URL:
https://github.com/freeipa/freeipa/pull/5589
Author: abbra
Title: #5589: freeipa.spec: synchronize with Fedora for 389-ds and PKI versions
Action: opened
PR body:
"""
- 389-ds fixes an information disclosure during unsuccessful LDAP BIND
operation, CVE-2020-35518,
https://github.com/389ds/389-ds-base/issues/4609
- Dogtag PKI adopted to work with 389-ds with the fix,
https://github.com/dogtagpki/pki/issues/3458
FreeIPA needs to require new Dogtag and 389-ds versions on all Fedora
and RHEL versions.
I am leaving RHEL 8 version intact yet for 389-ds because it wasn't
updated yet but Dogtag PKI version was already built.
In order to avoid excessive %if/%endif conditionals in the spec file, I
have added a short Lua table with 389-ds versions for F32-33. F34 and
Rawhide will fallback to the same newer 389-ds 2.0.3 version. We do not
support building on F31 or older Fedora anymore as they are EOLed
already.
Fixes:
https://pagure.io/freeipa/issue/8705
Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5589/head:pr5589
git checkout pr5589