[ol8_appstream] ipa-selinux-4.9.12-14.0.1.module+el8.9.0+90278+8b8ee065.noarch

Name:	ipa-selinux
Version:	4.9.12
Release:	14.0.1.module+el8.9.0+90278+8b8ee065
Architecture:	noarch
Module:	idm:DL1:8090020240410015038:b0a6ceea idm:DL1:8090020240412151646:b0a6ceea
Group:	Unspecified
Size:	16381
License:	GPLv3+
RPM:	ipa-selinux-4.9.12-14.0.1.module+el8.9.0+90278+8b8ee065.noarch.rpm
Source RPM:	ipa-4.9.12-14.0.1.module+el8.9.0+90278+8b8ee065.src.rpm
Build Date:	Wed Apr 10 2024
Build Host:	build-ol8-x86_64.oracle.com
Vendor:	Oracle America
URL:	http://www.freeipa.org/
Summary:	FreeIPA SELinux policy
Description:	Custom SELinux policy module for FreeIPA

Changelog (Show File list) (Show related packages)

Tue Apr 09 2024 David Sloboda <david.x.sloboda@oracle.com> - 4.9.12-14.0.1
```
- Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
```

Tue Feb 20 2024 Julien Rische <jrische@redhat.com> - 4.9.12-14

- ipa-kdb: Fix double free in ipadb_reinit_mspac()
  Resolves: RHEL-25745

Fri Feb 16 2024 Julien Rische <jrische@redhat.com> - 4.9.12-13

- ipatests: fix tasks.wait_for_replication method
  Resolves: RHEL-25711

Thu Feb 15 2024 Julien Rische <jrische@redhat.com> - 4.9.12-12

- ipa-kdb: Rework ipadb_reinit_mspac()
  Resolves: RHEL-25745
- kdb: PAC generator: do not fail if canonical principal is missing
  Resolves: RHEL-24356
- sidgen: fix missing prototypes
  Resolves: RHEL-24380
- sidgen: ignore staged users when generating SIDs
  Resolves: RHEL-24380
- ipa-kdb: Fix memory leak during PAC verification
  Resolves: RHEL-24384
- ipapython: Propagate KRB5Error exceptions on iterating ccache
  Resolves: RHEL-24387
- ipapython: Correct return type of krb5_free_cred_contents
  Resolves: RHEL-24387
- ipapython: Clean up krb5_error
  Resolves: RHEL-24387
- ipa-kdb: Disable Bronze-Bit check if PAC not available
  Resolves: RHEL-24390
- ipatests: wait for replica update in test_dns_locations
  Resolves: RHEL-24395
- adtrustinstance: make sure NetBIOS name defaults are set properly
  Resolves: RHEL-24399

Fri Dec 01 2023 Julien Rische <jrische@redhat.com> - 4.9.12-11

- Generate Kerberos PAC as soon as server installation completed
  Resolves: RHEL-16532

Thu Nov 16 2023 Julien Rische <jrische@redhat.com> - 4.9.12-10

- ipa-kdb: Detect and block Bronze-Bit attacks
  Resolves: RHEL-16532
- Fix for CVE-2023-5455
  Resolves: RHEL-12577

Wed Oct 04 2023 Julien Rische <jrische@redhat.com> - 4.9.12-9

- ipa-kdb: Make AD-SIGNEDPATH optional with krb5 DAL 8 and older
  Resolves: RHEL-12198

Thu Aug 31 2023 Rafael Jeffman <rjeffman@redhat.com> - 4.9.12-8

- Require krb5 release 1.18.2-25 or later
  Resolves: RHBZ#2234711

Wed Aug 16 2023 Rafael Jeffman <rjeffman@redhat.com> - 4.9.12-7

- ipatests: fix test_topology
  Resolves: RHBZ#2232351
- Installer: activate nss and pam services in sssd.conf
  Resolves: RHBZ#2216532

Thu Aug 10 2023 Rafael Jeffman <rjeffman@redhat.com> - 4.9.12-6

- ipa-kdb: fix error handling of is_master_host()
  Resolves: RHBZ#2214638
- ipatests: enable firewall rule for http service on acme client
  Resolves: RHBZ#2230256
- User plugin: improve error related to non existing idp
  Resolves: RHBZ#2224572
- Prevent admin user from being deleted
  Resolves: RHBZ#1821181
- Fix memory leak in the OTP last token plugin
  Resolves: RHBZ#2227783