- Added new features from upstream (compatibility with SIEM systems):
  + ldap_server: Add a ldapsrv debug class to log LDAP queries

- Backport latest 2.9 LTM release for p10.
- Disable Kerberos localauth an2ln plugin for AD/IPA (fixes: CVE-2025-11561).

- Security release (fixes: CVE-2025-32462, CVE-2025-32463) (closes: 55007):
 + Sudo's -h (--host) option could be specified when running a command or
   editing a file. This could enable a local privilege escalation attack if the
   sudoers file allows the user to run commands on a different host.
   For more information, see Local Privilege Escalation via host option:
   https://www.sudo.ws/security/advisories/host_any/
 + An attacker can leverage sudo's -R (--chroot) option to run arbitrary
   commands as root, even if they are not listed in the sudoers file. The chroot
   support has been deprecated an will be removed entirely in a future release.
   For more information, see Local Privilege Escalation via chroot option:
   https://www.sudo.ws/security/advisories/chroot_bug/

- Add support distr profile layer
- Add service specific system profile template
- Update obsoletes default user profile during upgrade

- Added pam_canonicalize_user.so to system-auth-common (closes: #47426).
- Added pam_canonicalize_user control (closes: #47713).
- Disabled legacy pam_propperpwnam.so in system-auth-common during upgrade.

- Added additional methods on the bus for forced downloading of gpt (thx greh@)

- Update to latest stable release supported latest kernel 6.11.
- Major fixes from upstream:
  + LDAP Ping capability (to find the closest site);
  + smbinfo adds gettconinfo command (allowed dumping session and tcon id);
  + Various improvements to man pages.
- Backport bash completion support for smbinfo (with filestreaminfo, keys,
  gettconinfo) from Fedora.

- Update to the 2.8.2 for samba-4.19.9 and later releases

- Updates to new version 1.4.3 (released 2024-06-12)
- Fixes from upstream:
  + Fixed socket_wrapper running with jemalloc compiled binaries
  + Fixed thread sanitizer on modern Linux Kernels
  + Fixed swrap_fake_uid_wrapper test

- Updated to new version 1.3.1 (released 2024-06-12)
- Fixes from upstream:
  + Added support to find libc via LIBC_SO define
  + Fixed uid_wrapper running with jemalloc compiled binaries
  + Fixed socket_wrapper interaction test
  + Fixed thread sanitizer on modern Linux Kernels

- Add compatibility with stable releases of samba-4.18 and later (closes: 49404).
- Replace python3 build to new pyproject_build process.

- Fix cmocka >= 1.1.6 find_package()

- Fix cmocka >= 1.1.6 find_package()

- New version for samba-4.19

- Update to release for samba-4.19

- Update to latest release for samba-4.19

- Add support the openssl security level

- Initial build for Sisyphus.

- Fix man building

- Update Policy templates for Firefox 106 and Firefox ESR 102.4
- This release contains some typo fixes and new Russian translations
  thanks to lepata@

- Update to latest release 106.0-5249.119

- Add support LDAP add/mod operation to set/change password:
 + fix unable to join to active directory after KB5008380/CVE-2021-42287 with
   option '--ldap-passwd';
 + https://gitlab.freedesktop.org/realmd/adcli/-/issues/27
- Add support fall back to LDAPS if CLDAP ping was not successful
 + If the --use-ldaps option is used and there is no reply on the CLDAP 389/udp
   port adcli will try to send the request to the LDAPS port 636/tcp.
- Fix write SID before secret to Samba's db looks like 'net changesecretpw'
- Add passwd-user sub-command for (re)set a user password.
- Add dont-expire-password option for computer.

- NMU: spec: adapted to new cmake macros.

- NMU: spec: adapt to new cmake macros.

- Updated spec to allow any compression of man page

- Initial build for Sisyphus

- Add options to initscript

- Fixed build: remove RPATH entry from libtool

- Rebuilt with boost-1.76.0.

- require libkbibtexpart9 again
- obsoletes libkbibtexpart4 (needed for upgrade)
- fix descriptions

- Update to latest release

- Initial build

- new version 1.1.4

- Build on aarch64 fixed

- fix broken libftdi1.pc file
- built python3 bindings

- Disable ubt macros due binary package identity change

- Build new version for python3.8.

- NMU: rebuilt for debuginfo.

- Add support of alterator web interface aka ajax support
- Remove BuildArch is noarch due ajax part of module

- Update to latest 4.x release

- add fix for Ice build

- Updated to 0.9.23.

- exclude tests from package due to excessive reqs

- 0.17.1

- Don't stop with error if DESTDIR already exists

- FTBFS: fix install using %__python.

- Initial build for Sisyphus

- Initial build for Sisyphus

- Update spec template to newest rpm-build-haskel supports haskell(abi)

- Initial build for Sisyphus