URL: https://github.com/freeipa/freeipa/pull/5589 Author: abbra Title: #5589: freeipa.spec: synchronize with Fedora for 389-ds and PKI versions Action: opened

PR body: """ - 389-ds fixes an information disclosure during unsuccessful LDAP BIND operation, CVE-2020-35518, https://github.com/389ds/389-ds-base/issues/4609

- Dogtag PKI adopted to work with 389-ds with the fix, https://github.com/dogtagpki/pki/issues/3458

FreeIPA needs to require new Dogtag and 389-ds versions on all Fedora and RHEL versions.

I am leaving RHEL 8 version intact yet for 389-ds because it wasn't updated yet but Dogtag PKI version was already built.

In order to avoid excessive %if/%endif conditionals in the spec file, I have added a short Lua table with 389-ds versions for F32-33. F34 and Rawhide will fallback to the same newer 389-ds 2.0.3 version. We do not support building on F31 or older Fedora anymore as they are EOLed already.

Fixes: https://pagure.io/freeipa/issue/8705

Signed-off-by: Alexander Bokovoy abokovoy@redhat.com """

To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5589/head:pr5589 git checkout pr5589