Changelog for freeipa-server-dns-4.9.6-3.fc33.noarch.rpm :

* Thu Nov 11 2021 Alexander Bokovoy - 4.9.6-3- Hardening for CVE-2020-25717 part 2- Handle S4U for users from trusted domains
* Wed Nov 10 2021 Alexander Bokovoy - 4.9.6-2- Hardening for CVE-2020-25717- Generate SIDs for IPA users and groups by default- Verify MS-PAC consistency when it is generated or validated- Rebuild against samba-4.13.14- Resolves: rhbz#2021720- Synchronize with RHEL 8.5 patches for FreeIPA 4.9.6
* Tue Jun 29 2021 François Cami - 4.9.6-1- Upstream release FreeIPA 4.9.6
* Wed Mar 31 2021 Alexander Bokovoy - 4.9.3-1- Upstream release FreeIPA 4.9.3
* Fri Feb 26 2021 Alexander Bokovoy - 4.9.2-4- Rebuild against 389-ds and PKI to fix https://github.com/389ds/389-ds-base/issues/4609
* Tue Feb 23 2021 Alexander Bokovoy - 4.9.2-3- Only use python-platform on RHEL 8
* Mon Feb 15 2021 Alexander Bokovoy - 4.9.2-2- Fix ipatests dependency to python3-pexpect
* Mon Feb 15 2021 Alexander Bokovoy - 4.9.2-1- Upstream release FreeIPA 4.9.2
* Wed Jan 27 2021 Alexander Bokovoy - 4.9.1-1- Upstream release FreeIPA 4.9.1
* Tue Oct 13 2020 Alexander Bokovoy - 4.8.10-6- Handle sshd_config upgrade properly Fixes: rhbz#1887928
* Tue Sep 29 2020 Alexander Bokovoy - 4.8.10-5- Properly handle upgrade case when systemd-resolved is enabled
* Mon Sep 28 2020 Alexander Bokovoy - 4.8.10-4- Fix permissions for /etc/systemd/resolved.conf.d/zzz-ipa.conf- Add NetworkManager and systemd-resolved configuration files to backup
* Sun Sep 27 2020 Alexander Bokovoy - 4.8.10-3- Fix dependency between freeipa-selinux and freeipa-common- Resolves: rhbz#1883005
* Sat Sep 26 2020 Alexander Bokovoy - 4.8.10-2- Support upgrade F32 -> F33 with systemd-resolved
* Sat Sep 26 2020 Alexander Bokovoy - 4.8.10-1- Upstream release FreeIPA 4.8.10
* Fri Aug 21 2020 Alexander Bokovoy - 4.8.9-2- Backport fix for detecting older installations on upgrade
* Thu Aug 20 2020 François Cami - 4.8.9-1- Upstream release FreeIPA 4.8.9
* Mon Aug 03 2020 Alexander Bokovoy - 4.8.7-5- Make use of unshare+chroot in ipa-extdom-extop unittests to work against glibc 2.32
* Sat Aug 01 2020 Fedora Release Engineering - 4.8.7-4- Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Thu Jul 30 2020 Merlin Mathesius - 4.8.7-3- Conditional fixes for ELN to set krb5-kdb version appropriately
* Mon Jul 27 2020 Fedora Release Engineering - 4.8.7-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jun 10 2020 Alexander Bokovoy - 4.8.7-1- Upstream release FreeIPA 4.8.7
* Tue May 26 2020 Miro Hrončok - 4.8.6-2- Rebuilt for Python 3.9
* Fri Mar 27 2020 Alexander Bokovoy - 4.8.6-1- Upstream release FreeIPA 4.8.6
* Sat Mar 21 2020 Alexander Bokovoy - 4.8.5-2- Roll up post-release fixes from upstream- Move freeipa-selinux to be a dependency of freeipa-common
* Wed Mar 18 2020 Alexander Bokovoy - 4.8.5-1- Upstream release FreeIPA 4.8.5- Depend on selinux-policy-devel 3.14.6-9 for build due to a makefile issue in SELinux external policy support
* Tue Mar 03 2020 Alexander Bokovoy - 4.8.4-8- Support opendnssec 2.1- Resolves: #1809492
* Mon Feb 17 2020 François Cami - 4.8.4-7- Fix audit_as_req() callback usage- Resolves: #1803786
* Sat Feb 01 2020 Alexander Bokovoy - 4.8.4-6- Fix constraint delegation for krb5 1.18 update- Resolves: #1797096
* Tue Jan 28 2020 Fedora Release Engineering - 4.8.4-5- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Tue Jan 28 2020 Alexander Bokovoy - 4.8.4-4- Rebuild against krb5 1.18 beta
* Sun Jan 26 2020 Alexander Bokovoy - 4.8.4-3- Rebuild against Samba 4.12RC1
* Mon Dec 16 2019 Adam Williamson - 4.8.4-2- Backport PR #4045 to fix overlapping DNS zone check bugs
* Sat Dec 14 2019 Alexander Bokovoy - 4.8.4-1- New upstream release 4.8.4
* Tue Nov 26 2019 Alexander Bokovoy - 4.8.3-1- New upstream release 4.8.3- CVE-2019-14867: Denial of service in IPA server due to wrong use of ber_scanf()- CVE-2019-10195: Don\'t log passwords embedded in commands in calls using batch
* Tue Nov 12 2019 Rob Crittenden - 4.8.2-1- New upstream release 4.8.2- Replace %{_libdir} macro in BuildRequires (#1746882)- Restore user-nsswitch.conf before calling authselect (#1746557)- ipa service-find does not list cifs service created by ipa-client-samba (#1731433)- Occasional \'whoami.data is undefined\' error in FreeIPA web UI (#1699109)- ipa-kra-install fails due to fs.protected_regular=1 (#1698384)