RHEL 9.3 yakatoburitswa uye idzi ndidzo nhau dzayo

Munguva pfupi yapfuura Red Hat yakazivisa kuwanikwa kweiyo vhezheni itsva yeRHEL 9.3, zvinova iyo yekutanga vhezheni iyo rpm mapakeji asina kuburitswa muruzhinji CentOS repository uye zvinopihwa kune vatengi vekambani chete kuburikidza nechikamu chakavharwa chesaiti chinorambidza kugoverazve data.

Mukuburitswa uku, kunobva kuRHEL 9.3 kuvandudzwa kwakaitwa muDNF kunobuda pachenazvakanaka mapulagi matsva akawedzerwa »dnf mashizha» kuratidza ese akaiswa mapakeji asiri anotsamira pane mamwe mapakeji; «show-mashizha»kuratidza mapakeji kana mapakeji akafanana achangobva kuisirwa ayo asisashandiswe sekutsamira mushure mekutengeserana.

Tinogona zvakare kuwana murairo we "reboot" muDNF kuti utangezve otomatiki mushure mekugadzirisa kwapera uye umo mamodhi anotevera aripo, "hazvina" default pasina reboot, "kana-yakachinjwa" iyo inotangazve mushure mekuvandudza uye «pazvinenge zvichidiwa» iyo inotangazve kana ichidiwa neshanduko dzakaiswa (semuenzaniso, mushure mekuisa kernel kana systemd update). Kuti udzime pane kuti utangezve, iyo "-poweroff" parameter inopihwa.

Imwe yeshanduko inomira pachena ndeye muNetworkManager, mairi akawedzerwa rutsigiro rwe "no-yyyy" sarudzo mune resolv.conf, iyo inodzima DNS mibvunzo yeAAAA marekodhi, pamwe nekuwedzera rutsigiro rwe "lacp_active" sarudzo kudzora kugadziridzwa kweLACPDU mafuremu uye kuita kutangazve NetworkManager mushure mekutangazve dbus sevhisi.

Kunze kwaizvozvo, OpenSSH yatanga kurerutsa SHA-1 hash-based algorithms ichifarira SHA-2. Kana sevha isina SHA-1 yakavakirwa makiyi, sshd ikozvino ichashandisa SHA-2 kusimbisa makiyi ekugamuchira, izvo zvinogona kukonzera kusawirirana neRHEL 8 uye vatengi vekare.

OpenSSL inowedzera tsigiro yekugadzirisa maparamendi eBrainpool's akachengeteka elliptic curves uye inopa dziviriro kubva kuRSA decryption kurwiswa zvichienderana nenguva yekushanda uchishandisa akasiyana eiyo nzira yeBleichenbacher.

SELinux yakawedzera iyo virt_qemu_ga_run_unconfined sarudzo, iyo inobvumira iyo qemu-ga maitiro kuita mirairo, senge mount, mune isina-yakachengeteka modhi iyo yaive yekuzvarwa yakarambidzwa neSELinux.

Nezve dzimwe shanduko idzo buda pane iyi vhezheni itsva:

• Kuitwa kweSCTP (Stream Control Transmission Protocol) uye MPTCP (Multipath TCP) mapuroteni akatakurwa kubva kune yazvino vhezheni yeLinux kernel.
• Iyo ARM64 chikuva inopa rutsigiro rwakazara kumakamera ane USB interface, isina waya (Wi-Fi) uye Bluetooth adapter.
• Tsigiro yakazara inopihwa Intel Arc A-Series discrete mifananidzo yemakadhi (Alchemist kana DG2).
  Iyo eBPF subsystem kuisirwa inowiriraniswa neLinux 6.3 kernel.
• systemd-udevd yakagadziridzwa kuti ibvumire mazita echigarire eInfiniBand network interfaces.
• Postfix inosanganisira kugona kutarisa marekodhi eDNS SRV kuti uone muiti uye chiteshi cheiyo mail server iyo ichashandiswa kutumira mameseji.
• FUSE3 inowedzera kugona kukanganisa dhairekitori rekupinda pasina kuburitsa otomatiki mapoinzi ane chekuita nekupinda ikoko.
• Kuchengetedza kubva kuSpecter v2 kurwiswa kune chekuita nekufungidzira kuraira kuuraya, AutoIBRS modhi yakawedzerwa, yakatsigirwa ne AMD CPUs kutanga nemhuri yeEPYC 9004 Genoa.
• Kune midziyo, zvinokwanisika kushandisa chaiwo machipisi kuchengetedza cryptographic kiyi (vTPM), inoshandiswa pahwaro hweyakajairika TPM yemuviri (Trusted Platform Module).
• LVM yakawedzera tsigiro yevmcore inonzwisisika partitions yekuraswa kwepakati inogadzirwa neiyo kdump subsystem.
• Yakawedzera basa rehurongwa kubata nekuisa systemd mayunitsi.
• Yakawedzera basa rehurongwa kuisa, kugadzirisa, kubata, uye kumhanya iyo PostgreSQL DBMS.
• Tsigiro yekutsanangura, kuchinja, uye kudzima ipsets yakawedzerwa kune firewall system chimiro.
• Yakawedzera tsigiro yezvishandiso zvekushandisa zvechizvarwa chechina Intel Xeon Scalable processors.
• Podman inowedzera tsigiro yemidziyo yakamanikidzwa uchishandisa zstd algorithm.
• Yakawedzera kugona kushandisa maQuadlets kuti agadzire otomatiki masevhisi kubva kune tsananguro yemidziyo.
• Kuwedzera masimba emasumbu uye masystem-anoshivirira masisitimu: Yakawedzerwa rutsigiro rwekutsiva mapoka ekuparadzanisa asina zvikamu zvemuviri kune LVM activation agent.
• RHEL Image Builder yakawedzera kugona kugadzira mafaira eOVA eVMware VSphere.
  Sarudzo nyowani "-ipv4-dns-search" uye "-ipv6-dns-search" dzawedzerwa.
• Yakawedzerwa rutsigiro rwekubhoti muUEFI modhi kune AMI mifananidzo yeAWS EC2 makore nharaunda.
• Yakawedzera chiitiko chekuyedza chehardware kukwidziridza IPsec nekufambisa packet encapsulation mashandiro kunetiweki kadhi kadhi.
• Kuitwa kwekuyedza kwe kTLS (kernel-level TLS) inowiriraniswa nekernel 6.3.
• Yakawedzera rutsigiro rwekushandisa kTLS kukurumidza GnuTLS.

Chekupedzisira, kana iwe uchifarira kuziva zvakawanda nezvazvo, unogona kutarisa ruzivo Mune inotevera chinongedzo.

Tora Red Hat Enterprise Linux

Yakagadzirira-kushandisa yekuisa mifananidzo ichakurumidza kuwanikwa kune vakanyoresa vashandisi veRed Hat Mutengi Portal (unogona zvakare kushandisa CentOS Stream 9 iso mifananidzo yekuyedza kushanda).