RHBA-2024:2237 - Bug Fix Advisory

Topic

An update for ansible-freeipa is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
• Red Hat Enterprise Linux Server - AUS 9.4 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

• RHEL-13744 - [ansible-freeipa] Rebase to latest version for RHEL-9.4
• RHEL-16680 - [ansible-freeipa] Unable to remove group ID override from ID view without using 'continue: true'.
• RHEL-16934 - [RFE] [ansible-freeipa] New idview module
• RHEL-16937 - [RFE] [ansible-freeipa] New idoverridegroup module
• RHEL-16939 - [RFE] [ansible-freeipa] New idp module
• RHEL-16942 - [RFE] [ansible-freeipa] New idoverrideuser module
• RHEL-13758 - [ansible-freeipa] Add missing support for rename in ipagroup module
• RHEL-17954 - [ansible-freeipa] The IDP module does not support the modification of IDP options (auth_uri, dev_auth_uri, etc..)
• RHEL-17957 - [ansible-freeipa] The IDP module does not support resetting IDP options like auth_uri, dev_auth_uri, etc.
• RHEL-19123 - [ansible-freeipa] ipauser is not idempotent when random is defined
• RHEL-19130 - [ansible-freeipa] ipasudorule: Allow setting groups for runasuser.
• RHEL-19132 - [ansible-freeipa] Idempotency fixes
• RHEL-19134 - [ansible-freeipa] ipadnszone: Add support for per-zone privilege delegation
• RHEL-19136 - [ansible-freeipa] Handle data type or empty string in module_utils
• RHEL-4962 - [ansible-freeipa] IPA user module lacks the "rename" field.

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index