- 
    Wed Dec 18 2019 Martin Karac <martin.karac@oracle.com> - 4.8.0-13.0.1
    
- Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
   
  
  - 
    Tue Nov 26 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.0-13
    
- CVE-2019-14867: Denial of service in IPA server due to wrong use of ber_scanf()
  Resolves: RHBZ#1767303
- CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
  Resolves: RHBZ#1728125
   
  
  - 
    Thu Nov 21 2019 Thomas Woerner <twoerner@redhat.com> - 4.8.0-12
    
- Do not run trust upgrade code if master lacks Samba bindings
  Resolves: RHBZ#1773516
   
  
  - 
    Mon Sep 23 2019 Thomas Woerner <twoerner@redhat.com> - 4.8.0-11
    
- Adtrust: avoid using timestamp in klist output
  Resolves: RHBZ#1750242
- Add default access control configuration to trusted domain objects
  Resolves: RHBZ#1751707
   
  
  - 
    Thu Aug 29 2019 Thomas Woerner <twoerner@redhat.com> - 4.8.0-10
    
- Fix automount behavior with authselect
  Resolves: RHBZ#1740167
   
  
  - 
    Mon Aug 19 2019 Thomas Woerner <twoerner@redhat.com> - 4.8.0-9
    
- extdom: unify error code handling especially LDAP_NO_SUCH_OBJECT
  Resolves: RHBZ#1741530
   
  
  - 
    Thu Aug 15 2019 Thomas Woerner <twoerner@redhat.com> - 4.8.0-8
    
- FreeIPA 4.8.0 tarball lacks two update files that are in git
  Resolves: RHBZ#1741170
   
  
  - 
    Tue Aug 13 2019 Thomas Woerner <twoerner@redhat.com> - 4.8.0-7
    
- Allow insecure binds for migration
  Resolves: RHBZ#1731963
   
  
  - 
    Fri Aug 02 2019 Thomas Woerner <twoerner@redhat.com> - 4.8.0-6
    
- Fix --external-ca-profile not passed to CSR
  Resolves: RHBZ#1731813
   
  
  - 
    Tue Jul 30 2019 Thomas Woerner <twoerner@redhat.com> - 4.8.0-5
    
- Remove posixAccount from service_find search filter
  Resolves: RHBZ#1731437
- Fix repeated uninstallation of ipa-client-samba crashes
  Resolves: RHBZ#1732529
- WebUI: Add PKINIT status field to 'Configuration' page
  Resolves: RHBZ#1518153