- require libkbibtexpart9 again
- obsoletes libkbibtexpart4 (needed for upgrade)
- fix descriptions

- Update to security release of Samba 4.21
- Security fixes (Fixes: CVE-2025-9640, CVE-2025-10230):
  + CVE-2025-9640:  Uninitialized memory disclosure via vfs_streams_xattr.
                    https://www.samba.org/samba/security/CVE-2025-9640.html
  + CVE-2025-10230: Command injection via WINS server hook script.
                    https://www.samba.org/samba/security/CVE-2025-10230.html

- Updates to new version 1.5.0 (released 2025-05-06)
- Fixes from upstream:
  + Added support for quic_ko_wrapper
  + Fixed pcap frames generation for recv(m)msg and recvfrom
  + Fixed setsockopt(SO_REUSEPORT) with glibc 2.40 (from version 1.4.4)

- Prepare licenses for new product releases.
- Fix typos in licenses (thx Alexey Ossotoff):
  + ALT_Domain_License
  + ALT_Product_License
  + ALT_Regular_License
  + ALT_Container_OS_License
  + ALT_Orchestra_License english
  + ALT_SP_License
  + ALT_Server_License
  + ALT_Product_License english
  + ALT_SP_Container_License
  + ALT_Container_License
- Add open license (thx Alexey Ossotoff):
  + ALT_Community_License
  + ALT_Orchestra_License
  + ALT_Simply_License
  + ALT_Product_License

- Add short_display_name for components and categories (thx Michael Chernigin)

- Add dependency to libldb-modules-dc for sssd-ad (closes: 54957).

- Update to release for samba-4.21.0 (after rc2).

- Security release (fixes: CVE-2025-32462, CVE-2025-32463) (closes: 55007):
 + Sudo's -h (--host) option could be specified when running a command or
   editing a file. This could enable a local privilege escalation attack if the
   sudoers file allows the user to run commands on a different host.
   For more information, see Local Privilege Escalation via host option:
   https://www.sudo.ws/security/advisories/host_any/
 + An attacker can leverage sudo's -R (--chroot) option to run arbitrary
   commands as root, even if they are not listed in the sudoers file. The chroot
   support has been deprecated an will be removed entirely in a future release.
   For more information, see Local Privilege Escalation via chroot option:
   https://www.sudo.ws/security/advisories/chroot_bug/

- Updated to 0.9.33.
- Major fixes from upstream:
  + mdb_page_search: fix error code when DBI record is missing (ITS#9037);
  + Fix meta page usage by read only tools (ITS#10212).

- added the ability to select the fusermount3/fuserumount3 version using
  alternatives by default (thx Korney Gedert) (fixes: 52316).

- Added the ability to select the fusermount2/fuserumount2 version using
  alternatives-manual (thx Korney Gedert).

- Add support distr profile layer
- Add service specific system profile template
- Update obsoletes default user profile during upgrade

- Initial build

- Initial build for Sisyphus

- Move executable script to bindir.
- Update systemd unit.

- Updated to 14 version (fixes: CVE-2023-50967)

- Added pam_canonicalize_user.so to system-auth-common (closes: #47426).
- Added pam_canonicalize_user control (closes: #47713).
- Disabled legacy pam_propperpwnam.so in system-auth-common during upgrade.

- Added additional methods on the bus for forced downloading of gpt (thx greh@)

- Fixed problem with local users definition (difference with previous
  release - fixed path to /etc/tcb/ is removed, which allows to work
  with nsswitch.conf) (thx Maria Alexeeva) (ALT#47499).

- new version 1.1.7
- Fixes from upstream:
  + Fix installation of python module
  + Improve config dir creation if we have pam_start_confdir()
  + Fixed PAM_WRAPPER_DISABLE_DEEPBIND
  + Directly fail if we can't create the config dir

- Updated to new version 1.1.16 (released 2024-07-05)
- Fixes from upstream:
  + Fixed copy&paste error in the destructor
  + Fixed thread sanitizer on modern Linux Kernels
  + Fixed building with newer cmocka versions

- Updated to new version 1.3.1 (released 2024-06-12)
- Fixes from upstream:
  + Added support to find libc via LIBC_SO define
  + Fixed uid_wrapper running with jemalloc compiled binaries
  + Fixed socket_wrapper interaction test
  + Fixed thread sanitizer on modern Linux Kernels

- Update to latest release 124.0-6367.202

- Fix cmocka >= 1.1.6 find_package()

- Update to latest 4.x release

- Update to release 2.6.9 with mutliple fixes and improved libxmlsec compatibility.
- Enable build check tests.

- Fixed build with LTO.

- Add support LDAP add/mod operation to set/change password:
 + fix unable to join to active directory after KB5008380/CVE-2021-42287 with
   option '--ldap-passwd';
 + https://gitlab.freedesktop.org/realmd/adcli/-/issues/27
- Add support fall back to LDAPS if CLDAP ping was not successful
 + If the --use-ldaps option is used and there is no reply on the CLDAP 389/udp
   port adcli will try to send the request to the LDAPS port 636/tcp.
- Fix write SID before secret to Samba's db looks like 'net changesecretpw'
- Add passwd-user sub-command for (re)set a user password.
- Add dont-expire-password option for computer.

- NMU: spec: adapt to new cmake macros.

- NMU: fix building with boost 1.85.0

- New version for samba-4.20

- Update to latest release for samba-4.20

- Update Administrative Templates (.admx) default source URL:
  Windows 10 October 2020 Update -> Windows 10 2022 Update (22H2).

- NMU: added runtime requirements (ALT #50102)

- Improve oddjob-gpupdate-dbus-timeout control.
- Initial support build for debian.

- Add compatibility with stable releases of samba-4.18 and later (closes: 49404).
- Replace python3 build to new pyproject_build process.

- NMU: added build dependency on setuptools

- Automatically updated to 0.20.

- Add control pam_propperpwnam for support module in system authentication (ALT#47713).

- new version 1.2.38

- Fix check of mime type for images.

- Fixed prepare-vm script dependency to gpasswd.

- CMake: Set CMOCKA_LIBRARIES in package config for backwards compatibility

- Initial build for Sisyphus.

- Fixed getopt for license mode.

- Updated spec to allow any compression of man page

- NMU: spec: adapted to new cmake macros.

- Build on aarch64 fixed

- NMU: rebuilt for debuginfo.

- Add options to initscript