<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="11">
<package pkgid="dab7c04779063f3266cb7050e67daf29156aad9029874e3136242b8e65ebc3474f48cb7fc60d8f21758d6a653c2217ff182acdbcdc4f83396aca31457118e59b" name="pam" arch="src">
  <version epoch="0" ver="1.7.2+git48" rel="160099.14.1"/>
  <changelog author="valentin.lefebvre@suse.com" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="kukuk@suse.com" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="kukuk@suse.com" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="kukuk@suse.com" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="kukuk@suse.com" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="kukuk@suse.com" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="kukuk@suse.com" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="kukuk@suse.com" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="kukuk@suse.com" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="kukuk@suse.com" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="kukuk@suse.com" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1781611200">- Fix password comparison timing leak from pam_userdb
  [CVE-2026-54411], [bsc#1268290]
  * pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
  <changelog author="kukuk@suse.com" date="1785412800">- Update to version 1.7.2+git48:
  * pam_unix: make SHA512 the default
  * po: update translations using Weblate (Hebrew)
  * po: update translations using Weblate (Russian)
  * po: update translations using Weblate (Greek)
  * po: update translations using Weblate (Norwegian Nynorsk)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Serbian)
  * po: update translations using Weblate (Polish)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Hungarian)
  * po: add translation using Weblate (Kabyle)
  * po: update translations using Weblate (Indonesian)
  * po: update translations using Weblate (Lithuanian)
  * po: update translations using Weblate (Italian)
  * po: update translations using Weblate (Finnish)
  * po: update translations using Weblate (Slovenian)
  * po: update translations using Weblate (Spanish)
  * po: update translations using Weblate (Punjabi)
  * po: update translations using Weblate (Kazakh)
  * po: update translations using Weblate (Swedish)
  * po: update translations using Weblate (Ukrainian)
  * po: update translations using Weblate (Portuguese (Brazil))
  * po: update translations using Weblate (Turkish)
  * po: update translations using Weblate (Georgian)
  * po: update translations using Weblate (Romanian)
  * po: update translations using Weblate (Czech)
  * po: update translations using Weblate (Korean)
  * Update translation files
  * pam_userdb: fix password comparison timing leak
  * meson: use an empty array for link args instead of an empty string
  * pam_succeed_if: prevent logging unknown user names in plaintext
  * pam_limits: improve 'wrong limit value' log message
  * pam_pwhistory: allow earlier passwords when remember count is reduced
  * pam_namespace: fix error handling in secure_opendir()
  * pam_rhosts: fix typos in pam_rhosts(8) man page
  * .github: add gcc-15 jobs
- Obsoletes pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
</package>
<package pkgid="190ca7274ef5d3e204460579ae2508e3f1ef16ed8a02b435c4dd1cff71abe0c8321405b8c5949d3e20ef4da96b6e5545c121f111504523c8824d8961ad6bd2d9" name="pam" arch="x86_64">
  <version epoch="0" ver="1.7.2+git48" rel="160099.14.1"/>
  <changelog author="valentin.lefebvre@suse.com" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="kukuk@suse.com" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="kukuk@suse.com" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="kukuk@suse.com" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="kukuk@suse.com" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="kukuk@suse.com" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="kukuk@suse.com" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="kukuk@suse.com" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="kukuk@suse.com" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="kukuk@suse.com" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="kukuk@suse.com" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1781611200">- Fix password comparison timing leak from pam_userdb
  [CVE-2026-54411], [bsc#1268290]
  * pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
  <changelog author="kukuk@suse.com" date="1785412800">- Update to version 1.7.2+git48:
  * pam_unix: make SHA512 the default
  * po: update translations using Weblate (Hebrew)
  * po: update translations using Weblate (Russian)
  * po: update translations using Weblate (Greek)
  * po: update translations using Weblate (Norwegian Nynorsk)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Serbian)
  * po: update translations using Weblate (Polish)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Hungarian)
  * po: add translation using Weblate (Kabyle)
  * po: update translations using Weblate (Indonesian)
  * po: update translations using Weblate (Lithuanian)
  * po: update translations using Weblate (Italian)
  * po: update translations using Weblate (Finnish)
  * po: update translations using Weblate (Slovenian)
  * po: update translations using Weblate (Spanish)
  * po: update translations using Weblate (Punjabi)
  * po: update translations using Weblate (Kazakh)
  * po: update translations using Weblate (Swedish)
  * po: update translations using Weblate (Ukrainian)
  * po: update translations using Weblate (Portuguese (Brazil))
  * po: update translations using Weblate (Turkish)
  * po: update translations using Weblate (Georgian)
  * po: update translations using Weblate (Romanian)
  * po: update translations using Weblate (Czech)
  * po: update translations using Weblate (Korean)
  * Update translation files
  * pam_userdb: fix password comparison timing leak
  * meson: use an empty array for link args instead of an empty string
  * pam_succeed_if: prevent logging unknown user names in plaintext
  * pam_limits: improve 'wrong limit value' log message
  * pam_pwhistory: allow earlier passwords when remember count is reduced
  * pam_namespace: fix error handling in secure_opendir()
  * pam_rhosts: fix typos in pam_rhosts(8) man page
  * .github: add gcc-15 jobs
- Obsoletes pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
</package>
<package pkgid="05f90748a0e96e89fcbff4bf61aa148d7cf6d3d9506cc98e824e57b54984fa399978af097762b429e2355627b3b4829a2a67e468bcee356cad5276288c61cd42" name="pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2+git48" rel="160099.14.1"/>
  <changelog author="valentin.lefebvre@suse.com" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="kukuk@suse.com" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="kukuk@suse.com" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="kukuk@suse.com" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="kukuk@suse.com" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="kukuk@suse.com" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="kukuk@suse.com" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="kukuk@suse.com" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="kukuk@suse.com" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="kukuk@suse.com" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="kukuk@suse.com" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1781611200">- Fix password comparison timing leak from pam_userdb
  [CVE-2026-54411], [bsc#1268290]
  * pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
  <changelog author="kukuk@suse.com" date="1785412800">- Update to version 1.7.2+git48:
  * pam_unix: make SHA512 the default
  * po: update translations using Weblate (Hebrew)
  * po: update translations using Weblate (Russian)
  * po: update translations using Weblate (Greek)
  * po: update translations using Weblate (Norwegian Nynorsk)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Serbian)
  * po: update translations using Weblate (Polish)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Hungarian)
  * po: add translation using Weblate (Kabyle)
  * po: update translations using Weblate (Indonesian)
  * po: update translations using Weblate (Lithuanian)
  * po: update translations using Weblate (Italian)
  * po: update translations using Weblate (Finnish)
  * po: update translations using Weblate (Slovenian)
  * po: update translations using Weblate (Spanish)
  * po: update translations using Weblate (Punjabi)
  * po: update translations using Weblate (Kazakh)
  * po: update translations using Weblate (Swedish)
  * po: update translations using Weblate (Ukrainian)
  * po: update translations using Weblate (Portuguese (Brazil))
  * po: update translations using Weblate (Turkish)
  * po: update translations using Weblate (Georgian)
  * po: update translations using Weblate (Romanian)
  * po: update translations using Weblate (Czech)
  * po: update translations using Weblate (Korean)
  * Update translation files
  * pam_userdb: fix password comparison timing leak
  * meson: use an empty array for link args instead of an empty string
  * pam_succeed_if: prevent logging unknown user names in plaintext
  * pam_limits: improve 'wrong limit value' log message
  * pam_pwhistory: allow earlier passwords when remember count is reduced
  * pam_namespace: fix error handling in secure_opendir()
  * pam_rhosts: fix typos in pam_rhosts(8) man page
  * .github: add gcc-15 jobs
- Obsoletes pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
</package>
<package pkgid="e45b86515d3c34d89578d27d2d0738a5f27c1d81ed065eeb0f7dffa65a5eb258c45c75968b0bff3c0d211ee80dd9a26df0c0d41f7596adbceff97de11dbc2b7e" name="pam-devel" arch="x86_64">
  <version epoch="0" ver="1.7.2+git48" rel="160099.14.1"/>
  <changelog author="valentin.lefebvre@suse.com" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="kukuk@suse.com" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="kukuk@suse.com" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="kukuk@suse.com" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="kukuk@suse.com" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="kukuk@suse.com" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="kukuk@suse.com" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="kukuk@suse.com" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="kukuk@suse.com" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="kukuk@suse.com" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="kukuk@suse.com" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1781611200">- Fix password comparison timing leak from pam_userdb
  [CVE-2026-54411], [bsc#1268290]
  * pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
  <changelog author="kukuk@suse.com" date="1785412800">- Update to version 1.7.2+git48:
  * pam_unix: make SHA512 the default
  * po: update translations using Weblate (Hebrew)
  * po: update translations using Weblate (Russian)
  * po: update translations using Weblate (Greek)
  * po: update translations using Weblate (Norwegian Nynorsk)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Serbian)
  * po: update translations using Weblate (Polish)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Hungarian)
  * po: add translation using Weblate (Kabyle)
  * po: update translations using Weblate (Indonesian)
  * po: update translations using Weblate (Lithuanian)
  * po: update translations using Weblate (Italian)
  * po: update translations using Weblate (Finnish)
  * po: update translations using Weblate (Slovenian)
  * po: update translations using Weblate (Spanish)
  * po: update translations using Weblate (Punjabi)
  * po: update translations using Weblate (Kazakh)
  * po: update translations using Weblate (Swedish)
  * po: update translations using Weblate (Ukrainian)
  * po: update translations using Weblate (Portuguese (Brazil))
  * po: update translations using Weblate (Turkish)
  * po: update translations using Weblate (Georgian)
  * po: update translations using Weblate (Romanian)
  * po: update translations using Weblate (Czech)
  * po: update translations using Weblate (Korean)
  * Update translation files
  * pam_userdb: fix password comparison timing leak
  * meson: use an empty array for link args instead of an empty string
  * pam_succeed_if: prevent logging unknown user names in plaintext
  * pam_limits: improve 'wrong limit value' log message
  * pam_pwhistory: allow earlier passwords when remember count is reduced
  * pam_namespace: fix error handling in secure_opendir()
  * pam_rhosts: fix typos in pam_rhosts(8) man page
  * .github: add gcc-15 jobs
- Obsoletes pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
</package>
<package pkgid="21cb6ab6095ff6ea81538cc4912447fac255a706d5a8a7222f77a5dcd3e5ec1996e20533e3d39f41d7906b2a1e746cd79becc1c5a3537afd0550cf2993f06cbc" name="pam-doc" arch="noarch">
  <version epoch="0" ver="1.7.2+git48" rel="160099.14.1"/>
  <changelog author="valentin.lefebvre@suse.com" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="kukuk@suse.com" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="kukuk@suse.com" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="kukuk@suse.com" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="kukuk@suse.com" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="kukuk@suse.com" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="kukuk@suse.com" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="kukuk@suse.com" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="kukuk@suse.com" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="kukuk@suse.com" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="kukuk@suse.com" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1781611200">- Fix password comparison timing leak from pam_userdb
  [CVE-2026-54411], [bsc#1268290]
  * pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
  <changelog author="kukuk@suse.com" date="1785412800">- Update to version 1.7.2+git48:
  * pam_unix: make SHA512 the default
  * po: update translations using Weblate (Hebrew)
  * po: update translations using Weblate (Russian)
  * po: update translations using Weblate (Greek)
  * po: update translations using Weblate (Norwegian Nynorsk)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Serbian)
  * po: update translations using Weblate (Polish)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Hungarian)
  * po: add translation using Weblate (Kabyle)
  * po: update translations using Weblate (Indonesian)
  * po: update translations using Weblate (Lithuanian)
  * po: update translations using Weblate (Italian)
  * po: update translations using Weblate (Finnish)
  * po: update translations using Weblate (Slovenian)
  * po: update translations using Weblate (Spanish)
  * po: update translations using Weblate (Punjabi)
  * po: update translations using Weblate (Kazakh)
  * po: update translations using Weblate (Swedish)
  * po: update translations using Weblate (Ukrainian)
  * po: update translations using Weblate (Portuguese (Brazil))
  * po: update translations using Weblate (Turkish)
  * po: update translations using Weblate (Georgian)
  * po: update translations using Weblate (Romanian)
  * po: update translations using Weblate (Czech)
  * po: update translations using Weblate (Korean)
  * Update translation files
  * pam_userdb: fix password comparison timing leak
  * meson: use an empty array for link args instead of an empty string
  * pam_succeed_if: prevent logging unknown user names in plaintext
  * pam_limits: improve 'wrong limit value' log message
  * pam_pwhistory: allow earlier passwords when remember count is reduced
  * pam_namespace: fix error handling in secure_opendir()
  * pam_rhosts: fix typos in pam_rhosts(8) man page
  * .github: add gcc-15 jobs
- Obsoletes pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
</package>
<package pkgid="7e1a1bb95668430d21a6325b496cce8e8e38e983b107fe5477fb0ea3ec2ca42d50e9d8e497bddff8bab11e901808abbb9d9838448bb02ea4806b051f6d68cd83" name="pam-extra" arch="x86_64">
  <version epoch="0" ver="1.7.2+git48" rel="160099.14.1"/>
  <changelog author="valentin.lefebvre@suse.com" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="kukuk@suse.com" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="kukuk@suse.com" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="kukuk@suse.com" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="kukuk@suse.com" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="kukuk@suse.com" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="kukuk@suse.com" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="kukuk@suse.com" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="kukuk@suse.com" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="kukuk@suse.com" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="kukuk@suse.com" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1781611200">- Fix password comparison timing leak from pam_userdb
  [CVE-2026-54411], [bsc#1268290]
  * pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
  <changelog author="kukuk@suse.com" date="1785412800">- Update to version 1.7.2+git48:
  * pam_unix: make SHA512 the default
  * po: update translations using Weblate (Hebrew)
  * po: update translations using Weblate (Russian)
  * po: update translations using Weblate (Greek)
  * po: update translations using Weblate (Norwegian Nynorsk)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Serbian)
  * po: update translations using Weblate (Polish)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Hungarian)
  * po: add translation using Weblate (Kabyle)
  * po: update translations using Weblate (Indonesian)
  * po: update translations using Weblate (Lithuanian)
  * po: update translations using Weblate (Italian)
  * po: update translations using Weblate (Finnish)
  * po: update translations using Weblate (Slovenian)
  * po: update translations using Weblate (Spanish)
  * po: update translations using Weblate (Punjabi)
  * po: update translations using Weblate (Kazakh)
  * po: update translations using Weblate (Swedish)
  * po: update translations using Weblate (Ukrainian)
  * po: update translations using Weblate (Portuguese (Brazil))
  * po: update translations using Weblate (Turkish)
  * po: update translations using Weblate (Georgian)
  * po: update translations using Weblate (Romanian)
  * po: update translations using Weblate (Czech)
  * po: update translations using Weblate (Korean)
  * Update translation files
  * pam_userdb: fix password comparison timing leak
  * meson: use an empty array for link args instead of an empty string
  * pam_succeed_if: prevent logging unknown user names in plaintext
  * pam_limits: improve 'wrong limit value' log message
  * pam_pwhistory: allow earlier passwords when remember count is reduced
  * pam_namespace: fix error handling in secure_opendir()
  * pam_rhosts: fix typos in pam_rhosts(8) man page
  * .github: add gcc-15 jobs
- Obsoletes pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
</package>
<package pkgid="1396f6c4f8b4ab2a6760537274a789f0a3338e3c2a79094bb791e631814039e59680479391db5bf9e12f6ec7d03281c79f52d500686c7a97faff249894576ac0" name="pam-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2+git48" rel="160099.14.1"/>
  <changelog author="valentin.lefebvre@suse.com" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="kukuk@suse.com" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="kukuk@suse.com" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="kukuk@suse.com" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="kukuk@suse.com" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="kukuk@suse.com" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="kukuk@suse.com" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="kukuk@suse.com" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="kukuk@suse.com" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="kukuk@suse.com" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="kukuk@suse.com" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1781611200">- Fix password comparison timing leak from pam_userdb
  [CVE-2026-54411], [bsc#1268290]
  * pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
  <changelog author="kukuk@suse.com" date="1785412800">- Update to version 1.7.2+git48:
  * pam_unix: make SHA512 the default
  * po: update translations using Weblate (Hebrew)
  * po: update translations using Weblate (Russian)
  * po: update translations using Weblate (Greek)
  * po: update translations using Weblate (Norwegian Nynorsk)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Serbian)
  * po: update translations using Weblate (Polish)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Hungarian)
  * po: add translation using Weblate (Kabyle)
  * po: update translations using Weblate (Indonesian)
  * po: update translations using Weblate (Lithuanian)
  * po: update translations using Weblate (Italian)
  * po: update translations using Weblate (Finnish)
  * po: update translations using Weblate (Slovenian)
  * po: update translations using Weblate (Spanish)
  * po: update translations using Weblate (Punjabi)
  * po: update translations using Weblate (Kazakh)
  * po: update translations using Weblate (Swedish)
  * po: update translations using Weblate (Ukrainian)
  * po: update translations using Weblate (Portuguese (Brazil))
  * po: update translations using Weblate (Turkish)
  * po: update translations using Weblate (Georgian)
  * po: update translations using Weblate (Romanian)
  * po: update translations using Weblate (Czech)
  * po: update translations using Weblate (Korean)
  * Update translation files
  * pam_userdb: fix password comparison timing leak
  * meson: use an empty array for link args instead of an empty string
  * pam_succeed_if: prevent logging unknown user names in plaintext
  * pam_limits: improve 'wrong limit value' log message
  * pam_pwhistory: allow earlier passwords when remember count is reduced
  * pam_namespace: fix error handling in secure_opendir()
  * pam_rhosts: fix typos in pam_rhosts(8) man page
  * .github: add gcc-15 jobs
- Obsoletes pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
</package>
<package pkgid="382c2fac84d8eeb1450651dd05a85339597b915da1558c773e2ff703a75f08f7000987756931f87bd152d8cf8eb490c9908aa9f86543b0b076a71cf5ec8dda6d" name="pam-full-src" arch="src">
  <version epoch="0" ver="1.7.2+git48" rel="160099.14.1"/>
  <changelog author="valentin.lefebvre@suse.com" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="kukuk@suse.com" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="kukuk@suse.com" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="kukuk@suse.com" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="kukuk@suse.com" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="kukuk@suse.com" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="kukuk@suse.com" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="kukuk@suse.com" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="kukuk@suse.com" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="kukuk@suse.com" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="kukuk@suse.com" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1781611200">- Fix password comparison timing leak from pam_userdb
  [CVE-2026-54411], [bsc#1268290]
  * pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
  <changelog author="kukuk@suse.com" date="1785412800">- Update to version 1.7.2+git48:
  * pam_unix: make SHA512 the default
  * po: update translations using Weblate (Hebrew)
  * po: update translations using Weblate (Russian)
  * po: update translations using Weblate (Greek)
  * po: update translations using Weblate (Norwegian Nynorsk)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Serbian)
  * po: update translations using Weblate (Polish)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Hungarian)
  * po: add translation using Weblate (Kabyle)
  * po: update translations using Weblate (Indonesian)
  * po: update translations using Weblate (Lithuanian)
  * po: update translations using Weblate (Italian)
  * po: update translations using Weblate (Finnish)
  * po: update translations using Weblate (Slovenian)
  * po: update translations using Weblate (Spanish)
  * po: update translations using Weblate (Punjabi)
  * po: update translations using Weblate (Kazakh)
  * po: update translations using Weblate (Swedish)
  * po: update translations using Weblate (Ukrainian)
  * po: update translations using Weblate (Portuguese (Brazil))
  * po: update translations using Weblate (Turkish)
  * po: update translations using Weblate (Georgian)
  * po: update translations using Weblate (Romanian)
  * po: update translations using Weblate (Czech)
  * po: update translations using Weblate (Korean)
  * Update translation files
  * pam_userdb: fix password comparison timing leak
  * meson: use an empty array for link args instead of an empty string
  * pam_succeed_if: prevent logging unknown user names in plaintext
  * pam_limits: improve 'wrong limit value' log message
  * pam_pwhistory: allow earlier passwords when remember count is reduced
  * pam_namespace: fix error handling in secure_opendir()
  * pam_rhosts: fix typos in pam_rhosts(8) man page
  * .github: add gcc-15 jobs
- Obsoletes pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
</package>
<package pkgid="434d59874eafda8e0ff63baf5cf8c5f15d25b064c984cdeb87950ba9751da23016aacf8aba1b6742e435da475a12803fa6e1d21102f371ce67dc753ca14d0ba8" name="pam-manpages" arch="noarch">
  <version epoch="0" ver="1.7.2+git48" rel="160099.14.1"/>
  <changelog author="valentin.lefebvre@suse.com" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="kukuk@suse.com" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="kukuk@suse.com" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="kukuk@suse.com" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="kukuk@suse.com" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="kukuk@suse.com" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="kukuk@suse.com" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="kukuk@suse.com" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="kukuk@suse.com" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="kukuk@suse.com" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="kukuk@suse.com" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1781611200">- Fix password comparison timing leak from pam_userdb
  [CVE-2026-54411], [bsc#1268290]
  * pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
  <changelog author="kukuk@suse.com" date="1785412800">- Update to version 1.7.2+git48:
  * pam_unix: make SHA512 the default
  * po: update translations using Weblate (Hebrew)
  * po: update translations using Weblate (Russian)
  * po: update translations using Weblate (Greek)
  * po: update translations using Weblate (Norwegian Nynorsk)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Serbian)
  * po: update translations using Weblate (Polish)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Hungarian)
  * po: add translation using Weblate (Kabyle)
  * po: update translations using Weblate (Indonesian)
  * po: update translations using Weblate (Lithuanian)
  * po: update translations using Weblate (Italian)
  * po: update translations using Weblate (Finnish)
  * po: update translations using Weblate (Slovenian)
  * po: update translations using Weblate (Spanish)
  * po: update translations using Weblate (Punjabi)
  * po: update translations using Weblate (Kazakh)
  * po: update translations using Weblate (Swedish)
  * po: update translations using Weblate (Ukrainian)
  * po: update translations using Weblate (Portuguese (Brazil))
  * po: update translations using Weblate (Turkish)
  * po: update translations using Weblate (Georgian)
  * po: update translations using Weblate (Romanian)
  * po: update translations using Weblate (Czech)
  * po: update translations using Weblate (Korean)
  * Update translation files
  * pam_userdb: fix password comparison timing leak
  * meson: use an empty array for link args instead of an empty string
  * pam_succeed_if: prevent logging unknown user names in plaintext
  * pam_limits: improve 'wrong limit value' log message
  * pam_pwhistory: allow earlier passwords when remember count is reduced
  * pam_namespace: fix error handling in secure_opendir()
  * pam_rhosts: fix typos in pam_rhosts(8) man page
  * .github: add gcc-15 jobs
- Obsoletes pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
</package>
<package pkgid="7dc3df06afd3b4560ca3e89d09b3624bb7f507a69ad2303edc29f1fcfdc867bfd5cb3eb5a7ed6755de2e3cca064c9b2d9072a8539b465c821069261c4f343da5" name="pam-userdb" arch="x86_64">
  <version epoch="0" ver="1.7.2+git48" rel="160099.14.1"/>
  <changelog author="valentin.lefebvre@suse.com" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="kukuk@suse.com" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="kukuk@suse.com" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="kukuk@suse.com" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="kukuk@suse.com" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="kukuk@suse.com" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="kukuk@suse.com" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="kukuk@suse.com" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="kukuk@suse.com" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="kukuk@suse.com" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="kukuk@suse.com" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1781611200">- Fix password comparison timing leak from pam_userdb
  [CVE-2026-54411], [bsc#1268290]
  * pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
  <changelog author="kukuk@suse.com" date="1785412800">- Update to version 1.7.2+git48:
  * pam_unix: make SHA512 the default
  * po: update translations using Weblate (Hebrew)
  * po: update translations using Weblate (Russian)
  * po: update translations using Weblate (Greek)
  * po: update translations using Weblate (Norwegian Nynorsk)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Serbian)
  * po: update translations using Weblate (Polish)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Hungarian)
  * po: add translation using Weblate (Kabyle)
  * po: update translations using Weblate (Indonesian)
  * po: update translations using Weblate (Lithuanian)
  * po: update translations using Weblate (Italian)
  * po: update translations using Weblate (Finnish)
  * po: update translations using Weblate (Slovenian)
  * po: update translations using Weblate (Spanish)
  * po: update translations using Weblate (Punjabi)
  * po: update translations using Weblate (Kazakh)
  * po: update translations using Weblate (Swedish)
  * po: update translations using Weblate (Ukrainian)
  * po: update translations using Weblate (Portuguese (Brazil))
  * po: update translations using Weblate (Turkish)
  * po: update translations using Weblate (Georgian)
  * po: update translations using Weblate (Romanian)
  * po: update translations using Weblate (Czech)
  * po: update translations using Weblate (Korean)
  * Update translation files
  * pam_userdb: fix password comparison timing leak
  * meson: use an empty array for link args instead of an empty string
  * pam_succeed_if: prevent logging unknown user names in plaintext
  * pam_limits: improve 'wrong limit value' log message
  * pam_pwhistory: allow earlier passwords when remember count is reduced
  * pam_namespace: fix error handling in secure_opendir()
  * pam_rhosts: fix typos in pam_rhosts(8) man page
  * .github: add gcc-15 jobs
- Obsoletes pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
</package>
<package pkgid="076a4958169e1a6f08d8cc2d4286bb6ed411921e3533c5279008bdba030bbc2402bff824c862e02191ab0b5b8d423553bf1787c6feb6db40a19a0e16fdf40df4" name="pam-userdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2+git48" rel="160099.14.1"/>
  <changelog author="valentin.lefebvre@suse.com" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="kukuk@suse.com" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="kukuk@suse.com" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="kukuk@suse.com" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="kukuk@suse.com" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="kukuk@suse.com" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="kukuk@suse.com" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="kukuk@suse.com" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="kukuk@suse.com" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="kukuk@suse.com" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="kukuk@suse.com" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="kukuk@suse.com" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1781611200">- Fix password comparison timing leak from pam_userdb
  [CVE-2026-54411], [bsc#1268290]
  * pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
  <changelog author="kukuk@suse.com" date="1785412800">- Update to version 1.7.2+git48:
  * pam_unix: make SHA512 the default
  * po: update translations using Weblate (Hebrew)
  * po: update translations using Weblate (Russian)
  * po: update translations using Weblate (Greek)
  * po: update translations using Weblate (Norwegian Nynorsk)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Serbian)
  * po: update translations using Weblate (Polish)
  * po: update translations using Weblate (Chinese (Simplified) (zh_CN))
  * po: update translations using Weblate (Hungarian)
  * po: add translation using Weblate (Kabyle)
  * po: update translations using Weblate (Indonesian)
  * po: update translations using Weblate (Lithuanian)
  * po: update translations using Weblate (Italian)
  * po: update translations using Weblate (Finnish)
  * po: update translations using Weblate (Slovenian)
  * po: update translations using Weblate (Spanish)
  * po: update translations using Weblate (Punjabi)
  * po: update translations using Weblate (Kazakh)
  * po: update translations using Weblate (Swedish)
  * po: update translations using Weblate (Ukrainian)
  * po: update translations using Weblate (Portuguese (Brazil))
  * po: update translations using Weblate (Turkish)
  * po: update translations using Weblate (Georgian)
  * po: update translations using Weblate (Romanian)
  * po: update translations using Weblate (Czech)
  * po: update translations using Weblate (Korean)
  * Update translation files
  * pam_userdb: fix password comparison timing leak
  * meson: use an empty array for link args instead of an empty string
  * pam_succeed_if: prevent logging unknown user names in plaintext
  * pam_limits: improve 'wrong limit value' log message
  * pam_pwhistory: allow earlier passwords when remember count is reduced
  * pam_namespace: fix error handling in secure_opendir()
  * pam_rhosts: fix typos in pam_rhosts(8) man page
  * .github: add gcc-15 jobs
- Obsoletes pam_userdb-fix-password-comparison-timing-leak.patch</changelog>
</package>
</otherdata>