RHBA-2024:2227 - Bug Fix Advisory

Topic

An update for rhel-system-roles is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
• Red Hat Enterprise Linux Server - AUS 9.6 x86_64
• Red Hat Enterprise Linux Server - AUS 9.4 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

• RHEL-13760 - [RFE] Metrics system role support for configuring PMIE webhooks
• RHEL-15037 - fix: check that logging_max_message_size is set, not rsyslog_max_message_size
• RHEL-15439 - feat: Add support for general queue and general action parameters
• RHEL-15870 - fix: Use `ignore_selinux_state` module option
• RHEL-15910 - [RFE] HA Cluster system role should be able to enable Resilient Storage repository
• RHEL-15932 - feat: Add support for the global config option preserveFQDN with a new logg?
• RHEL-16212 - feat: Support for creating volumes without a FS
• RHEL-16541 - feat: Import code for fapolicyd system role
• RHEL-1683 - Ansible RHEL network system role issue with ipv6.routing-rules the prefix length for 'from' cannot be zero"
• RHEL-17668 - feat: Add sssd custom settings
• RHEL-3253 - RHEL for Edge support in system roles
• RHEL-3353 - fix: retry read of kexec_crash_size
• RHEL-17875 - high-availability firewall service is not added on qdevice node
• RHEL-1535 - Basic support for creating shared logical volumes
• RHEL-16976 - rhc: support RHEL 7 managed nodes
• RHEL-18962 - feat: Enable support for Postgresql 16
• RHEL-19040 - fix: no longer use "item" as a loop variable
• RHEL-19043 - fix: Print an error message when module to be created doesn't exist
• RHEL-19046 - fix: avoid conf of RatelimitBurst when RatelimitInterval is zero
• RHEL-19241 - fix: add no_log: true for tasks that can log secret data
• RHEL-16336 - Create bootloader role (MVP)
• RHEL-5346 - Use .README.html in spec instead of generating it
• RHEL-5972 - ansible-sshd Manage SSH certificates
• RHEL-21529 - [RHEL-9.4] WARNING: lvmlockd process is not running.\n Global lock failed: check that lvmlockd is running
• RHEL-15909 - keylime_server role won't detect registrar start failure
• RHEL-16974 - rhc: new rhc_insights.ansible_host parameter
• RHEL-21117 - feat: Add support for ForwardToSyslog
• RHEL-21133 - feat: Add SSSD parameters support
• RHEL-21382 - feat: add ad_integration_preserve_authselect_profile
• RHEL-21401 - fix: name of volume quadlet service should be basename-volume.service
• RHEL-22309 - fix: cast secret data to string in order to allow JSON valued strings
• RHEL-5274 - PostgreSQL system role: unable to install PostgreSQL version 15 on RHEL 9
• RHEL-23497 - [RHEL9]tests_lvm_auto_size_cap_nvme_generated failed at "Assert expected size is actual size"
• RHEL-22228 - user linger needed before secrets
• RHEL-22106 - [RFE] Setting cluster members' attributes.
• RHEL-25508 - fix: Allow tangd socket override directory to be managed outside of the role
• RHEL-16552 - new system role for storage snapshot management (lvm, etc.)
• RHEL-16964 - rhc: new rhc_insights.display_name parameter

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index