OmniOS Community Edition releases r151026m, r151024am & r151022bk are now available.

r151026

Bug Fixes

  • illumos Issue 7941 cannot use crypto lofi on a block/character device
  • Newer versions of the iproute2 utilities fail in an lx zone with ('DONE truncated', 'Dump terminated')

Other Changes

  • Automatic naming is now supported for boot environments created during package operations. This is configured via the new auto-be-name image property which specifies a template for the new name; see the man page for the pkg command for more information and examples. A suggested property value is omnios-r%r which results in BE names such as omnios-r151026m:

    # pkg set-property auto-be-name omnios-r%r
    # pkg update
    ...
    A clone of r151026 exists and has been updated and activated.
    On the next boot the Boot Environment omnios-r151026m will be
    mounted on '/'.  Reboot when ready to switch to this updated BE.
    

r151024

Bug Fixes

r151022

Security fixes

  • Kernel Page Table Isolation (KPTI) feature from Joyent. This adds protection against the Meltdown Intel CPU vulnerability announced early in 2018. See https://omniosce.org/info/kpti for details.
  • Kernel update to protect against the Lazy FPU vulnerability

Bug Fixes

  • Newer versions of the iproute2 utilities fail in an lx zone with ('DONE truncated', 'Dump terminated')
  • illumos Issue 8806 xattr_dir_inactive() releases used vnode with kernel panic
  • illumos Issue 9317 FMD crashes with zero-length allocation

Other Changes

  • New ::sec mdb command to summarise protection against CPU vulnerabilities

For more details, see https://omniosce.org/releasenotes

Any problems or questions, please get in touch via the lobby or #omnios on Freenode