Security release: CVE-2024-1481
Resolves: rhbz#2265129

Security release: CVE-2023-5455
Resolves: rhbz#2257646

ipalib: fix the IPACertificate validity dates (python 3.12 compatibility)
Handle PKI revocation response differences in JSON API
Allow removal of minimal length from a custom password policy

Adopt trust to AD code to Samba changes in case SIDs are malformed

FreeIPA 4.11.0 release
Simplify Fedora spec file
Release notes: https://www.freeipa.org/release-notes/4-11-0.html

Depend on selinux-policy-38.28-1.fc39
Add SELinux policy for passkey_child to be used without ipa-otpd
Related: rhbz#2238474

Restore properly SELinux context during IPA client uninstallation
Related: rhbz#2238474

Set 'sssd_use_usb' SELinux boolean when enrolling IPA client
Resolves: rhbz#2238474

FreeIPA 4.11.0 beta 1
Release notes: https://www.freeipa.org/release-notes/4-11-0-beta.html

Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Use ssl.match_hostname from urllib3 as it was removed from Python 3.12

Rebuilt for Python 3.12

Upstream release FreeIPA 4.10.2
Synchronize patches with CentOS 9 Stream

Support python-cryptography 40.0

Change fontawesome-fonts R to match fontawesome 4.x

Rebuild against Samba 4.18.0RC1