From be21cabad48395f48f123c5041c858608de52d38 Mon Sep 17 00:00:00 2001 From: Florence Blanc-Renaud Date: Dec 19 2022 14:38:05 +0000 Subject: Spec file: bump krb5_kdb_version on rawhide fedora 38 now uses krb5 1.20.1 which provides krb5_kdb_version 9.0 instead of 8.0 Signed-off-by: Florence Blanc-Renaud Reviewed-By: Alexander Bokovoy --- diff --git a/freeipa.spec.in b/freeipa.spec.in index 7dcf2e6..bcb954c 100755 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -95,8 +95,6 @@ # Fedora %global package_name freeipa %global alt_name ipa -# Fix for CVE-2020-28196 -%global krb5_version 1.18.2-29 # 0.7.16: https://github.com/drkjam/netaddr/issues/71 %global python_netaddr_version 0.7.16 # Require 4.7.0 which brings Python 3 bindings @@ -112,7 +110,15 @@ %endif %global slapi_nis_version 0.56.5 +%if 0%{?fedora} < 38 +# Fix for CVE-2020-28196 +%global krb5_version 1.18.2-29 %global krb5_kdb_version 8.0 +%else +# Fix for CVE-2020-28196 +%global krb5_version 1.20.1-3 +%global krb5_kdb_version 9.0 +%endif # fix for segfault in python3-ldap, https://pagure.io/freeipa/issue/7324 %global python_ldap_version 3.1.0-1