public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Alexander Bokovoy <abokovoy@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/freeipa] f43: FreeIPA 4.13.4
Date: Mon, 07 Sep 2026 11:29:10 GMT	[thread overview]
Message-ID: <178878055070.1.5683663605267357047.rpms-freeipa-9439eabf5bc9@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : rpms/freeipa
            Branch : f43
            Commit : 9439eabf5bc9c455d72bbe84b0c977928ae406db
            Author : Alexander Bokovoy <abokovoy@redhat.com>
            Date   : 2026-09-07T14:26:39+03:00
            Stats  : +65/-6 in 4 file(s)
            URL    : https://src.fedoraproject.org/rpms/freeipa/c/9439eabf5bc9c455d72bbe84b0c977928ae406db?branch=f43

            Log:
            FreeIPA 4.13.4

Security release

Resolves: CVE-2026-79678, CVE-2026-76578

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>

---
diff --git a/.gitignore b/.gitignore
index d88ca25..5c5b675 100644
--- a/.gitignore
+++ b/.gitignore
@@ -146,3 +146,5 @@
 /freeipa-4.13.2.tar.gz.asc
 /freeipa-4.13.3.tar.gz
 /freeipa-4.13.3.tar.gz.asc
+/freeipa-4.13.4.tar.gz
+/freeipa-4.13.4.tar.gz.asc

diff --git a/freeipa.spec b/freeipa.spec
index 64e5912..7505ecf 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -196,8 +196,8 @@
 
 # Work-around fact that RPM SPEC parser does not accept
 # "Version: @VERSION@" in freeipa.spec.in used for Autoconf string replacement
-%define IPA_VERSION 4.13.3
-%global TARBALL_IPA_VERSION 4.13.3
+%define IPA_VERSION 4.13.4
+%global TARBALL_IPA_VERSION 4.13.4
 %global IPA_RELEASE_PATH %(echo $IPA_VERSION|tr . -)
 # Release candidate version -- uncomment with one percent for RC versions
 #%%global rc_version rc1
@@ -211,7 +211,7 @@
 
 Name:           %{package_name}
 Version:        %{IPA_VERSION}
-Release:        2%{?rc_version:.%rc_version}%{?dist}
+Release:        1%{?rc_version:.%rc_version}%{?dist}
 Summary:        The Identity, Policy and Audit system
 
 License:        GPL-3.0-or-later
@@ -230,7 +230,8 @@ Source1:        https://codeberg.org/freeipa/freeipa/releases/download/release-%
 # Source2:        gpgkey-0E63D716D76AC080A4A33513F40800B6298EB963.asc
 # Release 4.13.3 is signed by Rafael Jeffman
 # Rafael's key: 4B7E7AFBB0AAA98947CA2427F17E2569BEE3800C
-Source2:        gpgkey-4B7E7AFBB0AAA98947CA2427F17E2569BEE3800C.asc
+# Back to Antonio's key
+Source2:        gpgkey-B40A78FBA576C4A3FC7D7BBC359FAF777296F653.asc
 %endif
 
 Patch0:         freeipa-version-upgrade-fedora-only.patch
@@ -1972,6 +1973,10 @@ fi
 %endif
 
 %changelog
+* Mon Sep 07 2026 Alexander Bokovoy <abokovoy@redhat.com> - 4.13.4-1
+- FreeIPA 4.13.4
+- Resolves: CVE-2026-79678, CVE-2026-76578
+
 * Thu Sep 03 2026 Alexander Bokovoy <abokovoy@redhat.com> - 4.13.3-2
 - Rebuild against Samba 4.23.12
 

diff --git a/gpgkey-B40A78FBA576C4A3FC7D7BBC359FAF777296F653.asc b/gpgkey-B40A78FBA576C4A3FC7D7BBC359FAF777296F653.asc
new file mode 100644
index 0000000..7499943
--- /dev/null
+++ b/gpgkey-B40A78FBA576C4A3FC7D7BBC359FAF777296F653.asc
@@ -0,0 +1,52 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=UQvU
+-----END PGP PUBLIC KEY BLOCK-----

diff --git a/sources b/sources
index da806eb..3f6a7fb 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (freeipa-4.13.3.tar.gz) = 9600639b14541df5a8fecce415068aba9b18a24e5e04080e352e253777fe02142e6eaa0c85fc76dbefdd270ad823074d043661ca86eddb34a3cd0fe3d84b8574
-SHA512 (freeipa-4.13.3.tar.gz.asc) = 74819d8e5fe1350d0a77d658d41eb5066551b28ac70c2e9b32a9c231f72e3002ba06a6ea9628fd796df1b4a4154f3dc82e8d5feabeded4722dc64b51becafbed
+SHA512 (freeipa-4.13.4.tar.gz) = e7ad5ee99603fa6aa255e13cca07012de3fe48ca94cd51004fd551878458e07bc533ea48a611308b3270e6ae3cd1fc134ce893a53aea104e6bf32f27e03a1dab
+SHA512 (freeipa-4.13.4.tar.gz.asc) = cec41555a07b31cbca3deda63e0eb5b45d698f9c7245289bac3bca32bfc7cdd339a10c32b33847be372cc654d155de2da502c06cecba07f62bf40ea7e3343478

                 reply	other threads:[~2026-09-07 11:29 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178878055070.1.5683663605267357047.rpms-freeipa-9439eabf5bc9@fedoraproject.org \
    --to=abokovoy@redhat.com \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox