<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2">
<package pkgid="e97092b487215d73c5592c5b3a2b62bf6004b769d77b016e5e0c822e7196783a" name="ipa" arch="src">
  <version epoch="0" ver="4.9.6" rel="10.module+el8.5.0+13587+92118e57"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 4.9.6-1" date="1625140800">- Upstream release FreeIPA 4.9.6
  Related: RHBZ#1945038
- Revise PKINIT upgrade code
  Resolves: RHBZ#1886837
- ipa-cert-fix man page: add note about certmonger renewal
  Resolves: RHBZ#1780317
- Certificate Serial Number issue
  Resolves: RHBZ#1919384</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 4.9.6-2" date="1625745600">- IPA server in debug mode fails to run because time.perf_counter_ns is
  Python 3.7+
  Resolves: RHBZ#1974822
- Add checks to prevent assigning authentication indicators to internal IPA
  services
  Resolves: RHBZ#1979625
- Unable to set ipaUserAuthType with stageuser-add
  Resolves: RHBZ#1979605</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 4.9.6-3" date="1626350400">- man page: update ipa-server-upgrade.1
  Resolves: RHBZ#1973273
- Fall back to krbprincipalname when validating host auth indicators
  Resolves: RHBZ#1979625
- Add dependency for sssd-winbind-idmap to server-trust-ad
  Resolves: RHBZ#1982211</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 4.9.6-4" date="1626955200">- ipatests: NAMED_CRYPTO_POLICY_FILE not defined for RHEL
  Resolves: RHBZ#1982956</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 4.9.6-5" date="1631534400">- Catch and log errors when adding CA profiles
  Resolves: RHBZ#1999142
- selinux policy: allow custodia to access /proc/cpuinfo
  Resolves: RHBZ#1998129
- extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  Resolves: RHBZ#2000263
- ipa migrate-ds command fails to warn when compat plugin is enabled
  Resolves: RHBZ#1999992
- Backport latest test fixes in python3-ipatests
  Resolves: RHBZ#2000553</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 4.9.6-6" date="1631880000">- Don't store entries with a usercertificate in the LDAP cache
  Resolves: RHBZ#1999893</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.9.6-7" date="1636286400">- Hardening for CVE-2020-25717
- Related: RHBZ#2021171</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.9.6-8" date="1637236800">- Hardening for CVE-2020-25717, part 2
- Related: RHBZ#2021171</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.9.6-9" date="1638273600">- Hardening for CVE-2020-25717, part 3
  Related: RHBZ#2021489</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.9.6-10" date="1638273601">- Bump realease version due to build issue.
  Related: RHBZ#2021489</changelog>
</package>
<package pkgid="e0d73940d4e7b948529e79c71e5ccfc09b717167f8aebde2b8d802fe48200112" name="ipa" arch="src">
  <version epoch="0" ver="4.9.6" rel="12.module+el8.5.0+14525+2137cc8f"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 4.9.6-3" date="1626350400">- man page: update ipa-server-upgrade.1
  Resolves: RHBZ#1973273
- Fall back to krbprincipalname when validating host auth indicators
  Resolves: RHBZ#1979625
- Add dependency for sssd-winbind-idmap to server-trust-ad
  Resolves: RHBZ#1982211</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 4.9.6-4" date="1626955200">- ipatests: NAMED_CRYPTO_POLICY_FILE not defined for RHEL
  Resolves: RHBZ#1982956</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 4.9.6-5" date="1631534400">- Catch and log errors when adding CA profiles
  Resolves: RHBZ#1999142
- selinux policy: allow custodia to access /proc/cpuinfo
  Resolves: RHBZ#1998129
- extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  Resolves: RHBZ#2000263
- ipa migrate-ds command fails to warn when compat plugin is enabled
  Resolves: RHBZ#1999992
- Backport latest test fixes in python3-ipatests
  Resolves: RHBZ#2000553</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 4.9.6-6" date="1631880000">- Don't store entries with a usercertificate in the LDAP cache
  Resolves: RHBZ#1999893</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.9.6-7" date="1636286400">- Hardening for CVE-2020-25717
- Related: RHBZ#2021171</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.9.6-8" date="1637236800">- Hardening for CVE-2020-25717, part 2
- Related: RHBZ#2021171</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.9.6-9" date="1638273600">- Hardening for CVE-2020-25717, part 3
  Related: RHBZ#2021489</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.9.6-10" date="1638273601">- Bump realease version due to build issue.
  Related: RHBZ#2021489</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.9.6-11" date="1647345600">- Custodia use a stronger encryption algo when exporting keys
  Resolves: RHBZ#2062404</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.9.6-12" date="1647604800">- ipa-server-install uninstall: remove tdb files
- ipa-client-samba uninstall: remove tdb files
  Resolves: RHBZ#2065719</changelog>
</package>
</otherdata>