Changelog for libsss_sudo-2.2.0-3.fc29.i686.rpm :

* Fri Jul 05 2019 Jakub Hrozek - 2.2.0-3- Resolves: rhbz#1721636 - sssd-kcm calls sssd-genconf which triggers nscd warning
* Fri Jul 05 2019 Jakub Hrozek - 2.2.0-2- Resolves: rhbz#1724717 - sssd-proxy crashes resolving groups with no members
* Mon Jun 17 2019 Michal Židek - 2.2.0-1- Update to latest released upstream version- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_2_2_0.html
* Wed Mar 27 2019 Michal Židek - 2.1.0-2- Resolves: upstream#3867 - [RFE] Need an option in SSSD so that it will skip GPOs that have groupPolicyContainers unreadable by SSSD.- CVE-2018-16838
* Wed Mar 27 2019 Michal Židek - 2.1.0-1- Update to latest released upstream version- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_2_1_0.html
* Wed Dec 12 2018 Adam Williamson - 2.0.0-5- Resolves: rhbz#1654537 - sbus: use 120 second default timeout
* Wed Aug 29 2018 Michal Židek - 2.0.0-4- Resolves: upstream#3821 - crash related to sbus_router_destructor()- Resolves: upstream#3810 - sbus2: fix memory leak in sbus_message_bound_ref- Resolves: upstream#3819 - sssd only sets the SELinux login context if it differs from the default- Resolves: upstream#3807 - The sbus codegen script relies on \"python\" which might not be available on all distributions- Resolves: upstream#3820 - sudo: search with lower cased name for case insensitive domains- Resolves: upstream#3701 - [RFE] Allow changing default behavior of SSSD from an allow-any default to a deny-any default when it can\'t find any GPOs to apply to a user login.- Resolves: upstream#3828 - Invalid domain provider causes SSSD to abort startup- Resolves: upstream#3500 - Make sure sssd is a replacement for pam_pkcs11 also for local account authentication- Resolves: upstream#3812 - sssd 2.0.0 segfaults on startup- Resolves: upstream#3826 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: upstream#3827 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: upstream#3830 - Printing incorrect information about domain with sssctl utility- Resolves: upstream#3489 - p11_child should work wit openssl1.0+- Resolves: upstream#3750 - [RFE] man 5 sssd-files should mention necessary changes in nsswitch.conf- Resovles: upstream#3650 - RFE: Require smartcard authentication- Resolves: upstream#3334 - sssctl config-check does not check any special characters in domain name of domain section- Resolves: upstream#3849 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: upstream#3855 - session not recording for local user when groups defined- Resolves: upstream#3802 - Reuse sysdb_error_to_errno() outside sysdb- Related: upstream#3493 - Remove the pysss.local interface
* Wed Aug 29 2018 Michal Židek - 2.0.0-3- Resolves: rhbz#1622760 - Console login as FreeIPA domain user fails in current Fedora Rawhide / 29
* Wed Aug 29 2018 Michal Židek - 2.0.0-2- Fix linking issues
* Tue Aug 14 2018 Michal Židek - 2.0.0-1- New upstream release 2.0.0
* Sat Jul 14 2018 Fedora Release Engineering - 1.16.2-6- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jul 02 2018 Miro Hrončok - 1.16.2-5- Rebuilt for Python 3.7
* Mon Jun 25 2018 Fabiano Fidêncio - 1.16.2-4- Related: upstream#941 - return multiple server addresses to the Kerberos locator plugin- Related: upstream#3652 - kdcinfo doesn\'t get populated for other domains- Resolves: upstream#3747 - sss_ssh_authorizedkeys exits abruptly if SSHD closes its end of the pipe before reading all the SSH keys- Resolves: upstream#3607 - Handle conflicting e-mail addresses more gracefully- Resolves: upstream#3754 - SSSD AD uses LDAP filter to detect POSIX attributes stored in AD GC also for regular AD DC queries- Related: upstream#3219 - [RFE] Regular expression used in sssd.conf not being able to consume an AATT-sign in the user/group name.- Resolves: upstream#3766 - CVE-2018-10852: information leak from the sssd-sudo responder
* Thu Jun 21 2018 Fabiano Fidêncio - 1.16.2-3- Resolves: rhbz#1591804 - something keeps /lib/libnss_systemd.so.2 open on minimal appliance image, breaking composes
* Tue Jun 19 2018 Miro Hrončok - 1.16.2-2- Rebuilt for Python 3.7
* Mon Jun 11 2018 Fabiano Fidêncio - 1.16.2-1- New upstream release 1.16.2- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_2.html
* Thu May 24 2018 Fabiano Fidêncio - 1.16.1-9- Related: upstream#3742 - Change of: User may not run sudo --> a password is required
* Thu May 17 2018 Fabiano Fidêncio - 1.16.1-8- Revert 589d1a48 as the builders are back to f27
* Wed May 16 2018 Fabiano Fidêncio - 1.16.1-7- Related: upstream#3436 - Certificates used in unit tests have limited lifetime- Add: \"ExcludeArch: armv7hl\"
* Mon May 14 2018 Fabiano Fidêncio - 1.16.1-6- Related: upstream#3436 - Add openssl, openssh and nss-tools as BuildRequires
* Mon May 14 2018 Fabiano Fidêncio - 1.16.1-5- Related: upstream#3436 - Certificates used in unit tests have limited lifetime- Resolves: upstream#3725 - sssd not honoring dyndns_server if the DNS update process is terminated with a signal- Resolves: upstream#3726 - SSSD with ID provider \'ad\' should give a warning in case the ldap schema is manually changed to something different than \'ad\'.- Related: upstream#2653 - Group renaming issue when \"id_provider = ldap\" is set.- Resolves: upstream#3719 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process- Resolves: upstream#3728 - Request by ID outside the min_id/max_id limit of a first domain does not reach the second domain- Resolves: upstream#3731 - nss_clear_netgroup_hash_table(): only remove entries from the hash table, do not free them- Resolves: upstream#3595 - ID override GID from Default Trust View is not properly resolved in case domain resolution order is set
* Sat May 05 2018 Fabiano Fidêncio - 1.16.1-4- Resolves: rhbz#1574778 - sssd fails to download known_hosts from freeipa
* Fri Apr 27 2018 Fabiano Fidêncio - 1.16.1-3- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change- Resolves: upstream#3558 - sudo: report error when two rules share cn- Tone down shutdown messages for socket activated responders- IPA: Qualify the externalUser sudo attribute- Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15- Resolves: upstream#3402 - Support alternative sources for the files provider- Resolves: upstream#3646 - SSSD\'s GPO code ignores ad_site option- Resolves: upstream#3679 - Make nss netgroup requests more robust- Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured- Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing- Improve docs/debug message about GC detection- Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound?- Resolves: upstream#2653 - Group renaming issue when \"id_provider = ldap\" is set.- Document which principal does the AD provider use- Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs- Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM- Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Add gcc to build dependencies
* Fri Mar 30 2018 Fabiano Fidêncio - 1.16.1-2- Resolves: upstream#3573 - sssd won\'t show netgroups with blank domain- Resolves: upstream#3660 - confdb_expand_app_domains() always fails- Resolves: upstream#3658 - Application domain is not interpreted correctly- Resolves: upstream#3687 - KCM: Don\'t pass a non null terminated string to json_loads()- Resolves: upstream#3386 - KCM: Payload buffer is too small- Resolves: upstream#3666 - Fix usage of str.decode() in our tests- A few KCM misc fixes
* Fri Mar 09 2018 Fabiano Fidêncio - 1.16.1-1- New upstream release 1.16.1- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html
* Tue Feb 20 2018 Lukas Slebodnik - 1.16.0-13- Resolves: upstream#3621 - backport bug found by static analyzers
* Wed Feb 14 2018 Fabiano Fidêncio - 1.16.0-12- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set- Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE
* Wed Feb 07 2018 Lukas Slebodnik - 1.16.0-11- Resolves: upstream#3618 - selinux_child segfaults in a docker container
* Tue Feb 06 2018 Lukas Slebodnik - 1.16.0-10- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl
* Thu Jan 25 2018 Igor Gnatenko - 1.16.0-9- Fix systemd executions/requirements
* Thu Jan 25 2018 Lukas Slebodnik - 1.16.0-8- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS
* Thu Jan 11 2018 Lukas Slebodnik - 1.16.0-7- Fix building of sssd-nfs-idmap with libnfsidmap.so.1
* Thu Jan 11 2018 Björn Esser - 1.16.0-6- Rebuilt for libnfsidmap.so.1
* Mon Dec 04 2017 Lukas Slebodnik - 1.16.0-5- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout- Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps- Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530- Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds- Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD- Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed- Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system- Backport few upstream features from 1.16.1
* Tue Nov 21 2017 Lukas Slebodnik - 1.16.0-4- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next
* Fri Nov 17 2017 Jakub Hrozek - 1.16.0-3- Backport extended NSS API from upstream master branch
* Fri Nov 03 2017 Lukas Slebodnik - 1.16.0-2- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade
* Fri Oct 20 2017 Lukas Slebodnik - 1.16.0-1- New upstream release 1.16.0- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html
* Wed Oct 11 2017 Lukas Slebodnik - 1.15.3-5- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket
* Mon Sep 11 2017 Lukas Slebodnik - 1.15.3-4- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket- Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data- Resolves: upstream#3485 - getsidbyid does not work with 1.15.3- Resolves: upstream#3488 - SUDO doesn\'t work for IPA users on IPA clients after applying ID Views for them in IPA server- Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied
* Fri Sep 01 2017 Lukas Slebodnik - 1.15.3-3- Backport few upstream patches/fixes
* Thu Jul 27 2017 Fedora Release Engineering - 1.15.3-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Tue Jul 25 2017 Lukas Slebodnik - 1.15.3-1- New upstream release 1.15.3- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html