From f720512e6b8733d5a8df8a75954a7449bd8516ab Mon Sep 17 00:00:00 2001
From: Alexander Bokovoy <abokovoy@redhat.com>
Date: Thu, 16 Jun 2022 09:18:32 +0300
Subject: [PATCH] Update dependencies given F34 retire

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
---
 freeipa.spec | 29 ++++++++++++-----------------
 1 file changed, 12 insertions(+), 17 deletions(-)

diff --git a/freeipa.spec b/freeipa.spec
index f089b15..f041690 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -90,14 +90,10 @@
 # Fedora
 %global package_name freeipa
 %global alt_name ipa
-# Fix for CVE-2020-28196
-%global krb5_version 1.18.2-29
+%global krb5_version 1.19.2-11
 # 0.7.16: https://github.com/drkjam/netaddr/issues/71
 %global python_netaddr_version 0.7.16
-# Require 4.7.0 which brings Python 3 bindings
-# Require 4.12 which has DsRGetForestTrustInformation access rights fixes
-# Require 4.15.2 which brings CVE-2020-25717 fixes
-%global samba_version 2:4.15.2
+%global samba_version 2:4.15.7
 
 # 3.14.5-45 or later includes a number of interfaces fixes for IPA interface
 %global selinux_policy_version 3.14.5-45
@@ -108,18 +104,12 @@
 # fix for segfault in python3-ldap, https://pagure.io/freeipa/issue/7324
 %global python_ldap_version 3.1.0-1
 
-# Make sure to use 389-ds-base versions that fix https://github.com/389ds/389-ds-base/issues/4609
-# and has DNA interval enabled
-%if 0%{?fedora} < 34
-%global ds_version 1.4.4.16-1
-%else
-%global ds_version 2.0.7-1
-%endif
+%global ds_version 2.0.15-1
 
 # Fix for TLS 1.3 PHA, RHBZ#1775146
 %global httpd_version 2.4.41-9
 
-%global bind_version 9.11.24-1
+%global bind_version 9.16.29-1
 # Don't use Fedora's Python dependency generator on Fedora 30/rawhide yet.
 # Some packages don't provide new dist aliases.
 # https://docs.fedoraproject.org/en-US/packaging-guidelines/Python/
@@ -150,8 +140,8 @@
 # RHEL 8.2+, F32+ has 3.58
 %global nss_version 3.44.0-4
 
-# RHEL 8.3+, F32+
-%global sssd_version 2.4.0
+# RHEL 8.7+, F35+
+%global sssd_version 2.7.1
 
 %define krb5_base_version %(LC_ALL=C /usr/bin/pkgconf --modversion krb5 | grep -Eo '^[^.]+\.[^.]+' || echo %krb5_version)
 %global kdcproxy_version 0.4-3
@@ -646,7 +636,12 @@ Requires: python3-sssdconfig >= %{sssd_version}
 Requires: cyrus-sasl-gssapi%{?_isa}
 Requires: chrony
 Requires: krb5-workstation >= %{krb5_version}
-Requires: authselect >= 0.4-2
+# authselect: sssd profile with-subid
+%if 0%{?fedora} >= 36
+Requires: authselect >= 1.4.0
+%else
+Requires: authselect >= 1.2.5
+%endif
 Requires: curl
 # NIS domain name config: /usr/lib/systemd/system/*-domainname.service
 # All Fedora 28+ and RHEL8+ contain the service in hostname package