# changelog

author: S.Tindall <s10dal@elrepo.org> - 6.4.7-1
changelog:
  - Updated with the 6.4.7 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.7]


author: S.Tindall <s10dal@elrepo.org> - 6.4.8-1
changelog:
  - Updated with the 6.4.8 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.8]


author: S.Tindall <s10dal@elrepo.org> - 6.4.9-1
changelog:
  - Updated with the 6.4.9 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.9]
  - Added: CONFIG_ARCH_HAS_CPU_FINALIZE_INIT=y
  - Added: CONFIG_CPU_SRSO=y


author: S.Tindall <s10dal@elrepo.org> - 6.4.10-1
changelog:
  - Updated with the 6.4.10 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.10]


author: S.Tindall <s10dal@elrepo.org> - 6.4.11-1
changelog:
  - Updated with the 6.4.11 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.11]


author: S.Tindall <s10dal@elrepo.org> - 6.4.12-1
changelog:
  - Updated with the 6.4.12 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.12]


author: S.Tindall <s10dal@elrepo.org> - 6.5.0-1
changelog:
  - Updated with the 6.5 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5]
  - CONFIG_CACHESTAT_SYSCALL=y
  - CONFIG_CRYPTO_GENIV=y
  - CONFIG_CRYPTO_SHA3=y
  - CONFIG_CRYPTO_SIG2=y
  - CONFIG_FB_IO_HELPERS=y
  - CONFIG_FB_SYS_COPYAREA=y
  - CONFIG_FB_SYS_FILLRECT=y
  - CONFIG_FB_SYS_FOPS=y
  - CONFIG_FB_SYS_HELPERS_DEFERRED=y
  - CONFIG_FB_SYS_HELPERS=y
  - CONFIG_FB_SYS_IMAGEBLIT=y
  - CONFIG_GPIO_VX855=m
  - CONFIG_HARDLOCKUP_DETECTOR_COUNTS_HRTIMER=y
  - CONFIG_HARDLOCKUP_DETECTOR=y
  - CONFIG_HAVE_FUNCTION_GRAPH_RETVAL=y
  - CONFIG_HAVE_HARDLOCKUP_DETECTOR_BUDDY=y
  - CONFIG_HOTPLUG_CORE_SYNC_DEAD=y
  - CONFIG_HOTPLUG_CORE_SYNC_FULL=y
  - CONFIG_HOTPLUG_CORE_SYNC=y
  - CONFIG_HOTPLUG_PARALLEL=y
  - CONFIG_HOTPLUG_SPLIT_STARTUP=y
  - CONFIG_LEDS_SIEMENS_SIMATIC_IPC_APOLLOLAKE=m
  - CONFIG_LEDS_SIEMENS_SIMATIC_IPC_F7188X=m
  - CONFIG_LIQUIDIO_CORE=m
  - CONFIG_MDIO_REGMAP=m
  - CONFIG_NEED_SG_DMA_FLAGS=y
  - CONFIG_PCS_LYNX=m
  - CONFIG_PPPOE_HASH_BITS=4
  - CONFIG_PPPOE_HASH_BITS_4=y
  - CONFIG_UNACCEPTED_MEMORY=y
  - CONFIG_X86_AMD_PSTATE_DEFAULT_MODE=3


author: Akemi Yagi <toracat@elrepo.org> - 6.5.1-1
changelog:
  - Updated with the 6.5.1 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.1]


author: Akemi Yagi <toracat@elrepo.org> - 6.5.2-1
changelog:
  - Updated with the 6.5.2 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.2]


author: S.Tindall <s10dal@elrepo.org> - 6.5.3-1
changelog:
  - Updated with the 6.5.3 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.3]
  - Removed: CONFIG_IMA_TRUSTED_KEYRING=y
  - Added: CONFIG_VIDEO_CAMERA_SENSOR=y
  - Added: CONFIG_VIDEO_V4L2_SUBDEV_API=y


author: Till Hofmann <thofmann@fedoraproject.org> - 0.6.11-12
changelog:
  - Explicitly BR python3-setuptools (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Richard W.M. Jones <rjones@redhat.com> - 2:4.21.1-8
changelog:
  - Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/d
    evel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.0-12
changelog:
  - Add preliminary support for S4U operations in Samba AD DC
    resolves: #1836630 - Samba DC: Remote Desktop cannot access files
  - Fix lookup_unix_user_name to allow lookup of realm-qualified users and groups
    required for upcoming FreeIPA Global Catalog support


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.0-13
changelog:
  - Report 'samba' daemon status back to systemd
  - Support dnspython 2.0.0 or later in samba_dnsupdate


author: Andreas Schneider <asn@redhat.com> - 4.13.0-14
changelog:
  - Fixed dbcheck running in a release tarball
  - Updated internal resolv_wrapper copy to verison 1.1.7


author: Guenther Deschner <gdeschner@redhat.com> - 4.13.1-0
changelog:
  - Update to Samba 4.13.1
  - resolves: #1892631, #1892634 - Security fixes for CVE-2020-14318
  - resolves: #1891685, #1892628 - Security fixes for CVE-2020-14323
  - resolves: #1892636, #1892640 - Security fixes for CVE-2020-14383


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.2-2
changelog:
  - rhbz#1892745, rhbz#1900232: smbclient mget crashes (upstream bug 14517)
  - Merge RHEL 8.4 patches:
    - FIPS-related enhancements
    - FreeIPA Global Catalog patches


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.0-1
changelog:
  - Update to 2.11.0 (CVE-2023-39350, CVE-2023-39351, CVE-2023-39352,
    CVE-2023-39353, CVE-2023-39354, CVE-2023-39356, CVE-2023-40181,
    CVE-2023-40186, CVE-2023-40188, CVE-2023-40567, CVE-2023-40569 and
    CVE-2023-40589).


author: S.Tindall <s10dal@elrepo.org> - 6.11.2
changelog:
  - Updated with the 6.11.2 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.2]


author: S.Tindall <s10dal@elrepo.org> - 6.11.3
changelog:
  - Updated with the 6.11.3 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.3]
  - Added: CONFIG_PROC_MEM_ALWAYS_FORCE=y


author: S.Tindall <s10dal@elrepo.org> - 6.11.4
changelog:
  - Updated with the 6.11.4 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.4]
  - Removed: CONFIG_LSM="lockdown,yama,integrity,selinux,bpf"
  - Added: CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,apparmor,bpf"
  - Added: CONFIG_MEMCG_V1=y
  - Added: CONFIG_SECURITY_LANDLOCK=y


author: Akemi Yagi <toracat@elrepo.org> - 6.11.5
changelog:
  - Updated with the 6.11.5 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.5]
  - Added: CONFIG_LEGACY_PTYS=y
  - Added: CONFIG_LEGACY_PTY_COUNT=256


author: S.Tindall <s10dal@elrepo.org> - 6.11.6
changelog:
  - Updated with the 6.11.6 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.6]
  - Added: CONFIG_IDPF=m


author: S.Tindall <s10dal@elrepo.org> - 6.11.7
changelog:
  - Updated with the 6.11.7 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.7]


author: S.Tindall <s10dal@elrepo.org> - 6.11.8
changelog:
  - Updated with the 6.11.8 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.8]


author: S.Tindall <s10dal@elrepo.org> - 6.11.9
changelog:
  - Updated with the 6.11.9 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.9]


author: S.Tindall <s10dal@elrepo.org> - 6.12.0
changelog:
  - Updated with the 6.12 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12]
  - Removed: CONFIG_ARCH_USES_PG_UNCACHED=y
  - Removed: CONFIG_BT_CMTP=m
  - Removed: CONFIG_CAPI_TRACE=y
  - Removed: CONFIG_DMA_OPS=y
  - Removed: CONFIG_HAVE_ZSMALLOC=y
  - Removed: CONFIG_I2C_COMPAT=y
  - Removed: CONFIG_ISDN_CAPI_MIDDLEWARE=y
  - Removed: CONFIG_MODULE_COMPRESS_NONE=y
  - Removed: CONFIG_NUMA_EMU=y
  - Removed: CONFIG_SND_PCM_ELD=y
  - Removed: CONFIG_SND_SOC_HDAC_HDMI=m
  - Removed: CONFIG_SND_SOC_INTEL_APL=m
  - Removed: CONFIG_SND_SOC_INTEL_BXT_DA7219_MAX98357A_MACH=m
  - Removed: CONFIG_SND_SOC_INTEL_BXT_RT298_MACH=m
  - Removed: CONFIG_SND_SOC_INTEL_CFL=m
  - Removed: CONFIG_SND_SOC_INTEL_CML_H=m
  - Removed: CONFIG_SND_SOC_INTEL_CML_LP=m
  - Removed: CONFIG_SND_SOC_INTEL_CNL=m
  - Removed: CONFIG_SND_SOC_INTEL_DA7219_MAX98357A_GENERIC=m
  - Removed: CONFIG_SND_SOC_INTEL_GLK=m
  - Removed: CONFIG_SND_SOC_INTEL_KBL_DA7219_MAX98357A_MACH=m
  - Removed: CONFIG_SND_SOC_INTEL_KBL_DA7219_MAX98927_MACH=m
  - Removed: CONFIG_SND_SOC_INTEL_KBL=m
  - Removed: CONFIG_SND_SOC_INTEL_KBL_RT5660_MACH=m
  - Removed: CONFIG_SND_SOC_INTEL_KBL_RT5663_MAX98927_MACH=m
  - Removed: CONFIG_SND_SOC_INTEL_KBL_RT5663_RT5514_MAX98927_MACH=m
  - Removed: CONFIG_SND_SOC_INTEL_SKL=m
  - Removed: CONFIG_SND_SOC_INTEL_SKL_NAU88L25_MAX98357A_MACH=m
  - Removed: CONFIG_SND_SOC_INTEL_SKL_NAU88L25_SSM4567_MACH=m
  - Removed: CONFIG_SND_SOC_INTEL_SKL_RT286_MACH=m
  - Removed: CONFIG_SND_SOC_INTEL_SKYLAKE_COMMON=m
  - Removed: CONFIG_SND_SOC_INTEL_SKYLAKE_FAMILY=m
  - Removed: CONFIG_SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC=y
  - Removed: CONFIG_SND_SOC_INTEL_SKYLAKE=m
  - Removed: CONFIG_SND_SOC_INTEL_SKYLAKE_SSP_CLK=m
  - Removed: CONFIG_SND_SOC_INTEL_SST=m
  - Removed: CONFIG_SND_SOC_RT5514=m
  - Removed: CONFIG_SND_SOC_RT5514_SPI=m
  - Removed: CONFIG_SND_SOC_RT5663=m
  - Removed: CONFIG_SPLIT_PTLOCK_CPUS=4
  - Removed: CONFIG_TOUCHSCREEN_CYTTSP4_CORE=m
  - Removed: CONFIG_TOUCHSCREEN_CYTTSP4_I2C=m
  - Removed: CONFIG_TOUCHSCREEN_CYTTSP4_SPI=m
  - Removed: CONFIG_TOUCHSCREEN_MCS5000=m
  - Added: CONFIG_AMD_ATL_PRM=y
  - Added: CONFIG_ARCH_DEFAULT_CRASH_DUMP=y
  - Added: CONFIG_ARCH_HAS_DMA_OPS=y
  - Added: CONFIG_ARCH_HAVE_EXTRA_ELF_NOTES=y
  - Added: CONFIG_ARCH_PKEY_BITS=4
  - Added: CONFIG_ARCH_SUPPORTS_HUGE_PFNMAP=y
  - Added: CONFIG_ARCH_SUPPORTS_PMD_PFNMAP=y
  - Added: CONFIG_ARCH_SUPPORTS_PUD_PFNMAP=y
  - Added: CONFIG_ARCH_SUPPORTS_RT=y
  - Added: CONFIG_ARCH_USES_PG_ARCH_2=y
  - Added: CONFIG_DMA_OPS_HELPERS=y
  - Added: CONFIG_EROFS_FS_BACKED_BY_FILE=y
  - Added: CONFIG_GROUP_SCHED_WEIGHT=y
  - Added: CONFIG_HUGETLB_PMD_PAGE_TABLE_SHARING=y
  - Added: CONFIG_KVM_X86=m
  - Added: CONFIG_MITIGATION_GDS=y
  - Added: CONFIG_MITIGATION_L1TF=y
  - Added: CONFIG_MITIGATION_MDS=y
  - Added: CONFIG_MITIGATION_MMIO_STALE_DATA=y
  - Added: CONFIG_MITIGATION_RETBLEED=y
  - Added: CONFIG_MITIGATION_SPECTRE_V1=y
  - Added: CONFIG_MITIGATION_SPECTRE_V2=y
  - Added: CONFIG_MITIGATION_SRBDS=y
  - Added: CONFIG_MITIGATION_SSB=y
  - Added: CONFIG_MITIGATION_TAA=y
  - Added: CONFIG_MLX5_HW_STEERING=y
  - Added: CONFIG_NET_DEVMEM=y
  - Added: CONFIG_NUMA_EMU=y
  - Added: CONFIG_NUMA_MEMBLKS=y
  - Added: CONFIG_RUSTC_LLVM_VERSION=0
  - Added: CONFIG_RUSTC_VERSION=0
  - Added: CONFIG_SND_SOC_ACPI_AMD_MATCH=m
  - Added: CONFIG_SND_SOC_SOF_INTEL_PTL=m
  - Added: CONFIG_SND_SOC_SOF_PANTHERLAKE=m
  - Added: CONFIG_SPLIT_PMD_PTLOCKS=y
  - Added: CONFIG_SPLIT_PTE_PTLOCKS=y
  - Added: CONFIG_XZ_DEC_ARM64=y
  - Added: CONFIG_XZ_DEC_RISCV=y
  - Added: CONFIG_ZRAM_BACKEND_FORCE_LZO=y
  - Added: CONFIG_ZRAM_BACKEND_LZO=y


author: S.Tindall <s10dal@elrepo.org> - 6.12.1
changelog:
  - Updated with the 6.12.1 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.1]
  - Added: CONFIG_BLK_DEV_DRBD=m
  - Added: CONFIG_LRU_CACHE=m


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.20.1-6
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2114771


author: Julien Rische <jrische@redhat.com> - 1.20.1-8
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.21-1
changelog:
  - New upstream version (1.21)
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2214297
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2214300
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2181311
  - Add support for MS-PAC extended KDC signature (CVE-2022-37967)
    Resolves: rhbz#2166001
  - Fix syntax error in aclocal.m4
    Resolves: rhbz#2143306


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
  - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-3
changelog:
  - Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-2
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2087745 - 2FA prompting setting ineffective
  - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.2-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
  - Resolves: rhbz#2098617 - Harden kerberos ticket validation
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
  - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
  - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8


author: Paul Wouters <paul.wouters@aiven.io> - 4.12-2
changelog:
  - Remove ipsec show and ipsec verify sub commands (not very useful, causes python requirement)
  - Patch for handling libcap-ng return values and fix capng_apply() call


author: Paul Wouters <paul.wouters@aiven.io> - 4.15-1
changelog:
  - Update libreswan to 4.15 for CVE-2024-3652
  - Resolves rhbz#2274448 CVE-2024-3652 libreswan: IKEv1 default AH/ESP
    responder can crash and restart
  - Allow "ipsec import" to try importing PKCS#12 non-interactively if there
    is no password


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 2.2.0-1
changelog:
  - rhbz#1691297 - libtalloc-2.2.0 is available
  - rhbz#1737644 - libldb, libtalloc, libtevent, libtdb: Remove Python 2 subpackages from Fedora 31+


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.3.18-3
changelog:
  - rhbz#1718113 - samba fail to build with Python 3.8
    AttributeError: module 'time' has no attribute 'clock'


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.4.2-1
changelog:
  - rhbz#1691299 - libtdb-1.4.2 is available
  - rhbz#1737644 - libldb, libtalloc, libtevent, libtdb: Remove Python 2 subpackages from Fedora 31+


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 0.10.0-1
changelog:
  - rhbz#1691300 - libtevent-0.10.0 is available
  - rhbz#1737644 - libldb, libtalloc, libtevent, libtdb: Remove Python 2 subpackages from Fedora 31+


author: Jeff Moyer <jmoyer@redhat.com> - 0.2-1
changelog:
  - Add io_uring_cq_ready()
  - Add io_uring_peek_batch_cqe()
  - Add io_uring_prep_accept()
  - Add io_uring_prep_{recv,send}msg()
  - Add io_uring_prep_timeout_remove()
  - Add io_uring_queue_init_params()
  - Add io_uring_register_files_update()
  - Add io_uring_sq_space_left()
  - Add io_uring_wait_cqe_timeout()
  - Add io_uring_wait_cqes()
  - Add io_uring_wait_cqes_timeout()


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.3-1
changelog:
  - Add IORING_OP_STATX
  - Add IORING_OP_OPENAT/IORING_OP_CLOSE helpers
  - Add prep helpers for IORING_OP_FILES_UPDATE and IORING_OP_FALLOCATE
  - Add io_uring_prep_connect() helper
  - Add io_uring_wait_cqe_nr()
  - Add IORING_OP_ASYNC_CANCEL and prep helper


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Dominik Mierzejewski <dominik@greysector.net> - 2.3.1-3
changelog:
  - Add Mozilla plugin path to MOZ_GMP_PATH instead of overriding unconditionally
  - Resolves: rhbz#2225112


author: Kalev Lember <klember@redhat.com> - 2.4.0-1
changelog:
  - Update to 2.4.0
  - Update gstreamer plugin to 1.22.7
  - Obsolete noopenh264 stub package
  - Use SPDX license identifiers


author: Quanah Gibson-Mount <quanah@symas.com> - 2.4.54-1
changelog:
  - Update for OpenLDAP 2.4.54 release
  - Fix a few library symlinks
  - Add pw-sha2 to match el7 package
  - Add lastbind, noopsrch modules
  - Patch for ITS#9370


author: Andreas Schneider <asn@redhat.com> - 1.1.7-1
changelog:
  - Update to version 1.1.7
     o https://gitlab.com/cwrap/resolv_wrapper/-/blob/resolv_wrapper-1.1.7/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.7-6
changelog:
  - Update to version 1.1.8
     o https://gitlab.com/cwrap/resolv_wrapper/-/blob/resolv_wrapper-1.1.8/CHANGELOG


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: #2294354 - CVE-2024-37894 squid: Out-of-bounds write error may
    lead to Denial of Service


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.12-2
changelog:
  - Disable ESI support since ESI support has been also removed from squid 7
  - Resolves: CVE-2024-45802 squid: Denial of Service processing ESI
    response content


