FEDORA-2020-8ab66bddc1 — unspecified update for freeipa

stable

freeipa-4.8.6-1.fc31

FEDORA-2020-8ab66bddc1 created by abbra 3 years ago for Fedora 31

New upstream release. Please see release notes at https://www.freeipa.org/page/Releases/4.8.6 and https://www.freeipa.org/page/Releases/4.8.5 for full list of changes since FreeIPA 4.8.4.

Major highlights:

openDNSSEC 2.1 support (not enabled on Fedora 31)
AJP connector protection for Dogtag/FreeIPA communication for CVE-2020-1938 mitigation. Fedora and RHEL do not force encrypted AJP connector by default with 9.0.31 but FreeIPA 4.8.5 will convert to encrypted AJP channel on upgrade or at a new deployment. Use of AJP is limited to localhost connections with integrated CA already.
Default authentication indicators are now documented in FreeIPA workshop, https://freeipa.readthedocs.io/en/latest/workshop/11-kerberos-ticket-policy.html
FreeIPA SELinux policy is now part of the upstream packaging and replaces distribution-wide policies.
New internal mechanism to promote Trust Agents in ipa-adtrust-install, to allow configuring schema compatibility plugin on remote replicas.
New "ipa-cacert-manage delete" command to allow pruning a CA certificate from LDAP store

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2020-8ab66bddc1

This update has been submitted for testing by abbra.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

abbra commented 3 years ago

OpenQA tests succeeded. There is a failure in server_cockpit_autoupdate test that is unrelated to FreeIPA changes as it is also reproduced in gnutls update.

This update has been pushed to testing.

3 years ago

This update's test gating status has been changed to 'greenwave_failed'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update can be pushed to stable now if the maintainer wishes

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago