Update patch to close label to reset libselinux state. Resolves: #1984740
useradd: check if subid range exists for user. Resolves: #2012929
find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #1994269

subordinateio: also compare the owner ID. Resolves: #2093311
Fix release sources
Add subid requirement for subid-devel

getsubids: provide system binary and man page. Resolves: #2013016
groupdel: fix SIGSEGV when passwd does not exist. Resolves: #1986782

Creation of subid and subid-devel subpackages (#2013009)
libsubid: creation and nsswitch support
libsubid: don't print error messages on stderr by default
libsubid: libsubid_init return false if out of memory
libsubid: don't return owner in list_owner_ranges API call
libsubid: libsubid_init don't print messages on error
libsubid: fix newusers when nss provides subids
libsubid: make shadow_logfd not extern
useradd: fix SUB_UID_COUNT=0
man: mention NSS in new[ug]idmap manpages
man: clarify subid delegation

usermod: allow all group types with -G option (#1967641)

man: Remove references to LOGIN_STRING in login.defs (#1884702)

lib/sssd: redirect warning message to file (#1749001)
useradd: clarify valid usernames/groupnames (#1869432)
login.defs: link login specific information to its own package (#1804766)

change UMASK value and add HOME_MODE in login.defs (#1777718)

check only local groups when adding new supplementary groups to a user

do not mistake a regular user process for a namespaced one (#1788696)
add HOME_MODE support in login.defs (#1777718)

properly audit group password change
do not add uid of a new (not yet added) user to the audit message
use lckpwdf() again to disable concurrent edits of databases by
clarify chage manual page in regards to shadow and passwd
fix minor issues in groupadd and login.defs manual pages
Ignore LOGIN_PLAIN_PROMPT variable in login.defs
force regeneration of getdate.c otherwise the date parsing fix

usermod: guard against unsafe change of ownership of

drop trailing space from login.defs ENCRYPT_METHOD setting

use cap_setxid file capabilities for newxidmap instead of making them setuid
limit the SYS_U/GID_MIN value to 1 as the algorithm does not work with 0
manual page improvements
flush sssd caches - patch by Jakub Hrozek

fix some issues from Coverity scan

use itstool instead of xml2po