Changelog for
freeipa-client-epn-4.9.9-lp154.47.187.x86_64.rpm :
* Wed Apr 27 2022 Alexander Bokovoy
- 4.9.9-1- Upstream release FreeIPA 4.9.9
* Mon Feb 07 2022 Alexander Bokovoy - 4.9.8-3- Use -H option for OpenLDAP client tools as -h and -p are deprecated now- Resolves: rhbz#2050921
* Thu Jan 20 2022 Fedora Release Engineering - 4.9.8-2.1- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Wed Jan 12 2022 Alexander Bokovoy - 4.9.8-2- Make possible to compile FreeIPA against OpenLDAP 2.6- Resolves: rhbz#2032701
* Fri Nov 26 2021 Alexander Bokovoy - 4.9.8-1- Upstream release FreeIPA 4.9.8
* Thu Nov 11 2021 Alexander Bokovoy - 4.9.7-4- Hardening for CVE-2020-25717 part 2- Handle S4U for users from trusted domains
* Wed Nov 10 2021 Alexander Bokovoy - 4.9.7-3- Hardening for CVE-2020-25717- Generate SIDs for IPA users and groups by default- Verify MS-PAC consistency when it is generated or validated- Rebuild against samba-4.15.2- Resolves: rhbz#2021720
* Fri Oct 15 2021 Rob Crittenden - 4.9.7-2- Make Dogtag return XML for ipa cert-find (#2014658)
* Tue Sep 14 2021 Sahana Prasad - 4.9.7-1.1- Rebuilt with OpenSSL 3.0.0
* Thu Aug 19 2021 François Cami - 4.9.7-1- Upstream release 4.9.7- Resolves: rhbz#1994739
* Fri Aug 06 2021 François Cami - 4.9.6-4- Remove dependency on python3-pexpect on RHEL9.- Resolves: rhbz#1980734
* Wed Jul 21 2021 Fedora Release Engineering - 4.9.6-3.1- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jul 16 2021 Alexander Bokovoy - 4.9.6-3- Add dependency on sssd-winbind-idmap for freeipa-server-trust-ad- Resolves: rhbz#1970168- Rebuild against Samba 4.15.0 RC1 (libndr soname bump)
* Fri Jul 02 2021 Alexander Bokovoy - 4.9.6-2- Remove custodia dependencies as the code merged into FreeIPA now- Resolves: rhbz#1978632
* Tue Jun 29 2021 François Cami - 4.9.6-1- Upstream release FreeIPA 4.9.6
* Mon Jun 14 2021 Alexander Bokovoy - 4.9.4-2- Rebuilt for Python 3.10, second part
* Fri Jun 04 2021 Python Maint - 4.9.4-1.1- Rebuilt for Python 3.10
* Fri Jun 04 2021 Alexander Bokovoy - 4.9.4-1- Upstream release FreeIPA 4.9.4
* Tue Jun 01 2021 Alexander Bokovoy - 4.9.3-4- Handle upgrade of 389-ds replication plugin rename (part 2)
* Tue Jun 01 2021 Alexander Bokovoy - 4.9.3-3- Handle upgrade of 389-ds replication plugin rename
* Mon Apr 12 2021 Alexander Bokovoy - 4.9.3-2- Handle failures to resolve non-existing reverse zones during deployment with systemd-resolved- Resolves: rhbz#1948034
* Wed Mar 31 2021 Alexander Bokovoy - 4.9.3-1- Upstream release FreeIPA 4.9.3
* Fri Feb 26 2021 Alexander Bokovoy - 4.9.2-4- Rebuild against 389-ds and PKI to fix https://github.com/389ds/389-ds-base/issues/4609
* Tue Feb 23 2021 Alexander Bokovoy - 4.9.2-3- Only use python-platform on RHEL 8
* Mon Feb 15 2021 Alexander Bokovoy - 4.9.2-2- Fix ipatests dependency to python3-pexpect
* Mon Feb 15 2021 Alexander Bokovoy - 4.9.2-1- Upstream release FreeIPA 4.9.2
* Wed Jan 27 2021 Alexander Bokovoy - 4.9.1-1- Upstream release FreeIPA 4.9.1
* Tue Jan 26 2021 Fedora Release Engineering - 4.9.0-2.1- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Jan 20 2021 Rob Crittenden - 4.9.0-2- Set client keytab location for 389ds (RHBZ#1918075)
* Wed Dec 23 2020 Alexander Bokovoy - 4.9.0-1- FreeIPA 4.9.0 final release
* Wed Dec 16 2020 Alexander Bokovoy - 4.9.0-0.6.rc3- Refactor DNSSEC paths creation code (upstream PR#5340)
* Thu Dec 10 2020 Alexander Bokovoy - 4.9.0-0.5.rc3- FreeIPA 4.9.0 release candidate 3- Enforce C.UTF-8 locale in systemd service units- Fold up fixes from Rawhide and RHEL 8.4 testing
* Wed Dec 09 2020 Alexander Bokovoy - 4.9.0-0.4.rc2- Fix upgrade script for CA rule rewrites- Fix permissions for /run/ipa/ccaches
* Fri Dec 04 2020 Alexander Bokovoy - 4.9.0-0.3.rc2- Correct SELinux policy requirements
* Fri Dec 04 2020 Alexander Bokovoy - 4.9.0-0.2.rc2- FreeIPA 4.9.0 release candidate 2
* Thu Nov 19 2020 Alexander Bokovoy - 4.9.0-0.1.rc1- Use correct bind PKCS11 engine dependencies- Fix SELinux build requirement- Fix linting requirements
* Wed Nov 18 2020 Alexander Bokovoy - 4.9.0-0.rc1- FreeIPA 4.9.0 release candidate 1- Synchronize spec file with upstream and RHEL
* Wed Oct 28 2020 Adam Williamson - 4.8.10-7- Backport #5212 for deployment failures with 389-ds-base 1.4.4.6+
* Tue Oct 13 2020 Alexander Bokovoy - 4.8.10-6- Handle sshd_config upgrade properly Fixes: rhbz#1887928
* Tue Sep 29 2020 Alexander Bokovoy - 4.8.10-5- Properly handle upgrade case when systemd-resolved is enabled
* Mon Sep 28 2020 Alexander Bokovoy - 4.8.10-4- Fix permissions for /etc/systemd/resolved.conf.d/zzz-ipa.conf- Add NetworkManager and systemd-resolved configuration files to backup
* Sun Sep 27 2020 Alexander Bokovoy - 4.8.10-3- Fix dependency between freeipa-selinux and freeipa-common- Resolves: rhbz#1883005
* Sat Sep 26 2020 Alexander Bokovoy - 4.8.10-2- Support upgrade F32 -> F33 with systemd-resolved
* Sat Sep 26 2020 Alexander Bokovoy - 4.8.10-1- Upstream release FreeIPA 4.8.10
* Fri Aug 21 2020 Alexander Bokovoy - 4.8.9-2- Backport fix for detecting older installations on upgrade
* Thu Aug 20 2020 François Cami - 4.8.9-1- Upstream release FreeIPA 4.8.9
* Mon Aug 03 2020 Alexander Bokovoy - 4.8.7-5- Make use of unshare+chroot in ipa-extdom-extop unittests to work against glibc 2.32
* Sat Aug 01 2020 Fedora Release Engineering - 4.8.7-4- Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Thu Jul 30 2020 Merlin Mathesius - 4.8.7-3- Conditional fixes for ELN to set krb5-kdb version appropriately
* Mon Jul 27 2020 Fedora Release Engineering - 4.8.7-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jun 10 2020 Alexander Bokovoy - 4.8.7-1- Upstream release FreeIPA 4.8.7
* Tue May 26 2020 Miro Hrončok - 4.8.6-2- Rebuilt for Python 3.9
* Fri Mar 27 2020 Alexander Bokovoy - 4.8.6-1- Upstream release FreeIPA 4.8.6
* Sat Mar 21 2020 Alexander Bokovoy - 4.8.5-2- Roll up post-release fixes from upstream- Move freeipa-selinux to be a dependency of freeipa-common
* Wed Mar 18 2020 Alexander Bokovoy - 4.8.5-1- Upstream release FreeIPA 4.8.5- Depend on selinux-policy-devel 3.14.6-9 for build due to a makefile issue in SELinux external policy support
* Tue Mar 03 2020 Alexander Bokovoy - 4.8.4-8- Support opendnssec 2.1- Resolves: #1809492
* Mon Feb 17 2020 François Cami - 4.8.4-7- Fix audit_as_req() callback usage- Resolves: #1803786
* Sat Feb 01 2020 Alexander Bokovoy - 4.8.4-6- Fix constraint delegation for krb5 1.18 update- Resolves: #1797096
* Tue Jan 28 2020 Fedora Release Engineering - 4.8.4-5- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Tue Jan 28 2020 Alexander Bokovoy - 4.8.4-4- Rebuild against krb5 1.18 beta
* Sun Jan 26 2020 Alexander Bokovoy - 4.8.4-3- Rebuild against Samba 4.12RC1
* Mon Dec 16 2019 Adam Williamson - 4.8.4-2- Backport PR #4045 to fix overlapping DNS zone check bugs
* Sat Dec 14 2019 Alexander Bokovoy - 4.8.4-1- New upstream release 4.8.4
* Tue Nov 26 2019 Alexander Bokovoy - 4.8.3-1- New upstream release 4.8.3- CVE-2019-14867: Denial of service in IPA server due to wrong use of ber_scanf()- CVE-2019-10195: Don\'t log passwords embedded in commands in calls using batch
* Tue Nov 12 2019 Rob Crittenden - 4.8.2-1- New upstream release 4.8.2- Replace %{_libdir} macro in BuildRequires (#1746882)- Restore user-nsswitch.conf before calling authselect (#1746557)- ipa service-find does not list cifs service created by ipa-client-samba (#1731433)- Occasional \'whoami.data is undefined\' error in FreeIPA web UI (#1699109)- ipa-kra-install fails due to fs.protected_regular=1 (#1698384)
* Sun Oct 20 2019 Alexander Bokovoy - 4.8.1-5- Don\'t create log files from helper scripts- Fixes: rhbz#1754189
* Tue Oct 08 2019 Christian Heimes - 4.8.1-4- Fix compatibility issue with preexec_fn in Python 3.8- Fixes: rhbz#1759290
* Tue Oct 01 2019 Alexander Bokovoy - 4.8.1-3- Fix ipasam for compatibility with Samba 4.11- Fixes: rhbz#1757089
* Mon Aug 19 2019 Miro Hrončok - 4.8.1-2- Rebuilt for Python 3.8
* Wed Aug 14 2019 Alexander Bokovoy - 4.8.1-1- New upstream release 4.8.1- Fixes: rhbz#1732528- Fixes: rhbz#1732524
* Thu Jul 25 2019 Fedora Release Engineering - 4.8.0-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Wed Jul 03 2019 Alexander Bokovoy - 4.8.0-1- New upstream release 4.8.0- New subpackage: freeipa-client-samba
* Sat May 11 2019 Alexander Bokovoy - 4.7.90.pre1-6- Upgrade: handle situation when trusts were configured but not established yet Fixed: rhbz#1708808
* Fri May 03 2019 Alexander Bokovoy - 4.7.90.pre1-5- Add krb5-kdb-server dependency provided by krb5-server >= 1.17-17
* Fri May 03 2019 Alexander Bokovoy - 4.7.90.pre1-4- Rebuild to drop upper limit for Kerberos package After krb5-server will provide krb5-kdb-version, we\'ll switch to it
* Wed May 01 2019 Adam Williamson - 4.7.90.pre1-3- Backport PR #3104 to fix a font path error
* Wed May 01 2019 Alexander Bokovoy - 4.7.90.pre1-2- Revert MINSSF defaults because realmd cannot join FreeIPA right now as it uses anonymous LDAP connection for the discovery and validation
* Mon Apr 29 2019 Alexander Bokovoy - 4.7.90.pre1-1- First release candidate for FreeIPA 4.8.0
* Sat Apr 06 2019 Alexander Bokovoy - 4.7.2-8- Fixed: rhbz#1696963 (Failed to install replica)
* Sat Apr 06 2019 Alexander Bokovoy - 4.7.2-7- Support Samba 4.10- Support 389-ds 1.4.1.2-2.fc30 or later
* Thu Feb 28 2019 Alexander Bokovoy - 4.7.2-6- Support new nfs-utils behavior (#1668836)- ipa-client-automount now works without /etc/sysconfig/nfs
* Tue Feb 19 2019 François Cami - 4.7.2-5- Fix FTBS due to Samba having removed talloc_strackframe.h and memory.h (#1678670)- Fix CA setup when fs.protected_regular=1 (#1677027)
* Mon Feb 11 2019 Alexander Bokovoy - 4.7.2-4- Disable python dependency generator in Rawhide as not all required packages support it yet- Require python-kdcproxy 0.4.1 or later on Rawhide
* Fri Feb 08 2019 Alexander Bokovoy - 4.7.2-3- Fix compile issues after a mass rebuild using upstream patches
* Thu Jan 31 2019 Fedora Release Engineering - 4.7.2-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Dec 03 2018 Alexander Bokovoy - 4.7.2-1- Upstream release FreeIPA 4.7.2
* Wed Nov 28 2018 Adam Williamson - 4.7.1-4- Update PR #2610 patch to tiran\'s modified version
* Tue Nov 27 2018 Adam Williamson - 4.7.1-3- Backport PR #2610 to fix for authselect 1.0.2+ (see #1645708)
* Sun Nov 11 2018 Alexander Bokovoy - 4.7.1-2- Rebuild for krb5-1.17 (#1648673)- Bump required SSSD version to 2.0.0-4 to get back pysss.getgrouplist() API
* Fri Oct 05 2018 Rob Crittenden - 4.7.1-1- Update to upstream 4.7.1
* Tue Sep 25 2018 Christian Heimes - 4.7.0-5- Remove Python 2 support from Fedora 30- https://fedoraproject.org/wiki/Changes/FreeIPA_Python_2_Removal
* Tue Sep 04 2018 Thomas Woerner - 4.7.0-4- Enable python2 client packages for f30 for now again
* Tue Sep 04 2018 Thomas Woerner - 4.7.0-3- Force generation of aclocal.m4 and configuration scripts- Fix only client build for Fedora>=28 and RHEL>7- Bring back special patch handling for Fedora
* Mon Sep 03 2018 Thomas Woerner - 4.7.0-2- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662)- Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662)- Add \"389-ds-base-legacy-tools\" to requires- Refactor os-release and platform information (#1609475)- Don\'t check for systemd service (#1609475)- Switched to upstream spec file with small adaptions
* Thu Jul 26 2018 Thomas Woerner - 4.7.0-1- Update to upstream 4.7.0- New BuildRequires for nodejs and uglify-js- New Requires for 389-ds-base-legacy-tools in server (RHBZ#1606541)- Do not build python2-ipaserver and python2-ipatests for Fedora 29 and up- Do not build any python2 packages for Fedora 30- Added ipatest man pages to python3-ipatests packages also- Added ipatest bindir links to python3-ipatests for Fedora up to 28- Dropped explicit copy of freeipa.template, install is doing this now- Added upstream fix: (f3faecb) Fix $-style format string in ipa_ldap_init- Added upstream fix: (4b592fe,1a7baa2) Added reason to raise of errors.NotFound
* Mon Jul 16 2018 Alexander Bokovoy - 4.6.90.pre2-11- Use version-aware macros for Python
* Fri Jul 13 2018 Fedora Release Engineering - 4.6.90.pre2-10- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jul 02 2018 Miro Hrončok - 4.6.90.pre2-9- Rebuilt for Python 3.7
* Wed Jun 27 2018 Rob Crittenden - 4.6.90.pre2-8- Build UI using py3-lesscpy
* Tue Jun 19 2018 Rob Crittenden - 4.6.90.pre2-7-
*-domainname.service moved to the hostname package in F29 (#1592355)
* Tue Jun 19 2018 Miro Hrončok - 4.6.90.pre2-6- Rebuilt for Python 3.7
* Fri Jun 15 2018 Rob Crittenden - 4.6.90.pre2-5- Change BuildRequires from python-lesscpy to python3-lesscpy
* Fri Jun 15 2018 Rob Crittenden - 4.6.90.pre2-4.1- Rename service fedora-domainname.service to nis-domainname.service (#1588192)- Fix bad date in changelog
* Wed May 16 2018 Alexander Bokovoy - 4.6.90.pre2-3- Fine tune packaging of server templates so that it doesn\'t include freeipa.template which always go to freeipa-client-common
* Tue May 15 2018 Rob Crittenden - 4.6.90.pre2-2- Exclude /usr/share from client-only builds
* Tue May 15 2018 Rob Crittenden - 4.6.90.pre2-1- Update to upstream 4.6.90.pre2
* Wed May 02 2018 Alexander Bokovoy - 4.6.90.pre1-7- Fix upgrade when named.conf does not exist- Resolves rhbz#1573671- Requires newer slapi-nis to avoid hitting rhbz#1573636
* Wed Mar 21 2018 Alexander Bokovoy - 4.6.90.pre1-6.1- Change upgrade code to use DIR-based ccache and no kinit (#1558818)- Require pki-symkey until pki-core has proper dependencies
* Wed Mar 21 2018 Alexander Bokovoy - 4.6.90.pre1-6- Change upgrade code to use DIR-based ccache and no kinit (#1558818)
* Tue Mar 20 2018 Alexander Bokovoy - 4.6.90.pre1-5- Apply upstream fix for #1558354- Run upgrade under file-based ccache (#1558818)- Fix OTP token issuance due to regression in https://pagure.io/389-ds-base/issue/49617
* Tue Mar 20 2018 Adam Williamson - 4.6.90.pre1-4- Fix upgrades harder (extension of -3 patch) (#1558354)
* Tue Mar 20 2018 Alexander Bokovoy - 4.6.90.pre1-3- Fix upgrade from F27 to F28 (#1558354)
* Mon Mar 19 2018 Rob Crittenden - 4.6.90.pre1-2- Patch to fix GUI login for non-admin users (#1557609)
* Fri Mar 16 2018 Rob Crittenden - 4.6.90.pre1-1- Update to upstream 4.6.90.pre1
* Tue Feb 20 2018 Rob Crittenden - 4.6.3-5- Disable i686 server builds because 389-ds no longer provides builds on that arch. (#1544386)
* Fri Feb 09 2018 Igor Gnatenko - 4.6.3-4- Escape macros in %changelog
* Thu Feb 08 2018 Rob Crittenden - 4.6.3-3- Don\'t fail on upgrades if KRA is not installed- Remove Conflicts between mod_wsgi and python3-mod_wsgi
* Wed Feb 07 2018 Fedora Release Engineering - 4.6.3-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Wed Jan 31 2018 Rob Crittenden - 4.6.3-1- Update to upstream 4.6.3
* Wed Jan 03 2018 Lumír Balhar - 4.6.1-5- Fix directory ownership in python3 subpackage
* Tue Oct 17 2017 Rob Crittenden - 4.6.1-4- Update workaround patch to prevent SELinux execmem AVC (#1491508)
* Mon Oct 16 2017 Alexander Bokovoy - 4.6.1-3- Another attempt at fix for bug #1491053
* Fri Oct 06 2017 Tomas Krizek - 4.6.1-2- Rebuild against krb5-1.16
* Fri Sep 22 2017 Tomas Krizek - 4.6.1-1- Fixes #1491053 Firefox reports insecure TLS configuration when visiting FreeIPA web UI after standard server deployment
* Wed Sep 13 2017 Adam Williamson - 4.6.0-3- Fixes #1490762 Ipa-server-install update dse.ldif with wrong SELinux context- Fixes #1491056 FreeIPA enrolment via kickstart fails
* Wed Sep 06 2017 Adam Williamson - 4.6.0-2- Fixes #1488640 \"unknown command \'undefined\'\" error when changing password in web UI- BuildRequires diffstat (for the use in patch application)
* Mon Sep 04 2017 Tomas Krizek - 4.6.0-1- Rebase to upstream 4.6.0
* Wed Aug 02 2017 Fedora Release Engineering - 4.5.3-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering - 4.5.3-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Jul 21 2017 Tomas Krizek - 4.5.3-1- Update to upstream 4.5.3 - see https://www.freeipa.org/page/Releases/4.5.3
* Thu Jul 13 2017 Alexander Bokovoy - 4.5.2-4- Make sure tmpfiles.d snippet for replica is in place after install
* Mon Jul 10 2017 Alexander Bokovoy - 4.5.2-3- Fix build with Samba 4.7.0-RC1- Increase java stack for rhino calls to get around crashes on ppc64-le
* Tue Jun 20 2017 Tomas Krizek - 4.5.2-2- Patch: Fix IP address checks- Patch: python-netifaces fix
* Sun Jun 18 2017 Tomas Krizek - 4.5.2-1- Update to upstream 4.5.2 - see https://www.freeipa.org/page/Releases/4.5.2
* Thu May 25 2017 Tomas Krizek - 4.5.1-1- Update to upstream 4.5.1 - see https://www.freeipa.org/page/Releases/4.5.1- Fixes #1168266 UI drops \"Enknown Error\" when the ipa record in /etc/hosts changes
* Tue May 23 2017 Tomas Krizek - 4.4.4-2- Fixes #1448049 Subpackage freeipa-server-common has unmet dependencies on Rawhide- Fixes #1430247 FreeIPA server deployment runs ipa-custodia on Python 3, should use Python 2- Fixes #1446744 python2-ipaclient subpackage does not own %{python_sitelib}/ipaclient/plugins- Fixes #1440525 surplus \'the\' in output of `ipa-adtrust-install`- Fixes #1411810 ipa-replica-install fails with 406 Client Error- Fixes #1405814 ipa plugins: ERROR an internal error occured
* Fri Mar 24 2017 Tomas Krizek - 4.4.4-1- Update to upstream 4.4.4 - see https://www.freeipa.org/page/Releases/4.4.4- Add upstream signature file for tarball
* Wed Mar 01 2017 Alexander Bokovoy - 4.4.3-8- Use different method to keep /usr/bin/ipa on Python 2- Fixes #1426847
* Mon Feb 27 2017 Tomas Krizek - 4.4.3-7- Fixes #1413137 CVE-2017-2590 ipa: Insufficient permission check for ca-del, ca-disable and ca-enable commands
* Mon Feb 27 2017 Alexander Bokovoy - 4.4.3-6- Rebuild to pick up system-python dependency change- Fixes #1426847 - Cannot upgrade freeipa-client on rawhide
* Wed Feb 15 2017 Tomas Krizek - 4.4.3-5- Fixes #1403352 - bind-dyndb-ldap: support new named.conf API in BIND 9.11- Fixes #1412739 - ipa-kdb: support DAL version 6.1
* Fri Feb 10 2017 Fedora Release Engineering - 4.4.3-4- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Sat Jan 21 2017 Igor Gnatenko - 4.4.3-3- Rebuild for xmlrpc-c
* Thu Dec 22 2016 Miro Hrončok - 4.4.3-2- Rebuild for Python 3.6
* Fri Dec 16 2016 Pavel Vomacka - 4.4.3-1- Update to upstream 4.4.3 - see http://www.freeipa.org/page/Releases/4.4.3
* Wed Dec 14 2016 Pavel Vomacka - 4.4.2-4- Fixes 1395311 - CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod- Fixes 1370493 - CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy
* Tue Nov 29 2016 Petr Vobornik - 4.4.2-3- Fixes 1389866 krb5-server: ipadb_change_pwd(): kdb5_util killed by SIGSEGV
* Fri Oct 21 2016 Petr Vobornik - 4.4.2-2- Rebuild against krb5-1.15
* Thu Oct 13 2016 Petr Vobornik - 4.4.2-1- Update to upstream 4.4.2 - see http://www.freeipa.org/page/Releases/4.4.2
* Thu Sep 01 2016 Alexander Bokovoy - 4.4.1-1- Update to upstream 4.4.1 - see http://www.freeipa.org/page/Releases/4.4.1
* Fri Aug 19 2016 Petr Vobornik - 4.3.2-2- Fixes 1365669 - The ipa-server-upgrade command failed when named-pkcs11 does not happen to run during dnf upgrade- Fixes 1367883 - CVE-2016-5404 freeipa: ipa: Insufficient privileges check in certificate revocation- Fixes 1364338 - Freeipa cannot be build on fedora 25
* Fri Jul 22 2016 Petr Vobornik - 4.3.2-1- Update to upstream 4.3.2 - see http://www.freeipa.org/page/Releases/4.3.2
* Tue Jul 19 2016 Fedora Release Engineering - 4.3.1-2- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
* Thu Mar 24 2016 Petr Vobornik - 4.3.1-1- Update to upstream 4.3.1 - see http://www.freeipa.org/page/Releases/4.3.1
* Thu Feb 04 2016 Petr Vobornik - 4.3.0-3- Fix build with Samba 4.4- Update SELinux requires to fix connection check during installation
* Wed Feb 03 2016 Fedora Release Engineering - 4.3.0-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Fri Dec 18 2015 Petr Vobornik - 4.3.0-1- Update to upstream 4.3.0 - see http://www.freeipa.org/page/Releases/4.3.0
* Mon Dec 07 2015 Petr Vobornik - 4.2.3-2- Workarounds for SELinux execmem violations in cryptography
* Mon Nov 02 2015 Petr Vobornik - 4.2.3-1- Update to upstream 4.2.3 - see http://www.freeipa.org/page/Releases/4.2.3- fix #1274905
* Wed Oct 21 2015 Alexander Bokovoy - 4.2.2-2- Depend on samba-common-tools for the trust-ad subpackage after samba package split- Rebuild against krb5 1.14 to fix bug #1273957
* Thu Oct 08 2015 Petr Vobornik - 4.2.2-1- Update to upstream 4.2.2 - see http://www.freeipa.org/page/Releases/4.2.2
* Mon Sep 07 2015 Petr Vobornik - 4.2.1-1- Update to upstream 4.2.1 - see http://www.freeipa.org/page/Releases/4.2.1
* Wed Jun 17 2015 Fedora Release Engineering - 4.1.4-5- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Tue May 12 2015 Alexander Bokovoy - 4.1.4-4- Fix typo in the patch to fix bug #1219834
* Mon May 11 2015 Alexander Bokovoy - 4.1.4-3- Fix FreeIPA trusts to AD feature with Samba 4.2 (#1219834)
* Mon Mar 30 2015 Petr Vobornik - 4.1.4-2- Replace mod_auth_kerb usage with mod_auth_gssapi
* Thu Mar 26 2015 Alexander Bokovoy - 4.1.4-1- Update to upstream 4.1.4 - see http://www.freeipa.org/page/Releases/4.1.4- fix CVE-2015-1827 (#1206047)- Require slapi-nis 0.54.2 and newer for CVE-2015-0283 fixes
* Tue Mar 17 2015 Petr Vobornik - 4.1.3-3- Timeout ipa-client install if ntp server is unreachable #4842- Skip time sync during client install when using --no-ntp #4842
* Wed Mar 04 2015 Petr Vobornik - 4.1.3-2- Add missing sssd python dependencies- https://bugzilla.redhat.com/show_bug.cgi?id=1197218
* Wed Feb 18 2015 Petr Vobornik - 4.1.3-1- Update to upstream 4.1.3 - see http://www.freeipa.org/page/Releases/4.1.3
* Mon Jan 19 2015 Alexander Bokovoy - 4.1.2-2- Fix broken build after Samba ABI change and rename of libpdb to libsamba-passdb- Use python-dateutil15 until we validate python-dateutil 2.x
* Tue Nov 25 2014 Petr Vobornik - 4.1.2-1- Update to upstream 4.1.2 - see http://www.freeipa.org/page/Releases/4.1.2- fix CVE-2014-7850
* Thu Nov 20 2014 Simo Sorce - 4.1.1-2- Patch blokers and feature freze exceptions- Resolves: bz1165674- Resolves: bz1165856 (CVE-2014-7850)- Fixes DNS install issue that prevents the server from working
* Thu Nov 06 2014 Petr Vobornik - 4.1.1-1- Update to upstream 4.1.1 - see http://www.freeipa.org/page/Releases/4.1.1- fix CVE-2014-7828
* Wed Oct 22 2014 Petr Vobornik - 4.1.0-2- fix armv7hl stack oversize build failure- fix https://fedorahosted.org/freeipa/ticket/4660
* Tue Oct 21 2014 Petr Vobornik - 4.1.0-1- Update to upstream 4.1.0 - see http://www.freeipa.org/page/Releases/4.1.0