RHBA-2022:2443 - Bug Fix Advisory

Topic

New rhel-system-roles packages are available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.0 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.0 x86_64
• Red Hat Enterprise Linux Server - AUS 9.4 x86_64
• Red Hat Enterprise Linux Server - AUS 9.2 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.0 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.0 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.0 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x

Fixes

• BZ - 1978773 - [Network] RFE: Support ignoring default gateway retrieved by DHCP/IPv6-RA
• BZ - 1990490 - [RFE] logging - Add user and password
• BZ - 1993304 - [RFE] support WPA3 Simultaneous Authentication of Equals(SAE)
• BZ - 1993377 - [RFE] support wifi Enhanced Open (OWE)
• BZ - 1999162 - network role: Allow to specify PCI address to configure profiles
• BZ - 1999770 - Update network system role to reflect that network teaming is deprecated in RHEL 9
• BZ - 2004303 - Logging - Performance improvement
• BZ - 2004899 - Set DNS search setting only for enabled IP protocols
• BZ - 2006076 - Vendoring non-builtin modules for Ansible 2.11+
• BZ - 2006230 - Replace `# {{ ansible_managed }}` with `{{ ansible_managed | comment }}`
• BZ - 2012298 - Support ansible-core 2.11+
• BZ - 2012342 - RHEL System Roles Automation Hub site should link to downstream/Red Hat links
• BZ - 2016517 - RFE: Add support for cached volumes (lvm-only)
• BZ - 2016518 - RFE: Add support for RAID volumes (lvm-only)
• BZ - 2021025 - certificates: "group" option keeps certificates inaccessible to the group
• BZ - 2021028 - Please include "cockpit" role
• BZ - 2021675 - linux-system-roles.selinux fails linit rules role-name and unnamed-task
• BZ - 2021676 - logging role missing quotes for immark module interval value
• BZ - 2021681 - add regenerate-all to the dracut command
• BZ - 2022461 - [RFE] - Firewall RHEL System Role should be able to set default zone
• BZ - 2024775 - ensure zone exists and can be used in subsequent operations
• BZ - 2029427 - ssh/tests_all_options.yml: "assertion": "'StdinNull yes' in config.content | b64decode ", failure
• BZ - 2029463 - timesync: Failure related to missing ntp/ntpd package/service on RHEL-9 host
• BZ - 2029602 - kdump: support reboot required and reboot ok
• BZ - 2029634 - sshd - should detect FIPS mode and handle tasks correctly in FIPS mode
• BZ - 2038957 - Failure to activate connection: nm-manager-error-quark: No suitable device found for this connection
• BZ - 2039106 - Logging role "logging_purge_confs" option not properly working
• BZ - 2041632 - metrics role can't be re-run if the Grafana admin password has been changed
• BZ - 2041634 - [RFE] ha_cluster - Support for creating resource constraints (Location, Ordering, etc.)
• BZ - 2044408 - sshd system role does not add ansible_manged variable contents to /etc/ssh/sshd_config file
• BZ - 2047506 - kernel_settings role should use ansible_managed in its configuration file
• BZ - 2049754 - ha_cluster - set permissions for haclient group
• BZ - 2049798 - RFE: Support Routing Tables in static routes in Network Role
• BZ - 2054367 - tlog - consistently use ansible_managed in configuration files managed by role
• BZ - 2054368 - certificate - should consistently use ansible_managed in hook scripts
• BZ - 2054369 - vpn - consistently use ansible_managed in configuration files managed by role
• BZ - 2054435 - [RFE] Add more bonding options to rhel-system-roles.network
• BZ - 2057164 - ensure target changes take effect immediately
• BZ - 2057647 - metrics - consistently use ansible_managed in configuration files managed by role
• BZ - 2057657 - network - consistently use ansible_managed in configuration files managed by role
• BZ - 2057662 - postfix - consistently use ansible_managed in configuration files managed by role
• BZ - 2058756 - kernel_settings error configobj not found on RHEL 8.6 managed hosts
• BZ - 2058777 - Metrics role, with "metrics_from_mssql" option does not configure /var/lib/pcp/pmdas/mssql/mssql.conf on first run
• BZ - 2058780 - Postfix RHEL System Role should provide the ability to replace config and reset configuration back to default
• BZ - 2064391 - bond: fix typo in supporting the infiniband ports in active-backup mode
• BZ - 2064401 - pytest failed when running with nm providers in the rhel-8.5 beaker machine

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.0_release_notes/index