<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="19">
<package pkgid="3b748912b373c5f6d087aa26e31a391a8a223de00b0df8d44cf61d7cfd50cb0a041aeaae4db099c5476f4b720538f1e385c8186dac88432810bc1c7b5724c050" name="pam" arch="i586">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="0f05f67d8daf4380997c8e74ca2eea9142d61abd8ddbc0f04a3053653f31d6da1be02ff255a0af5c377f6a3307d17c6e14c14384f92f690a1a91522dfef8ead8" name="pam" arch="src">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="853e32b9f95188190f65796f9792fc6ba0c68c5074e59cf870914cfed42e8ccea5ee470e4bc28805a5ca6f557c3d801c61ec4a341f05892228402c915bb12988" name="pam" arch="x86_64">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="393d12782aa34934d5eaf57a90d140f7cf2c0f99edc26a0b8606018337a786e0fe09bf1d3b2076714f01fe4e7eef3e6148046b172730c0f2cc15bbed5b96ae96" name="pam-32bit" arch="x86_64">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="0e693fa3154aa967e76905656872d0bf66b852d7a563c2169650b11f33558d0c56ead7cc7cf0b10c17ef62085ff5dc764305f69ffab96b181f1c271d7f0364f5" name="pam-config" arch="i586">
  <version epoch="0" ver="2.14+git.20260216" rel="2.3"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1695988800">- Update to version 2.9
  - Add support for kanidm</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1701086400">- Update to version 2.10
  - Enable session and account support for kanidm and himmelblau</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707825600">- Update to version 2.11
  - pam_gnome_keyring: use options in AUTH [bsc#1219767]</changelog>
  <changelog author="kukuk@suse.com" date="1712836800">- Update to version 2.11+git.20240411:
  * Configure Himmelblau correctly w/ other services present
  * Configure other services correctly w/ Himmelblau present
  * Himmelblau session is only optional</changelog>
  <changelog author="kukuk@suse.com" date="1716811200">- Update to version 2.11+git.20240527:
  * Move ecryptfs/fscrypt earlier in session list [bsc#1225290]</changelog>
  <changelog author="kukuk@suse.com" date="1718884800">- Update to version 2.11+git.20240620:
  * Call pam_fscrypt/pam_ecryptfs as first session module
    [bsc#1226452]</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Update to version 2.11+git.20240906:
  * Move pam_limits before pam_systemd</changelog>
  <changelog author="kukuk@suse.com" date="1726056000">- Update to version 2.11+git.20240911:
  * Only add pam_limits if available</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726056001">- Add PreRequires for pam-extra, several other packages depend on
  that pam_limits is installed and enabled by default</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1744372800">- Update to version 2.12+git.20250411:
  * Release version 2.12
  * Call ecryptfs/fscrypt before pam_unix (#30)
  * Don't exit with error if admin disabled pam-config</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 2.12+git.20250516:
  * Don't add pam_env twice</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1752580800">- Update to version 2.13+git.20250715:
  * Release version 2.13
  * Place himmelblau near the top of pam stack [bsc#1243418]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1755777600">- Update to version 2.13+git.20250819:
  * pam_unix: fix {use|try}_first_pass and use_authtok</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to version 2.13+git.20250827:
  * Add CI
  * Update autoconf configs
  * Add support for pam_unix_ng</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1759492800">- Update to version 2.13+git.20251003:
  * pam_sss: add all possible options
  * Add support for 12 and 13 options</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1762257600">- Update to version 2.13+git.20251104:
  * pam_selinux: fix counter for session stacks</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1762344000">- Update to version 2.13+git.20251105:
  * Disable SELinux for nonlogin session config, too</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1764763200">- Update to version 2.13+git.20251203:
  * Make pam_unix_ng work together with pam_sss
  * pam_sss has no debug option</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1768910400">- Add libeconf to BuildRequires
- Update to version 2.14+git.20260120:
  * Release version 2.14
  * Explain custom pam-config modules in the man page
  * Enable the configurable fallback when called
  * Ensure we call fallback stacks
  * Ensure each configurable module uses it's own opt_sets
  * Only free configurable pam modules
  * Permit module behavior fallback
  * Replace libinih with libeconf
  * Ensure we don't duplicate custom configs
  * Cause custom configs to override built-ins
  * Dynamicaly load pam modules from configuration
  * Give pam modules priorities</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1771243200">- Update to version 2.14+git.20260216:
  * Define  constructors ordering</changelog>
</package>
<package pkgid="fdf5c66bc2015317b86dde60ba6f3bffa9bd0bf932dc99c64615f163e830684ee4f65ee7e96135afa9b9d549288a5c3e05945283f61bb7a753f71fba4ab034b8" name="pam-config" arch="src">
  <version epoch="0" ver="2.14+git.20260216" rel="2.3"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1695988800">- Update to version 2.9
  - Add support for kanidm</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1701086400">- Update to version 2.10
  - Enable session and account support for kanidm and himmelblau</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707825600">- Update to version 2.11
  - pam_gnome_keyring: use options in AUTH [bsc#1219767]</changelog>
  <changelog author="kukuk@suse.com" date="1712836800">- Update to version 2.11+git.20240411:
  * Configure Himmelblau correctly w/ other services present
  * Configure other services correctly w/ Himmelblau present
  * Himmelblau session is only optional</changelog>
  <changelog author="kukuk@suse.com" date="1716811200">- Update to version 2.11+git.20240527:
  * Move ecryptfs/fscrypt earlier in session list [bsc#1225290]</changelog>
  <changelog author="kukuk@suse.com" date="1718884800">- Update to version 2.11+git.20240620:
  * Call pam_fscrypt/pam_ecryptfs as first session module
    [bsc#1226452]</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Update to version 2.11+git.20240906:
  * Move pam_limits before pam_systemd</changelog>
  <changelog author="kukuk@suse.com" date="1726056000">- Update to version 2.11+git.20240911:
  * Only add pam_limits if available</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726056001">- Add PreRequires for pam-extra, several other packages depend on
  that pam_limits is installed and enabled by default</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1744372800">- Update to version 2.12+git.20250411:
  * Release version 2.12
  * Call ecryptfs/fscrypt before pam_unix (#30)
  * Don't exit with error if admin disabled pam-config</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 2.12+git.20250516:
  * Don't add pam_env twice</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1752580800">- Update to version 2.13+git.20250715:
  * Release version 2.13
  * Place himmelblau near the top of pam stack [bsc#1243418]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1755777600">- Update to version 2.13+git.20250819:
  * pam_unix: fix {use|try}_first_pass and use_authtok</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to version 2.13+git.20250827:
  * Add CI
  * Update autoconf configs
  * Add support for pam_unix_ng</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1759492800">- Update to version 2.13+git.20251003:
  * pam_sss: add all possible options
  * Add support for 12 and 13 options</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1762257600">- Update to version 2.13+git.20251104:
  * pam_selinux: fix counter for session stacks</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1762344000">- Update to version 2.13+git.20251105:
  * Disable SELinux for nonlogin session config, too</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1764763200">- Update to version 2.13+git.20251203:
  * Make pam_unix_ng work together with pam_sss
  * pam_sss has no debug option</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1768910400">- Add libeconf to BuildRequires
- Update to version 2.14+git.20260120:
  * Release version 2.14
  * Explain custom pam-config modules in the man page
  * Enable the configurable fallback when called
  * Ensure we call fallback stacks
  * Ensure each configurable module uses it's own opt_sets
  * Only free configurable pam modules
  * Permit module behavior fallback
  * Replace libinih with libeconf
  * Ensure we don't duplicate custom configs
  * Cause custom configs to override built-ins
  * Dynamicaly load pam modules from configuration
  * Give pam modules priorities</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1771243200">- Update to version 2.14+git.20260216:
  * Define  constructors ordering</changelog>
</package>
<package pkgid="3e1c86a3af768d61c3423269497b74d5882bdac38215a0d995401842c788ea0b330fc5713f1a1efff715bddf62e554f5e087e75548a56d0b113b7d8dfc3b06d5" name="pam-config" arch="x86_64">
  <version epoch="0" ver="2.14+git.20260216" rel="2.3"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1695988800">- Update to version 2.9
  - Add support for kanidm</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1701086400">- Update to version 2.10
  - Enable session and account support for kanidm and himmelblau</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707825600">- Update to version 2.11
  - pam_gnome_keyring: use options in AUTH [bsc#1219767]</changelog>
  <changelog author="kukuk@suse.com" date="1712836800">- Update to version 2.11+git.20240411:
  * Configure Himmelblau correctly w/ other services present
  * Configure other services correctly w/ Himmelblau present
  * Himmelblau session is only optional</changelog>
  <changelog author="kukuk@suse.com" date="1716811200">- Update to version 2.11+git.20240527:
  * Move ecryptfs/fscrypt earlier in session list [bsc#1225290]</changelog>
  <changelog author="kukuk@suse.com" date="1718884800">- Update to version 2.11+git.20240620:
  * Call pam_fscrypt/pam_ecryptfs as first session module
    [bsc#1226452]</changelog>
  <changelog author="kukuk@suse.com" date="1725624000">- Update to version 2.11+git.20240906:
  * Move pam_limits before pam_systemd</changelog>
  <changelog author="kukuk@suse.com" date="1726056000">- Update to version 2.11+git.20240911:
  * Only add pam_limits if available</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726056001">- Add PreRequires for pam-extra, several other packages depend on
  that pam_limits is installed and enabled by default</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1744372800">- Update to version 2.12+git.20250411:
  * Release version 2.12
  * Call ecryptfs/fscrypt before pam_unix (#30)
  * Don't exit with error if admin disabled pam-config</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 2.12+git.20250516:
  * Don't add pam_env twice</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1752580800">- Update to version 2.13+git.20250715:
  * Release version 2.13
  * Place himmelblau near the top of pam stack [bsc#1243418]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1755777600">- Update to version 2.13+git.20250819:
  * pam_unix: fix {use|try}_first_pass and use_authtok</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to version 2.13+git.20250827:
  * Add CI
  * Update autoconf configs
  * Add support for pam_unix_ng</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1759492800">- Update to version 2.13+git.20251003:
  * pam_sss: add all possible options
  * Add support for 12 and 13 options</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1762257600">- Update to version 2.13+git.20251104:
  * pam_selinux: fix counter for session stacks</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1762344000">- Update to version 2.13+git.20251105:
  * Disable SELinux for nonlogin session config, too</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1764763200">- Update to version 2.13+git.20251203:
  * Make pam_unix_ng work together with pam_sss
  * pam_sss has no debug option</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1768910400">- Add libeconf to BuildRequires
- Update to version 2.14+git.20260120:
  * Release version 2.14
  * Explain custom pam-config modules in the man page
  * Enable the configurable fallback when called
  * Ensure we call fallback stacks
  * Ensure each configurable module uses it's own opt_sets
  * Only free configurable pam modules
  * Permit module behavior fallback
  * Replace libinih with libeconf
  * Ensure we don't duplicate custom configs
  * Cause custom configs to override built-ins
  * Dynamicaly load pam modules from configuration
  * Give pam modules priorities</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1771243200">- Update to version 2.14+git.20260216:
  * Define  constructors ordering</changelog>
</package>
<package pkgid="7a642365d02287f48701cda6e6a744be6f1ca9e474fbd0fa7d03ae6344480da87904b3265e4c7e1ed70d4c08bf7a60c6bbaa3dd5fd2bbe9c6031cf479966d1e9" name="pam-devel" arch="i586">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="5aa88b3c07a493fec8bddffe393a5a4c599a5235ac75a11533b080862873d89d9baa9d7b5033cc11991323a991f948be5378cdd847baed143f63df37b61f41f1" name="pam-devel" arch="x86_64">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="12d3bd4ef7fd18645654c43aa7b7bc4d8eccba65446c75b174d568eb0b2da640cbbee0e6d788b9deba8b7e7a02311a37b97f1b943e8e1a610f6c1039da70466f" name="pam-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="9f7cb637492a5856506bd93705d8e0a02e22294070ce17de14699a61d23ab3f7cf6ee564377ed27e23ec75696e2308745f696709ea854fd59bd523875a8decca" name="pam-doc" arch="noarch">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="0ed00faf7552cd69a78f5d39c06f4e2c66cba1483669a50e28a6f3a7adf79681ab7179028cdc8fc5a93e91fdc522acd80b72e08f28644d778b449f4e4fc13af7" name="pam-extra" arch="i586">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="ffa75e98a88904d97b70ef21577bdebdbc8340edc9cd26e00acd327b1651be4bb7e6a1236e4fe43ffa59135c72714cb5f6549a7c219d5ab3abcdab406e7b3fda" name="pam-extra" arch="x86_64">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="de3ea2ba8541882e779448938000d274949fd9176852b63e293ddb5c9877fa78b9fa7d43da2277397ec199365e02dfbf3e6fe5ced61c5948e4d87d19509805ad" name="pam-extra-32bit" arch="x86_64">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="6f2c29c6cbedaf6eb0e21c2e8049a6a4cbad8a030f9d2db8a8c5a9d40c79f9d114abbb5f85f27436d07d91e7ab2643a70185cc772c78075fa219a1dd65d85931" name="pam-full-src" arch="src">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="6a5b96bd04d4c557391a16252b5c4a35dbd3c42edf990de5746ba653670d15d7a8a9f39a71bcff3fd9ecdaf3c31afd2fc30011e7984b4585895c8c6132dad784" name="pam-manpages" arch="noarch">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="85ec1fdb2df6766c66442c2dbec496838d8765e8c0a7fc7df7cf70b88a998906014cebddf55dd0dcf0859e38d2f8cdfc0fe2b6c48805496d0841d8351d48b096" name="pam-userdb" arch="i586">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="1210443e9a43a066010f1d50e3ee36428dd37e86553d9f86b9f10ebe664ea7b431f8b712c2c111a918fe774879b7e4d84cd9690896cf30fdd244883345c14a64" name="pam-userdb" arch="x86_64">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
<package pkgid="6c20d452e2e2bad4437980be9ea83da06c40e767b9b050d7d277ef964897c12b6ff7c4d2689d096d353b771222995aff9af8d00f06257dad062d86c9a0c67a3a" name="pam-userdb-32bit" arch="x86_64">
  <version epoch="0" ver="1.7.2+git12" rel="17.1"/>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1706616000">- Enable pam_canonicalize_user.so</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1707307200">- pam.tmpfiles: Make sure the content of the /run directories get
  removed in case of a soft-reboot</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1708603200">- Use autosetup to prepare for RPM 4.20.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1712750400">- Update to version 1.6.1
  - pam_env: fixed --disable-econf --enable-vendordir support.
  - pam_unix: do not warn if password aging is disabled.
  - pam_unix: try to set uid to 0 before unix_chkpwd invocation.
  - pam_unix: allow empty passwords with non-empty hashes.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Remove backports:
  - pam_env-fix_vendordir.patch
  - pam_env-fix-enable-vendordir-fallback.patch
  - pam_env-remove-escaped-newlines.patch
  - pam_unix-fix-password-aging-disabled.patch</changelog>
  <changelog author="Stanislav Brabec &lt;sbrabec@suse.com&gt;" date="1723032000">- Prevent cursor escape from the login prompt [bsc#1194818]
  * Added: pam-bsc1194818-cursor-escape.patch</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725624000">- Add systemd-logind support to pam_limits (pam_limits-systemd.patch)
- Remove /usr/etc/pam.d, everything should be migrated
- Remove pam_limits from default common-sessions* files. pam_limits
  is now part of pam-extra and not in our default generated config.
- pam_issue-systemd.patch: only count class user sessions</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1725969600">- pam_limits-systemd.patch: update to final PR</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1726142400">- baselibs.conf: add pam-userdb</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1729771200">- Update to version 1.7.0
  - build: changed build system from autotools to meson.
  - libpam_misc: use ECHOCTL in the terminal input
  - pam_access: support UID and GID in access.conf
  - pam_env: install environment file in vendordir if vendordir is enabled
  - pam_issue: only count class user if logind support is enabled
  - pam_limits: use systemd-logind instead of utmp if logind support is enabled
  - pam_unix: compare password hashes in constant time
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop upstream patches:
  - pam-bsc1194818-cursor-escape.patch
  - pam_limits-systemd.patch
  - pam_issue-systemd.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1733400000">- pam_access: rework resolving of tokens as hostname
  - separate resolving of IP addresses from hostnames. Don't resolve TTYs or
    display variables as hostname.
  - Add "nodns" option to disallow resolving of tokens as hostname.
  - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078,
  CVE-2024-10963]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1742817600">- Remove unix2_chkpwd, no consumer left</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248000">- Update to version 1.7.1
  - pam_access: do not resolve ttys or display variables as hostnames.
  - pam_access: added "nodns" option to disallow resolving of tokens
    as hostnames (CVE-2024-10963).
  - pam_limits: added support for rttime (RLIMIT_RTTIME).
  - pam_namespace: fixed potential privilege escalation (CVE-2025-6020).
  - meson: added support of elogind as a logind provider.
  - Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- pam_access-rework-resolving-of-tokens-as-hostname.patch got obsoleted</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1750248001">- hardcode disabling elogind, meson detection is unreliable in OBS</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1755604800">- Make sure that the buffer containing encrypted passwords get's erased,
  before free.
  [pam_modutil_get-overwrite-password-at-free.patch, bsc#1232234,
  CVE-2024-10041]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1756296000">- Update to 1.7.1+git (post-v1.7.1.patch)
  - disable unix_chkpwd by default, only used as fallback again
- pam_modutil_get-overwrite-password-at-free.patch is included</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1757937600">- pam_mkhomedir: building with vendordir option allows fetching skeleton
  directory from the vendor directory when creating the user home directory.
  [+ pam_mkhomedir-Use-vendordir-when-defined.patch, bsc#1245524]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1765454400">- Add pam_env.conf.d directory for configuration snippets, to support drop-in
  configuration files for pam_env, following the modular configuration pattern
  used in modern Linux distributions.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1769083200">- Update to version 1.7.2:
  * build: enabled vendordir by default.
  * pam_access: fixed stack overflow with huge configuration files.
  * pam_env: enhanced error diagnostics when ignoring backslash at end of string.
  * pam_faillock: skip clearing user's failed attempt when auth stack is not run.
  * pam_mkhomedir: added support for vendordir skeleton directory.
  * pam_unix: added support for pwaccessd.
  * pam_unix: added support for PAM_CHANGE_EXPIRED_AUTHTOK.
  * pam_unix: fixed password expiration warnings for large day values.
  * pam_unix: hardened temporary file handling.
  * Multiple minor bug fixes, build fixes, portability fixes,
    documentation improvements, and translation updates.
- Drop post-v1.7.1.patch
- Drop pam_mkhomedir-Use-vendordir-when-defined.patch
- Build source archive directly from git</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1773144000">- pam_unix-selinux.patch: always call unix_update if SELinux is
  enabled [bsc#1243242], [bsc#1259119]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1779796800">- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms</changelog>
</package>
</otherdata>