# changelog

author: Alexander Bokovoy <abokovoy@redhat.com> - 4.8.3-1
changelog:
  - Rebase to security release 4.8.3 (CVE-2019-14867, CVE-2019-10195)
    Resolves: RHBZ#1767304
    Resolves: RHBZ#1776939
  - Support KDC ticket policies for authentication indicators
    Resolves: RHBZ#1777564


author: Thomas Woerner <twoerner@redhat.com> - 4.8.3-2
changelog:
  - Use default crypto policy for TLS and enable TLS 1.3 support
    Resolves: RHBZ#1777809
  - Covscan fixes
    Resolves: RHBZ#1777920
  - Change pki_version to 10.8.0
    Related: RHBZ#1748987


author: Thomas Woerner <twoerner@redhat.com> - 4.8.4-1
changelog:
  - Rebase to upstream release 4.8.4
    - Removed upstream patches 0001 to 0008 that are part of version 4.8.3-3
    Resolves: RHBZ#1782658
    Resolves: RHBZ#1782169
    Resolves: RHBZ#1783046
    Related: RHBZ#1748987


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.8.4-3
changelog:
  - Depend on krb5-kdb-version-devel for BuildRequires
  - Update nss dependency to 3.44.0-4
  - Reset per-indicator Kebreros policy
    Resolves: RHBZ#1784761


author: Thomas Woerner <twoerner@redhat.com> - 4.8.4-5
changelog:
  - Fixed weekday in 4.8.4-2 changelog date
    Related: RHBZ#1784003
  - adtrust: print DNS records for external DNS case after role is enabled
    Resolves: RHBZ#1665051
  - AD user without override receive InternalServerError with API
    Resolves: RHBZ#1782572
  - ipa-client-automount fails after repeated installation/uninstallation
    Resolves: RHBZ#1790886
  - install/updates: move external members past schema compat update
    Resolves: RHBZ#1803165
  - kdb: make sure audit_as_req callback signature change is preserved
    Resolves: RHBZ#1803786


author: François Cami <fcami@redhat.com> - 0.2-4
changelog:
  - Fix ipa-healthcheck.sh installation path (rhbz#1729188)
  - Create and own log directory (rhbz#1729188)


author: François Cami <fcami@redhat.com> - 0.3-1
changelog:
  - Update to upstream 0.3 (#1701351)
  - Add logrotate configs + depend on anacron and logrotate (#1729207)


author: Rob Crittenden <rcritten@redhat.com> - 0.4-1
changelog:
  - Rebase to upstream 0.4 (#1770346)
  - Create subpackage to split out core processing (#1771710)
  - Correct URL (#1773512)
  - Errors not translated to strings (#1752849)
  - JSON output not indented by default (#1729043)
  - Add dependencies to checks to avoid false-positives (#1727900)
  - Verify expected DNS records (#1695125)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.0-6
changelog:
  - Python 2 binary package renamed to python2-pyusb
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5.1-8
changelog:
  - Python 2 binary package renamed to python2-qrcode
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomas Orsava <torsava@redhat.com> - 5.1-12
changelog:
  - Require platform-python-setuptools instead of python3-setuptools
  - Resolves: rhbz#1654457, rhbz#1654458


