RHBA-2022:1896 - Bug Fix Advisory

Topic

An update for rhel-system-roles is now available for Red Hat Enterprise Linux 8.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
• Red Hat Enterprise Linux Server - AUS 8.8 x86_64
• Red Hat Enterprise Linux Server - AUS 8.6 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
• Red Hat Enterprise Linux Server - TUS 8.8 x86_64
• Red Hat Enterprise Linux Server - TUS 8.6 x86_64
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

• BZ - 1897565 - [Network] RFE: Support ignoring default gateway retrieved by DHCP/IPv6-RA
• BZ - 1967321 - metrics role can't be re-run if the Grafana admin password has been changed
• BZ - 1974000 - linux-system-roles.selinux fails linit rules role-name and unnamed-task
• BZ - 1979714 - sshd - should detect FIPS mode and handle tasks correctly in FIPS mode
• BZ - 1985022 - NBDE client system role does not support servers with static IP addresses
• BZ - 1993311 - [RFE] support WPA3 Simultaneous Authentication of Equals(SAE)
• BZ - 1993379 - [RFE] support wifi Enhanced Open (OWE)
• BZ - 2005727 - Logging - Performance improvement
• BZ - 2006081 - Vendoring non-builtin modules for Ansible 2.11+
• BZ - 2006231 - Replace `# {{ ansible_managed }}` with `{{ ansible_managed | comment }}`
• BZ - 2008931 - [RFE] Add more bonding options to rhel-system-roles.network
• BZ - 2010327 - [RFE] logging - Add user and password
• BZ - 2011808 - RHEL System Roles Automation Hub site should link to downstream/Red Hat links
• BZ - 2012316 - Support ansible-core 2.11+
• BZ - 2016511 - RFE: Add support for cached volumes (lvm-only)
• BZ - 2016514 - RFE: Add support for RAID volumes (lvm-only)
• BZ - 2021661 - Please include "cockpit" role
• BZ - 2021678 - logging role missing quotes for immark module interval value
• BZ - 2021682 - add regenerate-all to the dracut command
• BZ - 2021683 - certificates: "group" option keeps certificates inaccessible to the group
• BZ - 2021685 - Update network system role to reflect that network teaming is deprecated in RHEL 9
• BZ - 2022458 - [RFE] - Firewall RHEL System Role should be able to set default zone
• BZ - 2029605 - kdump: support reboot required and reboot ok
• BZ - 2029614 - ssh/tests_all_options.yml: "assertion": "'StdinNull yes' in config.content | b64decode ", failure
• BZ - 2031521 - RFE: Support Routing Tables in static routes in Network Role
• BZ - 2034908 - Failure to activate connection: nm-manager-error-quark: No suitable device found for this connection
• BZ - 2040038 - sshd system role does not add ansible_manged variable contents to /etc/ssh/sshd_config file
• BZ - 2040812 - Logging role "logging_purge_confs" option not properly working
• BZ - 2041627 - Set DNS search setting only for enabled IP protocols
• BZ - 2041635 - [RFE] ha_cluster - Support for creating resource constraints (Location, Ordering, etc.)
• BZ - 2042541 - ensure zone exists and can be used in subsequent operations
• BZ - 2044657 - Postfix RHEL System Role should provide the ability to replace config and reset configuration back to default
• BZ - 2047504 - kernel_settings role should use ansible_managed in its configuration file
• BZ - 2048057 - incorrectly missing netaddr on a controller
• BZ - 2049747 - ha_cluster - set permissions for haclient group
• BZ - 2054363 - tlog - consistently use ansible_managed in configuration files managed by role
• BZ - 2054364 - certificate - should consistently use ansible_managed in hook scripts
• BZ - 2054365 - vpn - consistently use ansible_managed in configuration files managed by role
• BZ - 2057172 - ensure target changes take effect immediately
• BZ - 2057645 - metrics - consistently use ansible_managed in configuration files managed by role
• BZ - 2057656 - network - consistently use ansible_managed in configuration files managed by role
• BZ - 2057661 - postfix - consistently use ansible_managed in configuration files managed by role
• BZ - 2058655 - Metrics role, with "metrics_from_mssql" option does not configure /var/lib/pcp/pmdas/mssql/mssql.conf on first run
• BZ - 2058772 - kernel_settings error configobj not found on RHEL 8.6 managed hosts
• BZ - 2064388 - bond: fix typo in supporting the infiniband ports in active-backup mode
• BZ - 2064396 - pytest failed when running with nm providers in the rhel-8.5 beaker machine

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/index