Table of Contents
- Title and Copyright Information
- Preface
- 1 About Oracle Linux 9
-
2
New Features and Changes
- Installation and Boot
- Operating System and Software Management
- Infrastructure Services
-
Security
- NSS Updated to Version 3.101
- OpenSSL Updated to Version 3.2.2
- OpenSSH Updated to Version 8.7p1-43
- Trusted CA Root Certificates Added in OpenSSL directory-hash Format
- crypto-policies Packages Updated for Java Algorithm Selection
- fips-mode-setup Checks for Use of Argon2 KDF in Open LUKS Volumes
- audit Updated to Version 3.1.5
- opencryptoki Updated to Version 3.23.0
- Libreswan Updated to Version 4.15
- clevis Updated to Version 20
- jose Updated to Version 14
- SELinux Updates
- SCAP Security Guide Updated to Version 0.1.74
- Networking
- Kernel and System Libraries
- File Systems and Storage
- High Availability and Clusters
- Dynamic Programming Languages, Web and Database Servers
-
Compilers and Development Tools
- System GCC is Updated to Version 11.5
- elfutils Updated to Version 0.191
- systemtap Updated to Version 5.1
- Rust Toolset Updated to Version 1.79
- Go Toolset Updated to Version 1.22.5
- GCC Toolset 14
- glibc Updates
- GDB Updated to Version 14.2
- .NET Updated to Version 9.0
- PCP Updated to Version 6.2.2
- Grafana Updated to Version 10.2.6
- LLVM Toolset Updated to Version 18.1.8
- valgrind Updated to Version 3.23.0
- libabigail Updated to Version 2.5
- System Java Updated to OpenJDK 17
- Containers
- Cockpit Web Console
- Virtualization
- Support
- 3 Technology Preview
-
4
Deprecated Features
- Installation
- Software Management
- Shell and Command Line
-
Security
- OVAL Data Format
- Using update-ca-trust Without Arguments
- Configuring STunnel Clients to Use the Trusted Root CA Files
- NSS Deprecated Algorithms
- pam_ssh_agent_auth
- scap-workbench
- oscap-anaconda-addon
- /etc/system-fips
- libcrypt.so.1
- SHA-1 Algorithm
- SCP Protocol
- OpenSSL Cryptographic Algorithms
- Digest-MD5
- /etc/system-fips File
- libcrypt.so.1
- fapolicyd.rules File
- OpenSSL RSA Encryption Without Padding
- OpenSSL Engines API
- openssl-pkcs11
- Networking
- Kernel
- File Systems and Storage
- High Availability
- Dynamic Programming Languages, Web and Database Servers
- Compilers and Development
- Identity Management and Authentication
- Desktop
- Virtualization
- Containers
- Deprecated Packages
-
5
Known Issues
- Installation Issues
- Virtualization Issues
- Kernel Issues
- (aarch64) Some GUI Elements Aren't Displayed During Installation and Boot Using VGA Output
- Certain SEV Guest Configurations Might Cause Hypervisor CPU Soft-Lockup Warnings
- Tuned Profile Packages for Oracle Cloud Infrastructure Are Moved
- Systems With Btrfs Fail to Boot in FIPS Mode
- Leapp Upgrade Messages About Unmounted /proc File System
- Kdump Service Disabled After Upgrade
- Openssl Tool Returns Unable to Print EC Key in FIPS Mode
-
6
Package Changes From the Upstream Release
-
Changes to Binary Packages
- Added Binary Packages for BaseOS by Oracle
- Added Binary Packages for AppStream by Oracle
- Added Binary Packages for CodeReady Linux Builder by Oracle
- Modified BaseOS Binary Packages
- Modified Binary Packages for CodeReady Linux Builder by Oracle
- Modified AppStream Binary Packages
- Removed BaseOS Binary Packages
- Removed AppStream Binary Packages
- Removed CodeReady Linux Builder Binary Packages
- Changes to Source Packages
-
Changes to Binary Packages