# changelog

author: S.Tindall <s10dal@elrepo.org> - 6.4.7-1
changelog:
  - Updated with the 6.4.7 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.7]


author: S.Tindall <s10dal@elrepo.org> - 6.4.8-1
changelog:
  - Updated with the 6.4.8 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.8]


author: S.Tindall <s10dal@elrepo.org> - 6.4.9-1
changelog:
  - Updated with the 6.4.9 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.9]
  - Added: CONFIG_ARCH_HAS_CPU_FINALIZE_INIT=y
  - Added: CONFIG_CPU_SRSO=y


author: S.Tindall <s10dal@elrepo.org> - 6.4.10-1
changelog:
  - Updated with the 6.4.10 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.10]


author: S.Tindall <s10dal@elrepo.org> - 6.4.11-1
changelog:
  - Updated with the 6.4.11 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.11]


author: S.Tindall <s10dal@elrepo.org> - 6.4.12-1
changelog:
  - Updated with the 6.4.12 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.12]


author: S.Tindall <s10dal@elrepo.org> - 6.5.0-1
changelog:
  - Updated with the 6.5 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5]
  - CONFIG_CACHESTAT_SYSCALL=y
  - CONFIG_CRYPTO_GENIV=y
  - CONFIG_CRYPTO_SHA3=y
  - CONFIG_CRYPTO_SIG2=y
  - CONFIG_FB_IO_HELPERS=y
  - CONFIG_FB_SYS_COPYAREA=y
  - CONFIG_FB_SYS_FILLRECT=y
  - CONFIG_FB_SYS_FOPS=y
  - CONFIG_FB_SYS_HELPERS_DEFERRED=y
  - CONFIG_FB_SYS_HELPERS=y
  - CONFIG_FB_SYS_IMAGEBLIT=y
  - CONFIG_GPIO_VX855=m
  - CONFIG_HARDLOCKUP_DETECTOR_COUNTS_HRTIMER=y
  - CONFIG_HARDLOCKUP_DETECTOR=y
  - CONFIG_HAVE_FUNCTION_GRAPH_RETVAL=y
  - CONFIG_HAVE_HARDLOCKUP_DETECTOR_BUDDY=y
  - CONFIG_HOTPLUG_CORE_SYNC_DEAD=y
  - CONFIG_HOTPLUG_CORE_SYNC_FULL=y
  - CONFIG_HOTPLUG_CORE_SYNC=y
  - CONFIG_HOTPLUG_PARALLEL=y
  - CONFIG_HOTPLUG_SPLIT_STARTUP=y
  - CONFIG_LEDS_SIEMENS_SIMATIC_IPC_APOLLOLAKE=m
  - CONFIG_LEDS_SIEMENS_SIMATIC_IPC_F7188X=m
  - CONFIG_LIQUIDIO_CORE=m
  - CONFIG_MDIO_REGMAP=m
  - CONFIG_NEED_SG_DMA_FLAGS=y
  - CONFIG_PCS_LYNX=m
  - CONFIG_PPPOE_HASH_BITS=4
  - CONFIG_PPPOE_HASH_BITS_4=y
  - CONFIG_UNACCEPTED_MEMORY=y
  - CONFIG_X86_AMD_PSTATE_DEFAULT_MODE=3


author: Akemi Yagi <toracat@elrepo.org> - 6.5.1-1
changelog:
  - Updated with the 6.5.1 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.1]


author: Akemi Yagi <toracat@elrepo.org> - 6.5.2-1
changelog:
  - Updated with the 6.5.2 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.2]


author: S.Tindall <s10dal@elrepo.org> - 6.5.3-1
changelog:
  - Updated with the 6.5.3 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.3]
  - Removed: CONFIG_IMA_TRUSTED_KEYRING=y
  - Added: CONFIG_VIDEO_CAMERA_SENSOR=y
  - Added: CONFIG_VIDEO_V4L2_SUBDEV_API=y


author: Till Hofmann <thofmann@fedoraproject.org> - 0.6.11-12
changelog:
  - Explicitly BR python3-setuptools (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Alexander Bokovoy <abokovoy@redhat.com> - 2:4.23.0-14
changelog:
  - Fix DLZ crash on unconfigured Samba AD system and rebuild against Python
    3.14.0rc3
  - Resolves: rhbz#2396621
  - Resolves: rhbz#2397242


author: Günther Deschner <gd@samba.org> - 2:4.23.2-1
changelog:
  - Update to Samba 4.23.2
  - resolves: rhbz#2404204
  - resolves: rhbz#2391698 - Security fix for CVE-2025-9640
  - resolves: rhbz#2394377 - Security fix for CVE-2025-10230


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.0-12
changelog:
  - Add preliminary support for S4U operations in Samba AD DC
    resolves: #1836630 - Samba DC: Remote Desktop cannot access files
  - Fix lookup_unix_user_name to allow lookup of realm-qualified users and groups
    required for upcoming FreeIPA Global Catalog support


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.0-13
changelog:
  - Report 'samba' daemon status back to systemd
  - Support dnspython 2.0.0 or later in samba_dnsupdate


author: Andreas Schneider <asn@redhat.com> - 4.13.0-14
changelog:
  - Fixed dbcheck running in a release tarball
  - Updated internal resolv_wrapper copy to verison 1.1.7


author: Guenther Deschner <gdeschner@redhat.com> - 4.13.1-0
changelog:
  - Update to Samba 4.13.1
  - resolves: #1892631, #1892634 - Security fixes for CVE-2020-14318
  - resolves: #1891685, #1892628 - Security fixes for CVE-2020-14323
  - resolves: #1892636, #1892640 - Security fixes for CVE-2020-14383


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.2-2
changelog:
  - rhbz#1892745, rhbz#1900232: smbclient mget crashes (upstream bug 14517)
  - Merge RHEL 8.4 patches:
    - FIPS-related enhancements
    - FreeIPA Global Catalog patches


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.0-1
changelog:
  - Update to 2.11.0 (CVE-2023-39350, CVE-2023-39351, CVE-2023-39352,
    CVE-2023-39353, CVE-2023-39354, CVE-2023-39356, CVE-2023-40181,
    CVE-2023-40186, CVE-2023-40188, CVE-2023-40567, CVE-2023-40569 and
    CVE-2023-40589).


author: Robert Scheck <robert@fedoraproject.org> - 1.5.5-6
changelog:
  - Add upstream patch for microphone input to fix flag comparison
    in "guac_rwlock_acquire_write_lock" function (GUACAMOLE-1940)


author: Robert Scheck <robert@fedoraproject.org> - 1.6.0-1
changelog:
  - Update to 1.6.0 (#2363860, thanks to W. Michael Petullo)
  - Add upstream patch for src/libguac/wol.c to fix inet_pton being
    called with a destination buffer size too small (GUACAMOLE-2087)


author: S.Tindall <s10dal@elrepo.org> - 6.16.9
changelog:
  - Updated with the 6.16.9 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.16.9]


author: S.Tindall <s10dal@elrepo.org> - 6.17.0
changelog:
  - Updated with the 6.17 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17]
  - Removed: CONFIG_ARCH_HAS_CRC32=y
  - Removed: CONFIG_ARCH_HAS_CRC64=y
  - Removed: CONFIG_ARCH_HAS_CRC_T10DIF=y
  - Removed: CONFIG_ARCH_HAS_PTE_DEVMAP=y
  - Removed: CONFIG_BRIDGE_EBT_BROUTE=m
  - Removed: CONFIG_BRIDGE_EBT_T_FILTER=m
  - Removed: CONFIG_BRIDGE_EBT_T_NAT=m
  - Removed: CONFIG_BRIDGE_NF_EBTABLES_LEGACY=m
  - Removed: CONFIG_CRC16=m
  - Removed: CONFIG_CRC32_ARCH=y
  - Removed: CONFIG_CRC32=y
  - Removed: CONFIG_CRC64_ARCH=y
  - Removed: CONFIG_CRC64=y
  - Removed: CONFIG_CRC7=m
  - Removed: CONFIG_CRC8=m
  - Removed: CONFIG_CRC_CCITT=y
  - Removed: CONFIG_CRC_ITU_T=m
  - Removed: CONFIG_CRC_OPTIMIZATIONS=y
  - Removed: CONFIG_CRC_T10DIF_ARCH=y
  - Removed: CONFIG_CRC_T10DIF=y
  - Removed: CONFIG_CRYPTO_ARCH_HAVE_LIB_SHA256_SIMD=y
  - Removed: CONFIG_CRYPTO_ARCH_HAVE_LIB_SHA256=y
  - Removed: CONFIG_CRYPTO_HASH_INFO=y
  - Removed: CONFIG_CRYPTO_LIB_SHA256_GENERIC=y
  - Removed: CONFIG_CRYPTO_SHA1_SSSE3=y
  - Removed: CONFIG_CRYPTO_SHA256_X86_64=y
  - Removed: CONFIG_CRYPTO_SHA512_SSSE3=m
  - Removed: CONFIG_DPLL=y
  - Removed: CONFIG_DRM_XE_DEVMEM_MIRROR=y
  - Removed: CONFIG_FTRACE_MCOUNT_RECORD=y
  - Removed: CONFIG_HAVE_ARCH_STACKLEAK=y
  - Removed: CONFIG_HAVE_FTRACE_MCOUNT_RECORD=y
  - Removed: CONFIG_IDEAPAD_LAPTOP=m
  - Removed: CONFIG_INFINIBAND_QIB_DCA=y
  - Removed: CONFIG_INFINIBAND_QIB=m
  - Removed: CONFIG_IP6_NF_FILTER=m
  - Removed: CONFIG_IP6_NF_IPTABLES_LEGACY=m
  - Removed: CONFIG_IP6_NF_MANGLE=m
  - Removed: CONFIG_IP6_NF_NAT=m
  - Removed: CONFIG_IP6_NF_RAW=m
  - Removed: CONFIG_IP6_NF_SECURITY=m
  - Removed: CONFIG_IP6_NF_TARGET_HL=m
  - Removed: CONFIG_IP6_NF_TARGET_MASQUERADE=m
  - Removed: CONFIG_IP_NF_ARPFILTER=m
  - Removed: CONFIG_IP_NF_ARPTABLES=m
  - Removed: CONFIG_IP_NF_FILTER=m
  - Removed: CONFIG_IP_NF_IPTABLES_LEGACY=m
  - Removed: CONFIG_IP_NF_MANGLE=m
  - Removed: CONFIG_IP_NF_NAT=m
  - Removed: CONFIG_IP_NF_RAW=m
  - Removed: CONFIG_IP_NF_SECURITY=m
  - Removed: CONFIG_IP_NF_TARGET_MASQUERADE=m
  - Removed: CONFIG_IP_NF_TARGET_NETMAP=m
  - Removed: CONFIG_IP_NF_TARGET_REDIRECT=m
  - Removed: CONFIG_IP_NF_TARGET_TTL=m
  - Removed: CONFIG_NETFILTER_XT_TARGET_NOTRACK=m
  - Removed: CONFIG_NETFILTER_XT_TARGET_TRACE=m
  - Removed: CONFIG_NF_CT_PROTO_DCCP=y
  - Removed: CONFIG_PAGE_BLOCK_ORDER=10
  - Removed: CONFIG_RTC_DRV_PCF85063=m
  - Removed: CONFIG_SND_ATMEL_SOC=m
  - Removed: CONFIG_SND_HDA_CODEC_CIRRUS=m
  - Removed: CONFIG_SND_HDA_CODEC_CS8409=m
  - Removed: CONFIG_SND_HDA_CODEC_HDMI=m
  - Removed: CONFIG_SND_HDA_CODEC_REALTEK=m
  - Removed: CONFIG_SND_HDA_GENERIC_LEDS=y
  - Removed: CONFIG_SND_HDA_INTEL=m
  - Removed: CONFIG_SND_HDA_POWER_SAVE_DEFAULT=0
  - Removed: CONFIG_SND_HDA_PREALLOC_SIZE=0
  - Removed: CONFIG_SND_HDA_SCODEC_COMPONENT=m
  - Removed: CONFIG_SND_HDA_SCODEC_CS35L41_I2C=m
  - Removed: CONFIG_SND_HDA_SCODEC_CS35L41=m
  - Removed: CONFIG_SND_HDA_SCODEC_CS35L41_SPI=m
  - Removed: CONFIG_SND_SOC_ADI=m
  - Removed: CONFIG_SND_SOC_IMG_I2S_IN=m
  - Removed: CONFIG_SND_SOC_IMG_I2S_OUT=m
  - Removed: CONFIG_SND_SOC_IMG_PARALLEL_OUT=m
  - Removed: CONFIG_SND_SOC_IMG_PISTACHIO_INTERNAL_DAC=m
  - Removed: CONFIG_SND_SOC_IMG_SPDIF_IN=m
  - Removed: CONFIG_SND_SOC_IMG_SPDIF_OUT=m
  - Removed: CONFIG_SND_SOC_IMG=y
  - Removed: CONFIG_SND_SOC_XILINX_AUDIO_FORMATTER=m
  - Removed: CONFIG_SND_SOC_XILINX_I2S=m
  - Removed: CONFIG_SND_SOC_XILINX_SPDIF=m
  - Removed: CONFIG_SND_SOC_XTFPGA_I2S=m
  - Removed: CONFIG_THINKPAD_ACPI_ALSA_SUPPORT=y
  - Removed: CONFIG_THINKPAD_ACPI_HOTKEY_POLL=y
  - Removed: CONFIG_THINKPAD_ACPI=m
  - Removed: CONFIG_THINKPAD_ACPI_VIDEO=y
  - Removed: CONFIG_THINKPAD_LMI=m
  - Added: CONFIG_ARCH_HAS_CPU_ATTACK_VECTORS=y
  - Added: CONFIG_ARCH_SUPPORTS_HUGETLBFS=y
  - Added: CONFIG_CRC16=m
  - Added: CONFIG_CRC32_ARCH=y
  - Added: CONFIG_CRC32=y
  - Added: CONFIG_CRC64_ARCH=y
  - Added: CONFIG_CRC64=y
  - Added: CONFIG_CRC7=m
  - Added: CONFIG_CRC8=m
  - Added: CONFIG_CRC_CCITT=y
  - Added: CONFIG_CRC_ITU_T=m
  - Added: CONFIG_CRC_OPTIMIZATIONS=y
  - Added: CONFIG_CRC_T10DIF_ARCH=y
  - Added: CONFIG_CRC_T10DIF=y
  - Added: CONFIG_CRYPTO_HASH_INFO=y
  - Added: CONFIG_CRYPTO_LIB_SHA1_ARCH=y
  - Added: CONFIG_CRYPTO_LIB_SHA256_ARCH=y
  - Added: CONFIG_CRYPTO_LIB_SHA512_ARCH=y
  - Added: CONFIG_CRYPTO_LIB_SHA512=y
  - Added: CONFIG_DPLL=y
  - Added: CONFIG_DRM_DISPLAY_HDMI_CEC_NOTIFIER_HELPER=y
  - Added: CONFIG_DRM_XE_PAGEMAP=y
  - Added: CONFIG_EFI_SBAT_FILE=""
  - Added: CONFIG_EPROBE_EVENTS=y
  - Added: CONFIG_FUTEX_PRIVATE_HASH=y
  - Added: CONFIG_GENERIC_IRQ_ENTRY=y
  - Added: CONFIG_GENERIC_SYSCALL=y
  - Added: CONFIG_GPIOLIB_LEGACY=y
  - Added: CONFIG_GROUP_SCHED_BANDWIDTH=y
  - Added: CONFIG_HAVE_ARCH_KSTACK_ERASE=y
  - Added: CONFIG_IDEAPAD_LAPTOP=m
  - Added: CONFIG_IRQ_MSI_LIB=y
  - Added: CONFIG_KVM_IOAPIC=y
  - Added: CONFIG_LIBIE_ADMINQ=m
  - Added: CONFIG_PAGE_BLOCK_MAX_ORDER=10
  - Added: CONFIG_PHY_PACKAGE=m
  - Added: CONFIG_RTC_DRV_PCF85063=m
  - Added: CONFIG_SND_HDA_CODEC_ALC260=m
  - Added: CONFIG_SND_HDA_CODEC_ALC262=m
  - Added: CONFIG_SND_HDA_CODEC_ALC268=m
  - Added: CONFIG_SND_HDA_CODEC_ALC269=m
  - Added: CONFIG_SND_HDA_CODEC_ALC662=m
  - Added: CONFIG_SND_HDA_CODEC_ALC680=m
  - Added: CONFIG_SND_HDA_CODEC_ALC861=m
  - Added: CONFIG_SND_HDA_CODEC_ALC861VD=m
  - Added: CONFIG_SND_HDA_CODEC_ALC880=m
  - Added: CONFIG_SND_HDA_CODEC_ALC882=m
  - Added: CONFIG_SND_HDA_CODEC_CIRRUS=m
  - Added: CONFIG_SND_HDA_CODEC_CS420X=m
  - Added: CONFIG_SND_HDA_CODEC_CS421X=m
  - Added: CONFIG_SND_HDA_CODEC_CS8409=m
  - Added: CONFIG_SND_HDA_CODEC_HDMI_ATI=m
  - Added: CONFIG_SND_HDA_CODEC_HDMI_GENERIC=m
  - Added: CONFIG_SND_HDA_CODEC_HDMI_INTEL=m
  - Added: CONFIG_SND_HDA_CODEC_HDMI=m
  - Added: CONFIG_SND_HDA_CODEC_HDMI_NVIDIA=m
  - Added: CONFIG_SND_HDA_CODEC_HDMI_NVIDIA_MCP=m
  - Added: CONFIG_SND_HDA_CODEC_HDMI_SIMPLE=m
  - Added: CONFIG_SND_HDA_CODEC_HDMI_TEGRA=m
  - Added: CONFIG_SND_HDA_CODEC_REALTEK_LIB=m
  - Added: CONFIG_SND_HDA_CODEC_REALTEK=m
  - Added: CONFIG_SND_HDA_GENERIC_LEDS=y
  - Added: CONFIG_SND_HDA_INTEL=m
  - Added: CONFIG_SND_HDA_POWER_SAVE_DEFAULT=0
  - Added: CONFIG_SND_HDA_PREALLOC_SIZE=0
  - Added: CONFIG_SND_HDA_SCODEC_COMPONENT=m
  - Added: CONFIG_SND_HDA_SCODEC_CS35L41_I2C=m
  - Added: CONFIG_SND_HDA_SCODEC_CS35L41=m
  - Added: CONFIG_SND_HDA_SCODEC_CS35L41_SPI=m
  - Added: CONFIG_SND_SOC_SDCA_HID=y
  - Added: CONFIG_SND_SOC_SDCA_IRQ=y
  - Added: CONFIG_SND_SOC_XILINX_AUDIO_FORMATTER=m
  - Added: CONFIG_SND_SOC_XILINX_I2S=m
  - Added: CONFIG_SND_SOC_XILINX_SPDIF=m
  - Added: CONFIG_SND_SOC_XTFPGA_I2S=m
  - Added: CONFIG_THINKPAD_ACPI_ALSA_SUPPORT=y
  - Added: CONFIG_THINKPAD_ACPI_HOTKEY_POLL=y
  - Added: CONFIG_THINKPAD_ACPI=m
  - Added: CONFIG_THINKPAD_ACPI_VIDEO=y
  - Added: CONFIG_THINKPAD_LMI=m
  - Added: CONFIG_TRACEFS_AUTOMOUNT_DEPRECATED=y
  - Added: CONFIG_VIDEO_CAMERA_LENS=y


author: S.Tindall <s10dal@elrepo.org> - 6.17.1
changelog:
  - Updated with the 6.17.1 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.1]


author: S.Tindall <s10dal@elrepo.org> - 6.17.2
changelog:
  - Updated with the 6.17.2 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.2]
  - Added: CONFIG_SCSI_MPI3MR=m


author: S.Tindall <s10dal@elrepo.org> - 6.17.3
changelog:
  - Updated with the 6.17.3 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.3]


author: S.Tindall <s10dal@elrepo.org> - 6.17.4
changelog:
  - Updated with the 6.17.4 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.4]


author: Akemi Yagi <toracat@elrepo.org> - 6.17.5-1
changelog:
  - Updated with the 6.17.5 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.5]


author: S.Tindall <s10dal@elrepo.org> - 6.17.6-1
changelog:
  - Updated with the 6.17.6 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.6]


author: S.Tindall <s10dal@elrepo.org> - 6.17.7-1
changelog:
  - Updated with the 6.17.7 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.7]


author: S.Tindall <s10dal@elrepo.org> - 6.17.8-1
changelog:
  - Updated with the 6.17.8 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.8]


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication
  - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
  - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
  - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
  - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
  - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
  - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
  - Resolves: RHEL-10721 - very bad performance when requesting service tickets
  - Resolves: RHEL-19011 - Invalid handling groups from child domain
  - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8]
  - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8]
  - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-5.1
changelog:
  - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z]
  - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z]
  - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z]
  - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z]
  - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z]
  - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-5.2
changelog:
  - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z]
  - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z]
  - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z]


author: Alejandro López <allopez@redhat.com> - 2.9.4-5.3
changelog:
  - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z]
  - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z]


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 2.2.0-1
changelog:
  - rhbz#1691297 - libtalloc-2.2.0 is available
  - rhbz#1737644 - libldb, libtalloc, libtevent, libtdb: Remove Python 2 subpackages from Fedora 31+


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.3.18-3
changelog:
  - rhbz#1718113 - samba fail to build with Python 3.8
    AttributeError: module 'time' has no attribute 'clock'


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.4.2-1
changelog:
  - rhbz#1691299 - libtdb-1.4.2 is available
  - rhbz#1737644 - libldb, libtalloc, libtevent, libtdb: Remove Python 2 subpackages from Fedora 31+


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 0.10.0-1
changelog:
  - rhbz#1691300 - libtevent-0.10.0 is available
  - rhbz#1737644 - libldb, libtalloc, libtevent, libtdb: Remove Python 2 subpackages from Fedora 31+


author: Jeff Moyer <jmoyer@redhat.com> - 0.2-1
changelog:
  - Add io_uring_cq_ready()
  - Add io_uring_peek_batch_cqe()
  - Add io_uring_prep_accept()
  - Add io_uring_prep_{recv,send}msg()
  - Add io_uring_prep_timeout_remove()
  - Add io_uring_queue_init_params()
  - Add io_uring_register_files_update()
  - Add io_uring_sq_space_left()
  - Add io_uring_wait_cqe_timeout()
  - Add io_uring_wait_cqes()
  - Add io_uring_wait_cqes_timeout()


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.3-1
changelog:
  - Add IORING_OP_STATX
  - Add IORING_OP_OPENAT/IORING_OP_CLOSE helpers
  - Add prep helpers for IORING_OP_FILES_UPDATE and IORING_OP_FALLOCATE
  - Add io_uring_prep_connect() helper
  - Add io_uring_wait_cqe_nr()
  - Add IORING_OP_ASYNC_CANCEL and prep helper


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Dominik Mierzejewski <dominik@greysector.net> - 2.3.1-3
changelog:
  - Add Mozilla plugin path to MOZ_GMP_PATH instead of overriding unconditionally
  - Resolves: rhbz#2225112


author: Kalev Lember <klember@redhat.com> - 2.4.0-1
changelog:
  - Update to 2.4.0
  - Update gstreamer plugin to 1.22.7
  - Obsolete noopenh264 stub package
  - Use SPDX license identifiers


author: Quanah Gibson-Mount <quanah@symas.com> - 2.4.54-1
changelog:
  - Update for OpenLDAP 2.4.54 release
  - Fix a few library symlinks
  - Add pw-sha2 to match el7 package
  - Add lastbind, noopsrch modules
  - Patch for ITS#9370


author: Andreas Schneider <asn@redhat.com> - 1.1.7-1
changelog:
  - Update to version 1.1.7
     o https://gitlab.com/cwrap/resolv_wrapper/-/blob/resolv_wrapper-1.1.7/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.7-6
changelog:
  - Update to version 1.1.8
     o https://gitlab.com/cwrap/resolv_wrapper/-/blob/resolv_wrapper-1.1.8/CHANGELOG


author: Richard W.M. Jones <rjones@redhat.com> - 2:4.21.1-8
changelog:
  - Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/d
    evel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.12-2
changelog:
  - Disable ESI support since ESI support has been also removed from squid 7
  - Resolves: CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:7.1-1
changelog:
  - new version 7.1
  - removed squidclient
  - removed purge
  - removed cachemgr.cgi
  - removed basic_smb_lm_auth and ntlm_smb_lm_auth helpers


