# changelog

author: Alexander Bokovoy <abokovoy@redhat.com> - 4.9.7-3
changelog:
  - Hardening for CVE-2020-25717
  - Generate SIDs for IPA users and groups by default
  - Verify MS-PAC consistency when it is generated or validated
  - Rebuild against samba-4.15.2
  - Resolves: rhbz#2021720


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.9.6-3
changelog:
  - Add dependency on sssd-winbind-idmap for freeipa-server-trust-ad
  - Resolves: rhbz#1970168
  - Rebuild against Samba 4.15.0 RC1 (libndr soname bump)


author: Neal Gompa <ngompa@datto.com> - 7.5.1-5
changelog:
  - Clean up the spec file for legibility and modern spec standards
  - Remove unneeded info scriptlets
  - Use systemd-sysusers for frr user and frrvty group
  - Use git-core instead of git for applying patches
  - Drop redundant build dependencies


author: Michal Ruprich <mruprich@redhat.com> - 8.2-1
changelog:
  - New version 8.2 (rhbz#2020439)
  - Resolves: #2011868 - systemctl frr reload does not stop daemons that are not enabled in /etc/frr/daemons


author: Paul Wouters <paul.wouters@aiven.io> - 5.9.4-1
changelog:
  - Resolves: rhbz#2015165 strongswan-5.9.4 is available
  - Resolves: rhbz#2015611 CVE-2021-41990 strongswan: gmp plugin: integer overflow via a crafted certificate with an RSASSA-PSS signature
  - Resolves: rhbz#2015614 CVE-2021-41991 strongswan: integer overflow when replacing certificates in cache
  - Add BuildRequire for tpm2-tss-devel and weak dependency for tpm2-tools


author: Paul Wouters <paul.wouters@aiven.io> - 5.9.4-2
changelog:
  - Resolves rhbz#2018547 'strongswan restart' breaks ipsec started with strongswan-starter
  - Return to using tmpfiles, but extend to cover strongswan-starter service too
  - Cleanup old patches


author: Neal Gompa <ngompa@datto.com> - 5.9.4-4
changelog:
  - Disable TPM/TSS 1.2 support for F36+ / RHEL9+
  - Resolves: rhbz#2033299 Drop TPM/TSS 1.2 support (trousers)


author: Arne Reiter <redhat@arnereiter.de> - 5.9.5-3
changelog:
  - Resolves: rhbz#2048108 - segfault at 18 ip 00007f4c7c0d841c sp 00007ffe49f61b70 error 4 in libc.so.6


