GCC 13 was added to the compiler packages available in #OracleSolaris 11.4.63, alongside GCC versions 7, 10, 11, & 12, and LLVM/clang 13.
GCC 10 is slated for removal soon, in an upcoming SRU. Users of the gccgo compiler need to note that the removal of GCC 10 will also include the removal of the libgo.so.16 library used by Go programs compiled with GCC 10, and that they thus will need to recompile any such programs with a newer version of gccgo before upgrading to the SRU that removes it.
#OracleSolaris 11.4.63 has added support for setting the DNS "search" parameter via dhcp4, matching the existing support in dhcp6. The snoop command was also updated to decode dhcp4 option 119 to aid in troubleshooting.
The prstat command in #OracleSolaris 11.4.63 now takes "sys" and "usr" as arguments for the -s option to sort by just those components of the CPU usage, instead of the combined sys+usr CPU usage previous versions could sort by.
#OracleSolaris 11.4.63 offers a new optional "strict" mode for Live Memory Reconfiguration (Memory LZR) in Kernel Zones which treats the Memory LZR operation as successful only if the final memory configuration matches the requested one. This can be set in the capped-memory:memlzr property.
A new "nscfg adldap" subcommand was added in #OracleSolaris 11.4.63 to simplify the process of setting up a Solaris system to use an Active Directory server as the source of user information via LDAP.
System admins sometimes need to ensure that "long running" jobs have completed before a reboot. To support this, #OracleSolaris 11.4.63 has added the ability for an authorized administrator to temporarily disable system reboot/halt by adding a new maintenance type to the existing 'sysadm maintain' subcommand.
Further information can be found in the updated versions of the halt(8), init(8), shutdown(8), and sysadm(8) man pages.
The packages network/legacy-remote-utilities and service/network/legacy-remote-utilities have been split in #OracleSolaris 11.4.63 to allow better control over which servers and clients are installed, and to allow sites to remove the insecure legacy BSD sockets software while retaining the ONC-RPC software.
These packages are no longer included in the system provided install groups, so sites that still need these will need to add them to the list of packages to install on fresh installations.
#OracleSolaris 11.4.63 extends the per-file audit record for files accessed on mounted kerberized NFS shares to add the Kerberos principal to the subject token which holds information about the user.
The 'sxadm status' command in #OracleSolaris 11.4.63 has added two new extensions that it reports on.
BTC_NO is reported for AMD CPUs that are not susceptible to the Branch Type Confusion vulnerability (CVE-2022-23825).
SMEP is reported for Intel & AMD CPUs which have enabled Supervisor Mode Execution Prevention. (SMEP has been enabled since Oracle Solaris 11.1 on Intel's Ivy Bridge and later processors, but was not previously reported by the sxadm command. AMD support came later.)
#OracleSolaris 11.4.63 adds a "DELEG" column to the output of 'zfs help -l properties' to show if the property is delegatable or not, as an easier alternative to searching for each #ZFS property in the zfs_allow(8) man page.
#ZFS retention has two new properties to offer new configuration choices in #OracleSolaris 11.4.63.
The new "retention.policy.onexpiry" property allows specifying what happens at the end of the retention period - automatic deletion, continued hold, or being left to allow manual deletion.
The new "retention.policy.changeacl" allows changing non-write permissions/ACLs on retained files, for sites who need to be able to change who can read the file during the retention period.
My personal contributions to this SRU cycle included the legacy network client/server package split mentioned above; the removals of aalib, Caribou, libxklavier, libmusicbrainz, libsass and sassc; fixing getpwnam(NULL) not to return an uninitialized pointer, and fixing gdm not to call getpwnam(NULL); an editing pass over the section 7 man pages; and making the killall(8) man page describe what the command actually does and to stop claiming that shutdown(8) calls it directly.