Speculative-Execution Mitigation

December 2024
Major Updates and Changes in AIX 7.3.3

Speculative-Execution Mitigation:

• Enhanced support for mitigating speculative-execution vulnerabilities using new services like cpu_context_barrier and cpu_speculation_barrier.

System Requirements:

• Updated minimum and recommended system requirements for running AIX 7.3.3.

Enhanced Journaled File System (JFS2):

• Increased maximum capacity of the Enhanced Journaled File System (JFS2) file and file system to 128 TB.

Security Enhancements:

• Improved security features, including support for Diffie Hellman (DH) group 20 and 21 in IPsec.
• New audit events for IPsec operations and enhanced auditing in the Live Update environment.

Live Update Improvements:

• Added support for Live Library Update (LLU) to eliminate downtime during AIX updates.
• New tunable parameters for better control and configuration during Live Updates.

Kernel and System Services:

• New di_free_minpc field in the d_info structure for better kernel service management.
• Enhanced support for LV encryption during preservation and migration installations.

Networking Enhancements:

• Improved IPsec support with new tunable parameters and auto-migration features.

Performance Tuning:
New tunable parameters for better performance management, including AIX_CWD_CACHE and LDR_CNTRL.

Device Management:

• Added sanitize operation for NVMe drives to ensure secure data deletion.

Programming and Development:

• New subroutines and environment variables for better programming support, including timespec_get and LARGE_PAGE_EXCLUSIVE.

Documentation Updates:

• Comprehensive updates to the AIX 7.3.3 documentation, including new pages and enhanced information on various topics.

Enhanced System Management:

• Improved system management capabilities with new tools and features for better control and monitoring.

Storage Management:
Enhanced storage management features, including support for larger file systems and improved data integrity.

Virtualization Enhancements:

• Improved support for virtualization technologies, including better integration with cloud environments.

User Experience Improvements:

• Enhanced user interface and user experience with more intuitive controls and better accessibility features.

Compatibility and Interoperability:

• Improved compatibility with other systems and software, ensuring seamless integration and interoperability.

Bug Fixes and Stability Improvements:

• Numerous bug fixes and stability improvements to enhance the overall reliability of the system.

Support for New Hardware:

• Added support for new hardware platforms and devices, ensuring compatibility with the latest technology.

Enhanced Monitoring and Reporting:

• Improved monitoring and reporting tools for better visibility into system performance and health.

Energy Efficiency:

• Enhanced energy efficiency features to reduce power consumption and improve sustainability.