RHEA-2023:2246 - Product Enhancement Advisory

Topic

An update for rhel-system-roles is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2 x86_64
• Red Hat Enterprise Linux Server - AUS 9.4 x86_64
• Red Hat Enterprise Linux Server - AUS 9.2 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x

Fixes

• BZ - 2100559 - network role should support running tests with ANSIBLE_GATHERING=explicit
• BZ - 2119102 - Add parameters shared_key_content, ike, esp, type, leftid, rightid
• BZ - 2123594 - [RHEL9 system role] storage role vdo tests failed about "VDO deduplication is off but it should not"
• BZ - 2126959 - must handle clevis-luks-askpass and clevis-luks-askpass@ systemd unit names
• BZ - 2128467 - [RHEL9] disks_needed need to be set for the raid test cases
• BZ - 2128843 - add support for the 'local' parameter
• BZ - 2129401 - Unexpected templating type error - expected str instance, int found
• BZ - 2130010 - [RFE] ha_cluster: convert ha_cluster role to use firewall, selinux and certificate role
• BZ - 2130329 - [RFE] postfix: convert postfix role to use firewall and selinux role
• BZ - 2130344 - [RFE] vpn: convert vpn role to use firewall and selinux role
• BZ - 2130357 - [RFE] logging: convert logging role to use firewall, selinux role, and certificate role
• BZ - 2130969 - Sync on final OpenSSH option name RequiredRSASize in ssh and sshd roles [rhel-9.2.0]
• BZ - 2131293 - Support looking up named route table in routing rule
• BZ - 2133528 - [RFE] metrics: convert metrics role to use firewall and selinux role
• BZ - 2133858 - [RFE] Support the DNS priority
• BZ - 2133930 - [RFE] nbde_server: convert nbde_server role to use firewall and selinux role
• BZ - 2134202 - [RFE] Support setting the metric of the default route for initscripts provider
• BZ - 2137663 - [RFE] cockpit: convert cockpit role to use firewall, selinux role, and certificate role
• BZ - 2140795 - [RFE] new role to support AD integration, join to AD domain
• BZ - 2140804 - Allow quorum device configuration
• BZ - 2141330 - [RFE] New role for Red Hat subscription management, insights management
• BZ - 2143246 - [RHEL9] ansible.parsing.yaml.objects.AnsibleUnicode object' has no attribute 'bytes'
• BZ - 2143427 - [RFE] podman - role for managing podman containers and systemd
• BZ - 2143768 - Support cloned MAC address
• BZ - 2143816 - ha_cluster - use no_log in tasks looping over pot. secret parameters
• BZ - 2149678 - Synchronize automation-related changes from Fedora spec file
• BZ - 2153030 - Allow enabled SBD on disabled cluster
• BZ - 2153043 - Unconditionally enable the files provider
• BZ - 2153660 - [RHEL9] tests_create_thinp_then_remove_scsi_generated.yml failed at "assertion": "(storage_test_expected_size|int - storage_test_actual_size.bytes)|abs / storage_test_expected_size|int < 0.01"
• BZ - 2160152 - managing modules is not idempotent
• BZ - 2165175 - New role - journald - manage systemd-journald
• BZ - 2167528 - Fix stonith watchdog timeout
• BZ - 2168735 - [RHEL 9] RedHat Role rhel-system-roles.network should route traffic via correct bond

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index