[ol8_appstream] ipa-selinux-4.9.13-14.0.1.module+el8.10.0+90484+ef47c6ef.noarch

Name:	ipa-selinux
Version:	4.9.13
Release:	14.0.1.module+el8.10.0+90484+ef47c6ef
Architecture:	noarch
Module:	idm:DL1:8100020250102040247:10
Group:	Unspecified
Size:	16381
License:	GPLv3+
RPM:	ipa-selinux-4.9.13-14.0.1.module+el8.10.0+90484+ef47c6ef.noarch.rpm
Source RPM:	ipa-4.9.13-14.0.1.module+el8.10.0+90484+ef47c6ef.src.rpm
Build Date:	Thu Jan 02 2025
Build Host:	build-ol8-x86_64.oracle.com
Vendor:	Oracle America
URL:	http://www.freeipa.org/
Summary:	FreeIPA SELinux policy
Description:	Custom SELinux policy module for FreeIPA

Changelog (Show File list) (Show related packages)

Wed Dec 18 2024 EL Errata <el-errata_ww@oracle.com> - 4.9.13-14.0.1
```
- Rebuild
```

Wed Nov 27 2024 Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-14

- ipatests: Update ipa-adtrust-install test
  Resolves: RHEL-40894

Thu Nov 14 2024 Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-13

- Add ipa-idrange-fix
  Resolves: RHEL-56920
- Unconditionally add MS-PAC to global config on update
  Resolves: RHEL-49437
- ipatests: Update ipa-adtrust-install test
  Resolves: RHEL-40894
- Require python-qrcode version 5.3 or later
  Related: RHEL-15090

Wed Jul 17 2024 Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-12

- Allow the admin user to be disabled
  Resolves: RHEL-34756
- ipa-otptoken-import: open the key file in binary mode
  Resolves: RHEL-39616
- ipa-crlgen-manage: manage the cert status task execution time
  Resolves: RHEL-30280
- idrange-add: add a warning because 389ds restart is required
  Resolves: RHEL-28996
- PKINIT certificate: fix renewal on hidden replica
  Resolves: RHEL-4913, RHEL-45908

Wed Jun 12 2024 Julien Rische <jrische@redhat.com> - 4.9.13-11

- Add missing part of backported CVE-2024-3183 fix
  Resolves: RHEL-29927

Tue Apr 30 2024 Julien Rische <jrische@redhat.com> - 4.9.13-10

- kdb: apply combinatorial logic for ticket flags (CVE-2024-3183)
  Resolves: RHEL-29927
- kdb: fix vulnerability in GCD rules handling (CVE-2024-2698)
  Resolves: RHEL-29692

Fri Apr 12 2024 Rafael Jeffman <rjeffman@redhat.com> - 9.4.13-9

- dcerpc: invalidate forest trust intfo cache when filtering out realm domains
  Resolves: RHEL-28559
- Backport latests test fixes in python3-tests
  ipatests: add xfail for autoprivate group test with override
  ipatests: remove xfail thanks to sssd 2.9.4
  ipatests: adapt for new automembership fixup behavior
  ipatests: Fixes for test_ipahealthcheck_ipansschainvalidation testcases
  test_xmlrpc: adopt to automember plugin message changes in 389-ds
  Resolves: RHEL-29908

Thu Mar 07 2024 Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-8

- rpcserver: validate Kerberos principal name before running kinit
  Resolves: RHEL-26153
- Vault: add additional fallback to RSA-OAEP wrapping algo
  Resolves: RHEL-28259

Tue Feb 20 2024 Julien Rische <jrische@redhat.com> - 4.9.13-7

- ipa-kdb: Fix double free in ipadb_reinit_mspac()
  Resolves: RHEL-25742
- kra: set RSA-OAEP as default wrapping algo when FIPS is enabled
  Resolves: RHEL-12153
- Vault: improve vault server archival/retrieval calls error handling
  Resolves: RHEL-12153
- Vault: add support for RSA-OAEP wrapping algo
  Resolves: RHEL-12153

Fri Feb 16 2024 Julien Rische <jrische@redhat.com> - 4.9.13-6

- ipa-kdb: Rework ipadb_reinit_mspac()
  Resolves: RHEL-25742
- ipatests: wait for replica update in test_dns_locations
  Resolves: RHEL-22373
- ipatests: fix tasks.wait_for_replication() method
  Resolves: RHEL-25708