Packages
- Removed AppStream Binary Packages
- Removed CodeReady Linux Builder Binary Packages
- Changes to Source Packages
-
Changes to Binary Packages