Record pam (1.4.0-10) in archive suite sid

47 files changed, 1826 insertions, 275 deletions

diff --git a/debian/README.source b/debian/README.source
index de10a628..cdbf32fe 100644
--- a/debian/README.source
+++ b/debian/README.source
@@ -6,3 +6,12 @@ debian/patches-applied and applied during the build.  Please see:
 
 for more information on how to apply the patches, modify patches, or
 remove a patch.
+
+If you patch a man page or other XML documentation in the package, it
+is important to include a patch both to the xml file and the resulting
+nroff or other sources in your patch.  much of the man pages is
+installed in Multi-Arch: same packages, so the resulting documents
+need to be identical.  The best way to guarantee this is to include
+the resulting document in the source.p
+
+ -- Sam Hartman <hartmans@debian.org>, Wed,  3 Feb 2021 12:26:39 -0500
diff --git a/debian/changelog b/debian/changelog
index b55392f1..34698023 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,9 +1,138 @@
+pam (1.4.0-10) unstable; urgency=medium
+
+  * Fix syntax error in libpam0g.postinst when a systemd unit fails,
+    Closes: #992538
+  * Include upstream patch not to use crypt_checksalt; without this
+    passwords set prior to bullseye were considered expired, Closes:
+    #992848
+  * Support DPKG_ROOT for pam-auth-update, thanks Johannes 'josch' Schauer
+    Closes: #983427
+
+
+ -- Sam Hartman <hartmans@debian.org>  Thu, 26 Aug 2021 13:43:23 -0600
+
+pam (1.4.0-9) unstable; urgency=medium
+
+  * Revert prefer the multiarch path from 1.4.0-8: It turns out that
+    Debian uses DEFAULT_MODULE_PATH and _PAM_ISA in the opposite meaning
+    of upstream.  If I had read the patch header of
+    patches-applied/lib_security_multiarch_compat more closely I would
+    have noticed this.  The effect of 1.4.0-9 is what is stated in the
+    1.4.0-8 changelog: we prefer multiarch paths, but the original patch
+    did that.
+  * I did test this in 1.4.0-8, but my test design was flawed.  I placed a
+    invalid shared object in /lib/security and confirmed it did not shadow
+    an object in /lib/x86_64-linux-gnu/security.  However I realized
+    shortly after releasing 1.4.0-8 that a valid shared object in
+    /lib/security will shadow one in the multiarch path.
+
+ -- Sam Hartman <hartmans@debian.org>  Fri, 09 Jul 2021 10:55:02 -0600
+
+pam (1.4.0-8) unstable; urgency=high
+
+  [ Hideki Yamane ]
+  * debian/patches-applied/lib_security_multiarch_compat
+    - Fix regression introduced in 1.4.0-1: search both /lib/security and
+    /lib/[multiarch_tripple]/security/, Closes: #990790
+
+  [ Sam Hartman ]
+  * Reword changelog
+  * Prefer the multiarch path (_PAM_ISA) to the non-multiarch path.
+    That's different than buster, but  guarantees everything already
+    working in bullseye will continue to work and also guarantees that
+    when multiarch modules are available we use them.
+
+ -- Hideki Yamane <henrich@debian.org>  Tue, 06 Jul 2021 22:09:15 +0900
+
+pam (1.4.0-7) unstable; urgency=medium
+
+  * Updated portuguese debconf translation, thanks Pedro Ribeiro, Closes:
+    #983594
+  * Updated Simplified Chinese Translations, thanks Boyuan Yang
+  * Updated Bulgarian Translation, Thanks Damyan Ivanov
+  * Updated translation from the Slovak team, thanks Ladislav Michnovič,
+    Closes: #984891
+  * Updated Catalan translation, thanks Alex Muntada, Closes: #984568
+  * Updated Brazilian Portuguese translation, Thanks  Adriano Rafael Gomes,
+    Closes: #984656
+  * French Debconf translations, thanks  Jean-Pierre Giraud    , Closes:
+    #984910
+  * Updated russian Debconf translations, thanks Алексей Шилин, Closes:
+    #984878
+  * Updated Dutch debconf templates, Thanks Frans Spiesschaert, Closes:
+    #984823
+      * Updated German Debconf translations, Thanks Sven Joachim
+  * Code review fixes for the fix to #982295, thanks Mark Hindley
+    - Actually set service to $1 rather than happening to use a variable
+      of the same name in enclosing scope
+    - Remove dead code setting idl when not used
+  * Code review fixes to the fix for #982530, thanks Martin Schurz
+    - Include '-' in the file matching regexp so we search
+    /etc/pam.d/common-* for uses of pam_tally.  The profile check will
+      catch this unless the user has overwridden the configuration
+    - Fix capitalization of pam_Tally in debconf description
+
+
+ -- Sam Hartman <hartmans@debian.org>  Mon, 15 Mar 2021 15:01:55 -0400
+
+pam (1.4.0-6) unstable; urgency=medium
+
+  * Clearly it's been too long since I've done debconf; run
+    debconf-updatepo so the translations will show up as needing
+    translating.
+
+ -- Sam Hartman <hartmans@debian.org>  Fri, 26 Feb 2021 10:48:23 -0500
+
+pam (1.4.0-5) unstable; urgency=low
+
+  * Remove profiles containing pam_tally or pam_tally2 since we no longer
+    build them.
+  * Also, fail to permit profiles to be selected that include pam_tally
+    once the new pam-auth-update is installed
+  * Check for any user-added references to pam_tally and halt the upgrade,
+    Closes: #982530
+  * Handle services with systemd units but no init scripts, Closes: #982295
+  * Register md5sum for new common-password template, Closes: #982898
+  * After reading pam-auth-update source, I agree with Lucas Nussbaum
+    that common-session is intended only for interactive sessions.
+    Otherwise pam-auth-update should not duplicate module configurations
+    between common-session-noninteractive and common-session, so update
+    the documentation, Closes: #982297
+
+ -- Sam Hartman <hartmans@debian.org>  Thu, 25 Feb 2021 15:48:22 -0500
+
+pam (1.4.0-4) unstable; urgency=medium
+
+  * Document in README.source how to avoid multi-arch problems with documentation, Closes: #851650
+  * Update header to common-password talking about sha512
+  * The fix for  #977648 incorrectly assumed how prerm scripts are called; update.
+
+ -- Sam Hartman <hartmans@debian.org>  Wed, 03 Feb 2021 12:35:12 -0500
+
+pam (1.4.0-3) unstable; urgency=medium
+
+  [ Josh Triplett ]
+  * libpam-runtime.postrm: Remove session-noninteractive files on purge,
+    Closes: #978601
+
+  [ Sam Hartman ]
+  * patches-applied/pam_mkhomedir_stat_before_opendir: Stat the skeleton
+    directory before opendir, Closes: #834589
+  * libpam-modules.install: Install pam_faillock binaries, Closes: #981092
+  * debian/patches-applied/pam_unix_initialize_daysleft : Initialize days before password expire, Closes: #980285
+  * pam-configs/unix: Default to yescript rather than sha512.  From a theoretical security standpoint, it looks like yescript has similar security properties, assuming (as we typically do in the crypto protocol community) that sha256 is still reasonable.  However, in terms of practical resistant to password cracking, particularly in terms of valuing space complexity as well as time complexity, yescript is superior, Closes: #978553
+  * No infinite loop on purge of libpam-runtime, Closes: #977648
+  * patches-applied/pam_faillock_create_directory: create /run/faillock when needed.
+
+
+ -- Sam Hartman <hartmans@debian.org>  Mon, 01 Feb 2021 15:27:08 -0500
+
 pam (1.4.0-2) unstable; urgency=medium
 
   * Restart services on upgrade to 1.4.0.  Closes: #978555.
 
  -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 28 Dec 2020 19:20:38 -0800
-
+    
 pam (1.4.0-1) unstable; urgency=medium
 
   * New upstream release.  Closes: #948188.
diff --git a/debian/libpam-modules-bin.install b/debian/libpam-modules-bin.install
index 097c27d6..1092f03c 100644
--- a/debian/libpam-modules-bin.install
+++ b/debian/libpam-modules-bin.install
@@ -2,3 +2,5 @@ sbin/unix_chkpwd	sbin
 sbin/unix_update	sbin
 sbin/mkhomedir_helper	sbin
 sbin/pam_timestamp_check	usr/sbin
+sbin/faillock usr/sbin
+modules/pam_faillock/faillock.8 usr/share/man/man8
diff --git a/debian/libpam-modules.preinst b/debian/libpam-modules.preinst
index 3a86a8fb..fe0d6eb9 100644
--- a/debian/libpam-modules.preinst
+++ b/debian/libpam-modules.preinst
@@ -4,8 +4,50 @@ set -e
 
 . /usr/share/debconf/confmodule
 
-if dpkg --compare-versions "$2" lt-nl 1.4.0-2; then
-	db_version 2.0
+
+handle_profiles_with_removed_modules() {
+    removed_modules="$1"
+    profiles=""
+    modules=""
+    test -x /usr/sbin/pam-auth-update ||return 0
+    test -r /var/lib/pam/auth ||return 0
+    for module in $removed_modules; do
+        new_profiles=$( perl -nle 'BEGIN {$removed = shift;} /^Module: (.*)$/&&($profile = $1); /^[^#]*$removed/&&$profile&&($profiles{$profile} = 1); END {print join("\n",keys %profiles) if %profiles;}' \
+                        $module \
+                        /var/lib/pam/auth /var/lib/pam/account \
+                        /var/lib/pam/password /var/lib/pam/session \
+                        /var/lib/pam/session-noninteractive)
+        if [ "$new_profiles" != "" ]; then
+            modules="$modules $module"
+            profiles="${profiles}${new_profiles}"
+        fi
+    done
+    profiles=$( echo "$profiles" |sort |uniq)
+    if [ "$profiles" != "" ]; then
+        db_reset libpam-modules/profiles-disabled
+        db_subst libpam-modules/profiles-disabled modules "$modules"
+        db_input critical libpam-modules/profiles-disabled ||true
+        db_go ||true
+        pam-auth-update --remove $profiles
+    fi
+}
+
+        
+
+if dpkg --compare-versions "$2" lt-nl 1.4.0-5; then
+    db_version 2.0
+    handle_profiles_with_removed_modules pam_tally
+    # We have a generic template for removing pam-profiles because
+    # there is a sane automatic action.  If we detect the modules in
+    # user configurations we want a specific template so we can
+    # recommend a replacement
+    # /dev/null reference is to make sure we don't grep stdin if
+    # somehow ls returns empty
+    if grep -qe '^[^#]*pam_tally' $(ls -1d /etc/pam.d/* | grep -e '^/etc/pam.d/[0-9a-zA-Z/-]*$' ) /dev/null ; then
+        db_input critical libpam-modules/deprecate-tally ||true
+        db_go ||true
+        exit 2
+    fi
 
 	if pidof xscreensaver xlockmore >/dev/null; then
 		db_input critical libpam-modules/disable-screensaver || true
diff --git a/debian/libpam-modules.templates b/debian/libpam-modules.templates
index b928751e..83f5d6e5 100644
--- a/debian/libpam-modules.templates
+++ b/debian/libpam-modules.templates
@@ -7,3 +7,22 @@ _Description: xscreensaver and xlockmore must be restarted before upgrading
  authenticate to these programs.  You should arrange for these programs
  to be restarted or stopped before continuing this upgrade, to avoid
  locking your users out of their current sessions.
+
+Template: libpam-modules/profiles-disabled
+Type: error
+_Description: PAM Profiles with Deprecated Modules Disabled
+ Your system had PAM profiles enabled with the ${modules} PAM
+ modules. These modules have been removed from PAM. Leaving these PAM
+ profiles enabled would prevent users from accessing your system. As a
+ result, these profiles have been disabled.
+
+Template: libpam-modules/deprecate-tally
+Type: error
+_Description: you are using pam_tally or pam_tally2 in your configuration
+ The pam_tally and pam_tally2 modules have been removed from PAM. You
+ are using one of these modules in your PAM configuration in
+ /etc/pam.d. You must remove the uses of these modules before PAM can
+ be upgraded; including these modules in your PAM configuration after
+ the upgrade will stop users from being able to log into the system.
+ .
+ Consider the pam_faillock module as a replacement for pam_tally.
diff --git a/debian/libpam-runtime.postinst b/debian/libpam-runtime.postinst
index 518e8d24..053fdae2 100644
--- a/debian/libpam-runtime.postinst
+++ b/debian/libpam-runtime.postinst
@@ -29,7 +29,7 @@ then
 	done
 fi
 
-pam-auth-update --package $force
+pam-auth-update --root "$DPKG_ROOT" --package $force
 
 if [ -n "$force" ]; then
 	rm -f /etc/pam.d/common-auth.pam-old \
diff --git a/debian/libpam-runtime.postrm b/debian/libpam-runtime.postrm
index 9a11040d..bff1f43f 100644
--- a/debian/libpam-runtime.postrm
+++ b/debian/libpam-runtime.postrm
@@ -2,10 +2,12 @@
 
 if [ "$1" = "purge" ]; then
 	rm -f /etc/pam.d/common-auth /etc/pam.d/common-account \
-	      /etc/pam.d/common-session /etc/pam.d/common-password
+	      /etc/pam.d/common-session /etc/pam.d/common-password \
+	      /etc/pam.d/common-session-noninteractive
 	rm -f /var/lib/pam/auth /var/lib/pam/account /var/lib/pam/session \
-	      /var/lib/pam/password /var/lib/pam/seen
-	rmdir --ignore-fail-on-non-empty /var/lib/pam
+	      /var/lib/pam/password /var/lib/pam/seen \
+	      /var/lib/pam/session-noninteractive
+	rmdir --ignore-fail-on-non-empty /var/lib/pam ||true
 fi
 
 #DEBHELPER#
diff --git a/debian/libpam-runtime.prerm b/debian/libpam-runtime.prerm
index ec239237..2690cc09 100644
--- a/debian/libpam-runtime.prerm
+++ b/debian/libpam-runtime.prerm
@@ -1,9 +1,20 @@
 #!/bin/sh
 
 set -e
+# Packages including pam configurations need to include a block like
+# the following to arrange for removal of the PAM profile prior to
+# package removale.  Libpam-runtime is special because it includes the
+# machinery for managing the profiles and because there is a check to
+# make sure at least one profile is enabled.  Libpam-runtime can only
+# be removed in a situation where dpkg checks are being overriden; in
+# that case the resulting PAM config is likely to be broken anyway.
+# But we prefer to permit the removal if enough dpkg force options are
+# given than to create an infinite loop.  So, this block is commented
+# out, left here as an example for other packages.
 
-if [ "$1" = remove ]; then
-	pam-auth-update --package --remove unix
-fi
+
+# if [ "$1" = remove ] ; then
+# 	pam-auth-update --package --remove unix
+# fi
 
 #DEBHELPER#
diff --git a/debian/libpam0g.lintian-overrides b/debian/libpam0g.lintian-overrides
index f66356af..5f36562d 100644
--- a/debian/libpam0g.lintian-overrides
+++ b/debian/libpam0g.lintian-overrides
@@ -6,3 +6,6 @@ libpam0g: package-name-doesnt-match-sonames libpam0 libpam-misc0 libpamc0
 # before
 libpam0g: no-debconf-config
 libpam0g: postinst-uses-db-input
+# Yes, we want to use systemctl; if the service is running we do need
+# to restart it. We have already asked the admin.
+libpam0g: maintainer-script-calls-systemctl
diff --git a/debian/libpam0g.postinst b/debian/libpam0g.postinst
index 55928557..6279f684 100644
--- a/debian/libpam0g.postinst
+++ b/debian/libpam0g.postinst
@@ -52,7 +52,45 @@ filerc() {
     echo ""
 }
 
-installed_services() {
+if test -d /run/systemd/system; then
+    is_service_configured() {
+        systemctl is-enabled --quiet $1 || return 1
+    }
+    restart_service() {
+        if systemctl try-restart $1; then
+            :
+        else
+            failed="$failed $1"
+        fi
+    }
+else # not systemd
+    is_service_configured() {
+        service="$1"
+	idl="/etc/init.d/${service}"
+	if [ -n "$idl" ] && [ -x $idl ]; then
+	    return 0
+	else
+            return 1
+        fi
+    }
+
+    restart_service() {
+        service="$1"
+	idl="invoke-rc.d ${service}"
+	echo -n "  $service: stopping..." 2>&1
+	$idl stop > /dev/null 2>&1 || true
+	sleep 1
+	echo -n "starting..." 2>&1
+	if $idl start > /dev/null 2>&1; then
+	    echo "done." 2>&1
+	else
+	    echo "FAILED! ($?)" 2>&1
+	    failed="$service $failed"
+	fi
+    }
+fi
+    
+                 installed_services() {
     check="$@"
 
     # Only get the ones that are installed, and configured
@@ -74,11 +112,10 @@ installed_services() {
     )
 
     for service in $check; do
-	idl="/etc/init.d/${service}"
-	if [ -n "$idl" ] && [ -x $idl ]; then
+	if is_service_configured $service; then
 		services="$service $services"
 	else
-		echo "WARNING: init script for $service not found." >&2
+		echo "WARNING:  $service not configured." >&2
 	fi
     done
     echo "$services"
@@ -152,16 +189,7 @@ then
 				continue
 			    ;;
 			esac
-			echo -n "  $service: stopping..."
-			$idl stop > /dev/null 2>&1 || true
-			sleep 1
-			echo -n "starting..."
-			if $idl start > /dev/null 2>&1; then
-			    echo "done."
-			else
-			    echo "FAILED! ($?)"
-			    failed="$service $failed"
-			fi
+                        restart_service "$service"
 		    done
 		    echo
 		    if [ -n "$failed" ]; then
diff --git a/debian/libpam0g.templates b/debian/libpam0g.templates
index 64a616ac..6026ee73 100644
--- a/debian/libpam0g.templates
+++ b/debian/libpam0g.templates
@@ -3,7 +3,7 @@ Type: string
 _Description: Services to restart for PAM library upgrade:
  Most services that use PAM need to be restarted to use modules built for
  this new version of libpam.  Please review the following space-separated
- list of init.d scripts for services to be restarted now, and correct it
+ list of  services to be restarted now, and correct it
  if needed.
 
 Template: libpam0g/xdm-needs-restart
diff --git a/debian/local/common-password b/debian/local/common-password
index 963f1eb4..676b814c 100644
--- a/debian/local/common-password
+++ b/debian/local/common-password
@@ -6,14 +6,14 @@
 # used to change user passwords.  The default is pam_unix.
 
 # Explanation of pam_unix options:
-#
-# The "sha512" option enables salted SHA512 passwords.  Without this option,
-# the default is Unix crypt.  Prior releases used the option "md5".
-#
-# The "obscure" option replaces the old `OBSCURE_CHECKS_ENAB' option in
-# login.defs.
-#
-# See the pam_unix manpage for other options.
+# The "yescrypt" option enables
+#hashed passwords using the yescrypt algorithm, introduced in Debian
+#11.  Without this option, the default is Unix crypt.  Prior releases
+#used the option "sha512"; if a shadow password hash will be shared
+#between Debian 11 and older releases replace "yescrypt" with "sha512"
+#for compatibility .  The "obscure" option replaces the old
+#`OBSCURE_CHECKS_ENAB' option in login.defs.  See the pam_unix manpage
+#for other options.
 
 # As of pam 1.0.1-6, this file is managed by pam-auth-update by default.
 # To take advantage of this, it is recommended that you configure any
diff --git a/debian/local/common-session b/debian/local/common-session
index 2e94d6c7..d0a229a6 100644
--- a/debian/local/common-session
+++ b/debian/local/common-session
@@ -3,8 +3,7 @@
 #
 # This file is included from other service-specific PAM config files,
 # and should contain a list of modules that define tasks to be performed
-# at the start and end of sessions of *any* kind (both interactive and
-# non-interactive).
+# at the start and end of interactive sessions.
 #
 # As of pam 1.0.1-6, this file is managed by pam-auth-update by default.
 # To take advantage of this, it is recommended that you configure any
diff --git a/debian/local/pam-auth-update b/debian/local/pam-auth-update
index 6d17ab72..6c4134bb 100644
--- a/debian/local/pam-auth-update
+++ b/debian/local/pam-auth-update
@@ -47,11 +47,13 @@ my %md5sums = (
 	'auth' => ['8d4fe17e66ba25de16a117035d1396aa'],
 	'account' => ['3c0c362eaf3421848b679d63fd48c3fa'],
 	'password' => [
+        '4d5c92d595a46b69cd61f18feb4c0574',
 		'50fce2113dfda83ac8bdd5a6e706caec',
 		'4bd7610f2e85f8ddaef79c7db7cb49eb',
 		'9ba753d0824276b44bcadfee1f87b6bc',
 	],
 	'session' => [
+        'f297c731a467822cbd86e1283263e8a3',
 		'240fb92986c885b327cdb21dd641da8c',
 		'4a25673e8b36f1805219027d3be02cd2',
 	],
@@ -59,11 +61,15 @@ my %md5sums = (
 		'ad2b78ce1498dd637ef36469430b6ac6',
 	],
 );
+my @invalid_modules = ('pam_tally');
 
 opendir(DIR, $inputdir) || die "could not open config directory: $!";
 while (my $profile = readdir(DIR)) {
 	next if ($profile eq '.' || $profile eq '..' || $profile =~ m/~$/ || $profile =~ m/^#.+#$/);
 	%{$profiles{$profile}} = parse_pam_profile($inputdir . '/' . $profile);
+        if (defined $profiles{$profile}{'disabled'} and $profiles{$profile}{'disabled'}) {
+          delete $profiles{$profile};
+        }
 }
 closedir DIR;
 
@@ -82,6 +88,11 @@ while ($#ARGV >= 0) {
 		$force = 1;
 	} elsif ($opt eq '--package') {
 		$package = 1;
+        } elsif ($opt eq '--root') {
+                my $rootdir = shift @ARGV;
+                $savedir = "${rootdir}$savedir";
+                $confdir = "${rootdir}$confdir";
+               $inputdir = "${rootdir}$inputdir";
 	} elsif ($opt eq '--remove') {
 		while ($#ARGV >= 0) {
 			last if ($ARGV[0] =~ /^--/);
@@ -702,6 +713,9 @@ sub parse_pam_profile
 			s/^\s+//;
 			s/\s+$//;
 			$profile{$fieldname} .= "\n$_" if ($_);
+                        if (grep { $profile{$fieldname} =~ /$_/} @invalid_modules) {
+                          $profile{'disabled'} = 1;
+                        }
 			$profile{$fieldname} =~ s/^[\n\s]+//;
 		}
 	}
diff --git a/debian/pam-configs/unix b/debian/pam-configs/unix
index 6e896439..83c429bc 100644
--- a/debian/pam-configs/unix
+++ b/debian/pam-configs/unix
@@ -18,6 +18,6 @@ Session-Initial:
 	required	pam_unix.so
 Password-Type: Primary
 Password:
-	[success=end default=ignore]	pam_unix.so obscure use_authtok try_first_pass sha512
+	[success=end default=ignore]	pam_unix.so obscure use_authtok try_first_pass yescrypt
 Password-Initial:
-	[success=end default=ignore]	pam_unix.so obscure sha512
+	[success=end default=ignore]	pam_unix.so obscure yescrypt
diff --git a/debian/patches-applied/lib_security_multiarch_compat b/debian/patches-applied/lib_security_multiarch_compat
index c43a733e..e386ff39 100644
--- a/debian/patches-applied/lib_security_multiarch_compat
+++ b/debian/patches-applied/lib_security_multiarch_compat
@@ -11,11 +11,11 @@ currently abusing the existing variables and inverting their meaning in
 order to get everything installed where we want it and get absolute paths
 the way we want them.
 
-Index: pam/libpam/pam_handlers.c
+Index: pam-1.4.0/libpam/pam_handlers.c
 ===================================================================
---- pam.orig/libpam/pam_handlers.c
-+++ pam/libpam/pam_handlers.c
-@@ -735,7 +735,18 @@
+--- pam-1.4.0.orig/libpam/pam_handlers.c
++++ pam-1.4.0/libpam/pam_handlers.c
+@@ -735,7 +735,27 @@ _pam_load_module(pam_handle_t *pamh, con
  	success = PAM_ABORT;
  
  	D(("_pam_load_module: _pam_dlopen(%s)", mod_path));
@@ -31,11 +31,20 @@ Index: pam/libpam/pam_handlers.c
 +	    } else {
 +		pam_syslog(pamh, LOG_CRIT, "cannot malloc full mod path");
 +	    }
++           if (!mod->dl_handle) {
++               if (asprintf(&mod_full_path, "%s/%s",
++                            _PAM_ISA, mod_path) >= 0) {
++                   mod->dl_handle = _pam_dlopen(mod_full_path);
++                   _pam_drop(mod_full_path);
++               } else {
++                   pam_syslog(pamh, LOG_CRIT, "cannot malloc full mod path");
++               }
++	    }
 +	}
  	D(("_pam_load_module: _pam_dlopen'ed"));
  	D(("_pam_load_module: dlopen'ed"));
  	if (mod->dl_handle == NULL) {
-@@ -812,7 +823,6 @@
+@@ -812,7 +832,6 @@ int _pam_add_handler(pam_handle_t *pamh
      struct handler **handler_p2;
      struct handlers *the_handlers;
      const char *sym, *sym2;
@@ -43,7 +52,7 @@ Index: pam/libpam/pam_handlers.c
      servicefn func, func2;
      int mod_type = PAM_MT_FAULTY_MOD;
  
-@@ -824,16 +834,7 @@
+@@ -824,16 +843,7 @@ int _pam_add_handler(pam_handle_t *pamh
  
      if ((handler_type == PAM_HT_MODULE || handler_type == PAM_HT_SILENT_MODULE) &&
  	mod_path != NULL) {
diff --git a/debian/patches-applied/pam_faillock_create_directory b/debian/patches-applied/pam_faillock_create_directory
new file mode 100644
index 00000000..420e2937
--- /dev/null
+++ b/debian/patches-applied/pam_faillock_create_directory
@@ -0,0 +1,31 @@
+commit d54870f993e97fe75e2cd0470a3701d5af22877c
+Author: Changqing Li <changqing.li@windriver.com>
+Date:   Tue Jan 12 14:45:34 2021 +0800
+
+    faillock: create tallydir before creating tallyfile
+    
+    The default tallydir is "/var/run/faillock", and this default
+    tallydir may not exist.
+    
+    Function open may fail as tallydir does not exist when creating
+    the tallyfile. Therefore, faillock will not work well.
+    
+    Fix this problem by creating tallydir before creating tallyfile
+    when the tallydir does not exist.
+    
+    Signed-off-by: Changqing Li <changqing.li@windriver.com>
+
+Index: pam/modules/pam_faillock/faillock.c
+===================================================================
+--- pam.orig/modules/pam_faillock/faillock.c
++++ pam/modules/pam_faillock/faillock.c
+@@ -74,6 +74,9 @@ open_tally (const char *dir, const char
+ 
+ 	if (create) {
+ 		flags |= O_CREAT;
++		if (access(dir, F_OK) != 0) {
++			mkdir(dir, 0755);
++		}
+ 	}
+ 
+ 	fd = open(path, flags, 0600);
diff --git a/debian/patches-applied/pam_mkhomedir_stat_before_opendir b/debian/patches-applied/pam_mkhomedir_stat_before_opendir
new file mode 100644
index 00000000..3e5f0a12
--- /dev/null
+++ b/debian/patches-applied/pam_mkhomedir_stat_before_opendir
@@ -0,0 +1,25 @@
+Index: pam/modules/pam_mkhomedir/mkhomedir_helper.c
+===================================================================
+--- pam.orig/modules/pam_mkhomedir/mkhomedir_helper.c
++++ pam/modules/pam_mkhomedir/mkhomedir_helper.c
+@@ -38,6 +38,7 @@ create_homedir(const struct passwd *pwd,
+    DIR *d;
+    struct dirent *dent;
+    int retval = PAM_SESSION_ERR;
++   struct stat stat_buf;
+ 
+    /* Create the new directory */
+    if (mkdir(dest, 0700) && errno != EEXIST)
+@@ -53,6 +54,12 @@ create_homedir(const struct passwd *pwd,
+       goto go_out;
+    }
+ 
++   /* Various things such as an autofs mount with browsing disabled
++    * can cause the directory to appear only on stat.  The intent is
++    * to minimize network traversal when a file explorer tries to
++    * traverse large chunks of a directory tree.  So stat first.*/
++   stat(source, &stat_buf);
++   
+    /* Scan the directory */
+    d = opendir(source);
+    if (d == NULL)
diff --git a/debian/patches-applied/pam_unix_avoid_checksalt b/debian/patches-applied/pam_unix_avoid_checksalt
new file mode 100644
index 00000000..5a441145
--- /dev/null
+++ b/debian/patches-applied/pam_unix_avoid_checksalt
@@ -0,0 +1,43 @@
+debian-bug: #992848
+upstream-bug: https://github.com/linux-pam/linux-pam/issues/367
+
+
+From 980d90c9232fe5325d1a4deddd42c597cf9e1a54 Mon Sep 17 00:00:00 2001
+From: "Dmitry V. Levin" <ldv@altlinux.org>
+Date: Thu, 10 Jun 2021 14:00:00 +0000
+Subject: [PATCH] pam_unix: do not use crypt_checksalt when checking for
+ password expiration
+
+According to Zack Weinberg, the intended meaning of
+CRYPT_SALT_METHOD_LEGACY is "passwd(1) should not use this hashing
+method", it is not supposed to mean "force a password change on next
+login for any user with an existing stored hash using this method".
+
+This reverts commit 4da9febc39b955892a30686e8396785b96bb8ba5.
+
+* modules/pam_unix/passverify.c (check_shadow_expiry)
+[CRYPT_CHECKSALT_AVAILABLE]: Remove.
+
+Closes: https://github.com/linux-pam/linux-pam/issues/367
+---
+ modules/pam_unix/passverify.c | 6 ------
+ 1 file changed, 6 deletions(-)
+
+diff --git a/modules/pam_unix/passverify.c b/modules/pam_unix/passverify.c
+index f6132f805..5a19ed856 100644
+--- a/modules/pam_unix/passverify.c
++++ b/modules/pam_unix/passverify.c
+@@ -289,13 +289,7 @@ PAMH_ARG_DECL(int check_shadow_expiry,
+ 		D(("account expired"));
+ 		return PAM_ACCT_EXPIRED;
+ 	}
+-#if defined(CRYPT_CHECKSALT_AVAILABLE) && CRYPT_CHECKSALT_AVAILABLE
+-	if (spent->sp_lstchg == 0 ||
+-	    crypt_checksalt(spent->sp_pwdp) == CRYPT_SALT_METHOD_LEGACY ||
+-	    crypt_checksalt(spent->sp_pwdp) == CRYPT_SALT_TOO_CHEAP) {
+-#else
+ 	if (spent->sp_lstchg == 0) {
+-#endif
+ 		D(("need a new password"));
+ 		*daysleft = 0;
+ 		return PAM_NEW_AUTHTOK_REQD;
diff --git a/debian/patches-applied/pam_unix_initialize_daysleft b/debian/patches-applied/pam_unix_initialize_daysleft
new file mode 100644
index 00000000..e304a16e
--- /dev/null
+++ b/debian/patches-applied/pam_unix_initialize_daysleft
@@ -0,0 +1,29 @@
+bug-debian: https://bugs.debian.org/980285
+
+commit db6b293046aee4735f3aa2d1713742ed4b533219
+Author: Tomas Mraz <tmraz@fedoraproject.org>
+Date:   Wed Jul 22 11:47:55 2020 +0200
+
+    Fix missing initialization of daysleft
+    
+    The daysleft otherwise stays uninitialized if there is no shadow entry.
+    
+    Regression from commit f5adefa.
+    
+    Fixes #255
+    
+    * modules/pam_unix/pam_unix_acct.c (pam_sm_acct_mgmt): Initialize daysleft.
+
+Index: pam/modules/pam_unix/pam_unix_acct.c
+===================================================================
+--- pam.orig/modules/pam_unix/pam_unix_acct.c
++++ pam/modules/pam_unix/pam_unix_acct.c
+@@ -189,7 +189,7 @@ pam_sm_acct_mgmt(pam_handle_t *pamh, int
+ 	unsigned long long ctrl;
+ 	const void *void_uname;
+ 	const char *uname;
+-	int retval, daysleft;
++	int retval, daysleft = -1;
+ 	char buf[256];
+ 
+ 	D(("called."));
diff --git a/debian/patches-applied/series b/debian/patches-applied/series
index 4d562185..3cc3e287 100644
--- a/debian/patches-applied/series
+++ b/debian/patches-applied/series
@@ -21,3 +21,8 @@ lib_security_multiarch_compat
 pam-limits-nofile-fd-setsize-cap
 fix-autoreconf.patch
 nullok_secure-compat.patch
+
+pam_unix_initialize_daysleft
+pam_faillock_create_directory
+pam_mkhomedir_stat_before_opendir
+pam_unix_avoid_checksalt
diff --git a/debian/po/bg.po b/debian/po/bg.po
index b763fbde..3af5a581 100644
--- a/debian/po/bg.po
+++ b/debian/po/bg.po
@@ -1,21 +1,21 @@
 # translation of bg.po to Bulgarian
 # Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
 # This file is distributed under the same license as the PACKAGE package.
-# Damyan Ivanov <dmn@debian.org>, 2007, 2009, 2012.
+# Damyan Ivanov <dmn@debian.org>, 2007-2021.
 #
 msgid ""
 msgstr ""
 "Project-Id-Version: bg\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
-"PO-Revision-Date: 2012-01-19 22:36+0200\n"
+"POT-Creation-Date: 2021-03-15 18:23-0400\n"
+"PO-Revision-Date: 2021-02-28 21:32+0200\n"
 "Last-Translator: Damyan Ivanov <dmn@debian.org>\n"
-"Language-Team: Български <dict@fsa-bg.org>\n"
+"Language-Team: Bulgarian <dict@ludost.net>\n"
 "Language: bg\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"X-Generator: KBabel 1.11.4\n"
+"X-Generator: Gtranslator 3.38.0\n"
 "Plural-Forms: nplurals=2; plural=(n != 1)\n"
 
 #. Type: string
@@ -30,13 +30,12 @@ msgstr "Рестартиране на услуги при обновяване �
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "Повечето услуги, които използват PAM трябва да бъдат рестартирани за да "
 "могат да използват модулите за новата версия на libpam. Прегледайте списъка "
-"от init.d скриптове по-долу и го коригирайте ако е необходимо. Имената на "
-"отделните скриптове трябва да са отделени с интервал."
+"от услуги по-долу и го коригирайте ако е необходимо. Имената на отделните "
+"услуги трябва да са отделени с интервал."
 
 #. Type: error
 #. Description
@@ -224,3 +223,49 @@ msgstr ""
 "невъзможно идентифицирането с тези програми. Трябва да осигурите "
 "рестартирането или спирането на xscreensaver и xlockmore за да избегнете "
 "проблеми с идентификацията при потребителите, които ги използват."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr "Изключване на профили на PAM, използващи остарели модули"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+"В системата имаше активни профили на PAM, използващи модулите ${modules}. "
+"Тези модули са премахнати от PAM. Използването на тези профилите би "
+"възпрепятствало достъпа на потребителите до системата и затова са изключени."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr "настройките на системата използват pam_tally или pam_tally2"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+"Модулите pam_tally и pam_tally2 са премахнати от PAM. Необходимо тези модули "
+"да бъдат премахнати от настройките в /etc/pam.d преди обновяването на PAM. В "
+"противен случай, след обновяването на системата потребителите няма да могат "
+"да влизат."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr "Модулът pam_faillock може да се използва като заместител на pam_tally."
diff --git a/debian/po/ca.po b/debian/po/ca.po
index 18d42f4c..eea4471a 100644
--- a/debian/po/ca.po
+++ b/debian/po/ca.po
@@ -7,16 +7,15 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam 1.1.3-6.1\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
-"PO-Revision-Date: 2012-01-21 08:33+0100\n"
-"Last-Translator: Innocent De Marchi <tangram.peces@gmail.com>\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
+"PO-Revision-Date: 2021-03-05 11:06+0100\n"
+"Last-Translator: Alex Muntada <alexm@debian.org>\n"
 "Language-Team: Catalan <debian-l10n-catalan@lists.debian.org>\n"
 "Language: ca\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"X-Poedit-Language: Catalan\n"
-"X-Poedit-Country: SPAIN\n"
+"X-Generator: Poedit 2.2.1\n"
 
 #. Type: string
 #. Description
@@ -31,13 +30,12 @@ msgstr ""
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "És necessari reiniciar la majoria dels serveis que fan servir PAM per a que "
 "facin servir els mòduls d'aquesta versió de «libpam». Reviseu la següent "
-"llista separada per espais dels scripts «init.d» que indica els serveis que "
-"es reiniciaran ara i modificau-la si és necessari."
+"llista separada per espais dels serveis que es reiniciaran ara i modificau-"
+"la si és necessari."
 
 #. Type: error
 #. Description
@@ -108,8 +106,8 @@ msgid ""
 "asked questions on each library upgrade."
 msgstr ""
 "Hi ha serveis instal·lats en el seu sistema que necessiten ser reiniciats en "
-"actualitzar certes biblioteques, com libpam, libc i libssl. Ja que el procés "
-"de reinicii pot causar interrupcions en el sistema, normalment se vos "
+"actualitzar certes biblioteques, com libpam, libc i libssl. Com que el "
+"procés de reinici pot causar interrupcions en el sistema, normalment se vos "
 "demanarà, a cada actualització, per a la llista de serveis que voleu "
 "reiniciar. Podeu triar aquesta opció per evitar que se vos demani; en canvi, "
 "es faran automàticament tots els reinicis necessaris sense demanar-vos "
@@ -136,7 +134,7 @@ msgid ""
 "allowing configuration of additional actions to take when starting user "
 "sessions."
 msgstr ""
-"Els «Pluggable Authentication Modules» (PAM, o Mòduls d'autenticació "
+"Els «Pluggable Authentication Modules» (PAM, o mòduls d'autenticació "
 "inseribles) determinen com es gestionen en el sistema l'autenticació, "
 "autorització i modificació de contrasenyes. També permet la definició "
 "d'accions addicionals a realitzar quan s'inicia la sessió d'un usuari."
@@ -181,7 +179,7 @@ msgstr "Seleccioneu un conjunt distint de mòduls a activar."
 #: ../libpam-runtime.templates:4001
 msgid "Override local changes to /etc/pam.d/common-*?"
 msgstr ""
-"Desitjau descartar els canvis locals realitzats a «/etc/pam.d/common-*»?"
+"Desitjau sobreescriure els canvis locals realitzats a «/etc/pam.d/common-*»?"
 
 #. Type: boolean
 #. Description
@@ -239,3 +237,51 @@ msgstr ""
 "biblioteca. Heu de procurar que aquests programes es reinicien o s'aturin "
 "abans de continuar amb l'actualització. Així evitareu que els usuaris quedin "
 "bloquejats i no puguin continuar les seves sessions actuals."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr "Perfils de PAM amb mòduls descartats desactivats"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+"El vostre sistema tenia perfils de PAM activats amb els mòduls PAM "
+"${modules}. Aquests mòduls s'han eliminat de PAM. Deixant aquests perfils "
+"activats els usuaris no podrien accedir al vostre sistema. Com a resultat, "
+"aquests perfils s'han desactivat."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr "esteu utilitzant pam_tally o pam_tally2 a la vostra configuració"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+"Els mòduls pam_tally i pam_tally2 s'han eliminat de PAM. Esteu utilitzant un "
+"d'aquests mòduls a la vostra configuració de PAM a /etc/pam.d. Heu "
+"d'eliminar els usos d'aquests mòduls abans que es pugui actualitzar PAM ja "
+"que, amb aquests mòduls inclosos a la vostra configuració de PAM, després de "
+"l'actualització els usuaris deixarien de poder entrar al sistema."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr "Valoreu el mòdul pam_faillock com a substitut de pam_tally."
diff --git a/debian/po/cs.po b/debian/po/cs.po
index 47570645..baa022f6 100644
--- a/debian/po/cs.po
+++ b/debian/po/cs.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
 "PO-Revision-Date: 2012-01-27 07:56+0100\n"
 "Last-Translator: Miroslav Kure <kurem@debian.cz>\n"
 "Language-Team: Czech <debian-l10n-czech@lists.debian.org>\n"
@@ -25,11 +25,16 @@ msgstr "Služby, které se mají restartovat po aktualizaci knihovny PAM:"
 #. Type: string
 #. Description
 #: ../libpam0g.templates:1001
+#, fuzzy
+#| msgid ""
+#| "Most services that use PAM need to be restarted to use modules built for "
+#| "this new version of libpam.  Please review the following space-separated "
+#| "list of init.d scripts for services to be restarted now, and correct it "
+#| "if needed."
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "Aby se začaly používat moduly z nové verze knihovny libpam, musí se většina "
 "služeb používajících PAM restartovat. Zkontrolujte prosím následující seznam "
@@ -98,12 +103,12 @@ msgid ""
 "necessary restarts will be done for you automatically so you can avoid being "
 "asked questions on each library upgrade."
 msgstr ""
-"V systému jsou nainstalovány služby, které je nutno při aktualizaci "
-"určitých knihoven (libpam, libc nebo libssl) restartovat. Během restartu "
-"služeb jsou tyto po nějakou dobu nedostupné. Abychom předešli nechtěné "
-"nedostupnosti, je při každé aktualizaci nabídnut seznam služeb, které se "
-"mají restartovat. Povolíte-li tuto možnost, budou se všechny potřebné "
-"služby restartovat při aktualizaci knihoven automaticky bez ptaní."
+"V systému jsou nainstalovány služby, které je nutno při aktualizaci určitých "
+"knihoven (libpam, libc nebo libssl) restartovat. Během restartu služeb jsou "
+"tyto po nějakou dobu nedostupné. Abychom předešli nechtěné nedostupnosti, je "
+"při každé aktualizaci nabídnut seznam služeb, které se mají restartovat. "
+"Povolíte-li tuto možnost, budou se všechny potřebné služby restartovat při "
+"aktualizaci knihoven automaticky bez ptaní."
 
 #. Type: title
 #. Description
@@ -224,3 +229,42 @@ msgstr ""
 "autentizovat. To jinými slovy znamená, že se uživatelé nedostanou ke svým "
 "uzamčeným sezením. Abyste tomu předešli, měli byste před aktualizací zmíněné "
 "programy zastavit, nebo je ve vhodný čas restartovat."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
diff --git a/debian/po/da.po b/debian/po/da.po
index c332eac5..6932f4c3 100644
--- a/debian/po/da.po
+++ b/debian/po/da.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
 "PO-Revision-Date: 2011-11-10 19:21+0100\n"
 "Last-Translator: Joe Hansen <joedalton2@yahoo.dk>\n"
 "Language-Team: Danish <debian-l10n-danish@lists.debian.org>\n"
@@ -25,11 +25,16 @@ msgstr "Tjenester at genstarte for PAM-biblioteksopgradering:"
 #. Type: string
 #. Description
 #: ../libpam0g.templates:1001
+#, fuzzy
+#| msgid ""
+#| "Most services that use PAM need to be restarted to use modules built for "
+#| "this new version of libpam.  Please review the following space-separated "
+#| "list of init.d scripts for services to be restarted now, and correct it "
+#| "if needed."
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "De fleste tjenester, som bruger PAM, har brug for at blive genstartet for at "
 "kunne bruge moduler bygget til denne nye version af libpam. Gennemgå "
@@ -227,3 +232,42 @@ msgstr ""
 "af disse programmer. Du skal sørge for at disse programmer bliver genstartet "
 "eller stoppet, før du fortsætter med opgraderingen, for at undgå låsning af "
 "dine brugere i deres aktuelle sessioner."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
diff --git a/debian/po/de.po b/debian/po/de.po
index 981bc2da..5d3fbb67 100644
--- a/debian/po/de.po
+++ b/debian/po/de.po
@@ -1,14 +1,14 @@
 # German translation of pam debconf templates
-# Copyright (C) 2007, 2009, 2011 Sven Joachim <svenjoac@gmx.de>.
+# Copyright (C) 2007, 2009, 2011, 2021 Sven Joachim <svenjoac@gmx.de>.
 # Copyright (C) Helge Kreutzmann <debian@helgefjell.de>, 2011.
 # This file is distributed under the same license as the pam package.
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: pam 1.1.3-6\n"
+"Project-Id-Version: pam 1.4.0-6\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
-"PO-Revision-Date: 2011-12-26 19:53+0100\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
+"PO-Revision-Date: 2021-03-01 18:03+0100\n"
 "Last-Translator: Sven Joachim <svenjoac@gmx.de>\n"
 "Language-Team: German <debian-l10n-german@lists.debian.org>\n"
 "Language: de\n"
@@ -28,14 +28,12 @@ msgstr "Neu zu startende Dienste für das Upgrade der PAM-Bibliothek:"
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "Die meisten Dienste, die PAM verwenden, müssen neu gestartet werden, um "
 "Module dieser neuen Version von libpam verwenden zu können. Bitte überprüfen "
-"Sie die folgende, Leerzeichen-getrennte Liste von init.d-Skripten für "
-"Dienste, die jetzt neu zu starten sind, und korrigieren Sie diese Liste "
-"falls notwendig."
+"Sie die folgende, Leerzeichen-getrennte Liste von Diensten, die jetzt neu zu "
+"starten sind, und korrigieren Sie diese Liste falls notwendig."
 
 #. Type: error
 #. Description
@@ -185,10 +183,10 @@ msgid ""
 "configuration by hand."
 msgstr ""
 "Eine oder mehrere der Dateien /etc/pam.d/common-{auth,account,password,"
-"session} sind lokal verändert worden. Bitte geben Sie an, ob diese "
-"Änderungen durch die mitgelieferte Konfiguration außer Kraft gesetzt werden "
-"sollen. Falls Sie diese Option ablehnen, müssen Sie die Authentifizierungs-"
-"Konfiguration Ihres Systems von Hand verwalten."
+"session} sind lokal verändert worden. Bitte geben Sie an, ob diese lokalen "
+"Änderungen durch die vom System bereitgestellte Konfiguration außer Kraft "
+"gesetzt werden sollen. Falls Sie diese Option ablehnen, müssen Sie die "
+"Authentifizierungs-Konfiguration Ihres Systems von Hand verwalten."
 
 #. Type: error
 #. Description
@@ -206,14 +204,14 @@ msgid ""
 msgstr ""
 "Es wurden keine PAM-Profile für die Verwendung auf diesem System ausgewählt. "
 "Dies würde allen Benutzern Zugang ohne Authentifizierung gestatten und ist "
-"nicht erlaubt. Bitte wählen Sie mindestens ein PAM-Profil aus der "
-"verfügbaren Liste aus."
+"nicht erlaubt. Bitte wählen Sie mindestens ein PAM-Profil aus der Liste der "
+"verfügbaren aus."
 
 #. Type: error
 #. Description
 #: ../libpam-modules.templates:1001
 msgid "xscreensaver and xlockmore must be restarted before upgrading"
-msgstr "Xscreensaver und xlockmore müssen vor dem Upgrade neu gestartet werden"
+msgstr "Xscreensaver und Xlockmore müssen vor dem Upgrade neu gestartet werden"
 
 #. Type: error
 #. Description
@@ -226,10 +224,59 @@ msgid ""
 "stopped before continuing this upgrade, to avoid locking your users out of "
 "their current sessions."
 msgstr ""
-"Eine oder mehrere laufende Instanzen von xscreensaver oder xlockmore sind "
+"Eine oder mehrere laufende Instanzen von Xscreensaver oder Xlockmore sind "
 "auf diesem System entdeckt worden. Aufgrund inkompatibler Änderungen in "
 "Bibliotheken wird das Upgrade des libpam-modules-Paketes Sie außerstande "
 "setzen, sich gegenüber diesen Programmen zu authentifizieren. Sie sollten "
 "dafür sorgen, dass diese Programme neu gestartet oder beendet werden, bevor "
 "Sie dieses Upgrade fortsetzen, damit Ihre Benutzer nicht aus ihren laufenden "
 "Sitzungen ausgesperrt werden."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr "PAM-Profile mit veralteten Modulen deaktiviert"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+"Ihr System hatte PAM-Profile mit den PAM-Modulen ${modules} aktiviert. Diese "
+"Module sind aus PAM entfernt worden. Diese PAM-Profile aktivert zu lassen "
+"würde Benutzer daran hindern, auf Ihr System zuzugreifen. Infolgedessen sind "
+"diese Profile deaktiviert worden."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr "Sie verwenden pam_tally oder pam_tally2 in Ihrer Konfiguration"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+"Die Module pam_tally und pam_tally2 sind aus PAM entfernt worden. Sie "
+"verwenden eines dieser Module in Ihrer PAM-Konfiguration in /etc/pam.d. Sie "
+"müssen die Verwendung dieser Module entfernen, bevor das Upgrade von PAM "
+"durchgeführt werden kann; die Einbindung dieser Module in Ihrer PAM-"
+"Konfiguration nach dem Upgrade wird Benutzer davon abhalten, sich an dem "
+"System anzumelden."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr "Betrachten Sie das Modul pam_faillock als Ersatz for pam_tally."
diff --git a/debian/po/es.po b/debian/po/es.po
index 4afcb985..f96a0bbb 100644
--- a/debian/po/es.po
+++ b/debian/po/es.po
@@ -35,7 +35,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam 0.79-4\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
 "PO-Revision-Date: 2012-01-02 01:41+0100\n"
 "Last-Translator: Javier Fernandez-Sanguino <jfs@debian.org>\n"
 "Language-Team: Debian Spanish <debian-l10n-spanish@lists.debian.org>\n"
@@ -58,11 +58,16 @@ msgstr "Servicios a reiniciar para la actualización de la biblioteca de PAM:"
 #. Type: string
 #. Description
 #: ../libpam0g.templates:1001
+#, fuzzy
+#| msgid ""
+#| "Most services that use PAM need to be restarted to use modules built for "
+#| "this new version of libpam.  Please review the following space-separated "
+#| "list of init.d scripts for services to be restarted now, and correct it "
+#| "if needed."
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "Es necesario reiniciar la mayoría de los servicios que utilizan PAM para que "
 "usen los módulos de esta versión de libpam. Por favor, revise la lista "
@@ -268,3 +273,42 @@ msgstr ""
 "librerías. Debería procurar que estos programas se reinicien o se paren "
 "antes de continuar con la actualización. Así evitará que los usuarios queden "
 "bloqueados y no puedan reanudar sus sesiones actuales."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
diff --git a/debian/po/eu.po b/debian/po/eu.po
index 8573dd57..72c24f2b 100644
--- a/debian/po/eu.po
+++ b/debian/po/eu.po
@@ -9,7 +9,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam_1.0.1-5_eu\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
 "PO-Revision-Date: 2009-01-02 12:30+0100\n"
 "Last-Translator: Piarres Beobide <pi@beobide.net>\n"
 "Language-Team: debian-eu <debian-l10n-eu@lists.debian.org>\n"
@@ -30,11 +30,16 @@ msgstr ""
 #. Type: string
 #. Description
 #: ../libpam0g.templates:1001
+#, fuzzy
+#| msgid ""
+#| "Most services that use PAM need to be restarted to use modules built for "
+#| "this new version of libpam.  Please review the following space-separated "
+#| "list of init.d scripts for services to be restarted now, and correct it "
+#| "if needed."
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "PAM erabiltzen duten zerbitzu gehienak berrabiarazi egin behar dira libpam "
 "bertsio honetako moduluak erabiltzeko. Mesedez gainbegiratu berrabiaraziko "
@@ -234,3 +239,42 @@ msgstr ""
 "edop gelditu egin beharko zenituzke bertsio-berritzearekin jarraitu "
 "aurretik, sistemako erabiltzaileak beraien uneko saioan blokeatzea "
 "saihesteko."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
diff --git a/debian/po/fi.po b/debian/po/fi.po
index af797d73..a8a6ac21 100644
--- a/debian/po/fi.po
+++ b/debian/po/fi.po
@@ -3,7 +3,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam 0.99.7.1-4\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
 "PO-Revision-Date: 2010-10-18 22:46+0300\n"
 "Last-Translator: Esko Arajärvi <edu@iki.fi>\n"
 "Language-Team: Finnish <debian-l10n-finnish@lists.debian.org>\n"
@@ -25,11 +25,16 @@ msgstr "Palvelut, jotka käynnistetään uudelleen PAM-kirjastoa päivitettäess
 #. Type: string
 #. Description
 #: ../libpam0g.templates:1001
+#, fuzzy
+#| msgid ""
+#| "Most services that use PAM need to be restarted to use modules built for "
+#| "this new version of libpam.  Please review the following space-separated "
+#| "list of init.d scripts for services to be restarted now, and correct it "
+#| "if needed."
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "Useimmat PAMia käyttävät palvelut pitää käynnistää uudelleen libpamin uuden "
 "version käyttöön ottamiseksi. Tarkista seuraava välilyönnein eroteltu lista "
@@ -229,3 +234,42 @@ msgstr ""
 "yhteensopivuussyistä enää tunnistautua. Nämä ohjelmat tulisi pysäyttää tai "
 "käynnistää uudelleen ennen päivityksen jatkamista, jotta käyttäjät eivät "
 "lukitse itseään ulos nykyisistä istunnoistaan."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
diff --git a/debian/po/fr.po b/debian/po/fr.po
index dc9a92a7..5c3c90fe 100644
--- a/debian/po/fr.po
+++ b/debian/po/fr.po
@@ -3,22 +3,25 @@
 # Copyright (C) 2009, 2001 Jean-Baka Domelevo Entfellner <domelevo@gmail.com>
 # This file is distributed under the same license as the pam package.
 # Translators:
-# Cyril Brulebois <cyril.brulebois@enst-bretagne.fr>, 2007
-# Jean-Baka Domelevo Entfellner <domelevo@gmail.com>, 2009, 2011
 #
+# Cyril Brulebois <cyril.brulebois@enst-bretagne.fr>, 2007.
+# Jean-Baka Domelevo Entfellner <domelevo@gmail.com>, 2009, 2011.
+# Jean-Pierre Giraud <jean-pierregiraud@neuf.fr>, 2021.
 msgid ""
 msgstr ""
 "Project-Id-Version: pam 1.1.3-6\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
-"PO-Revision-Date: 2011-11-11 20:19+0100\n"
-"Last-Translator: Jean-Baka Domelevo Entfellner <domelevo@gmail.com>\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
+"PO-Revision-Date: 2021-03-03 09:58+0100\n"
+"Last-Translator: Jean-Pierre Giraud <jean-pierregiraud@neuf.fr>\n"
 "Language-Team: French <debian-l10n-french@lists.debian.org>\n"
 "Language: fr\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "X-Poedit-Country: FRANCE\n"
+"Plural-Forms: nplurals=2; plural=(n > 1);\n"
+"X-Generator: Lokalize 2.0\n"
 
 #. Type: string
 #. Description
@@ -33,13 +36,12 @@ msgstr ""
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "La plupart des services utilisant PAM doivent être redémarrés pour utiliser "
 "les modules compilés pour cette nouvelle version de libpam. Veuillez "
-"vérifier la liste suivante de scripts de démarrage à relancer maintenant, et "
-"la corriger si nécessaire."
+"vérifier la liste suivante de services, séparés par des espaces, à relancer "
+"maintenant, et la corriger si nécessaire."
 
 #. Type: error
 #. Description
@@ -92,7 +94,8 @@ msgstr ""
 #. Description
 #: ../libpam0g.templates:4001
 msgid "Restart services during package upgrades without asking?"
-msgstr "Redémarrer les services automatiquement lors des mises à jour ?"
+msgstr ""
+"Faut-il redémarrer les services automatiquement lors des mises à niveau ?"
 
 #. Type: boolean
 #. Description
@@ -106,14 +109,14 @@ msgid ""
 "necessary restarts will be done for you automatically so you can avoid being "
 "asked questions on each library upgrade."
 msgstr ""
-"Certains services installés sur le système demandent à être redémarrés "
-"lors de la mise à jour de certaines bibliothèques (par exemple libpam, libc "
-"ou encore libssl). Puisque de tels redémarrages peuvent causer des "
+"Certains services installés sur le système demandent à être redémarrés lors "
+"de la mise à niveau de certaines bibliothèques (par exemple libpam, libc ou "
+"encore libssl). Puisque de tels redémarrages peuvent causer des "
 "interruptions de service, une confirmation est habituellement demandée lors "
-"de chaque mise à jour, en présentant la liste des services à redémarrer. "
+"de chaque mise à niveau, en présentant la liste des services à redémarrer. "
 "Vous pouvez sélectionner cette option pour éviter ces demandes interactives "
 "de confirmation. Tous les redémarrages nécessaires seront alors effectués "
-"automatiquement lors de chaque mise à jour de bibliothèque."
+"automatiquement lors de chaque mise à niveau de bibliothèque."
 
 #. Type: title
 #. Description
@@ -149,9 +152,10 @@ msgid ""
 "adjust the behavior of all PAM-using applications on the system.  Please "
 "indicate which of these behaviors you wish to enable."
 msgstr ""
-"Certains paquets de modules PAM fournissent des profils qui peuvent "
-"être utilisés pour ajuster automatiquement le comportement de toutes les "
-"applications utilisant PAM qui sont présentes sur le système."
+"Certains paquets de modules PAM fournissent des profils qui peuvent être "
+"utilisés pour ajuster automatiquement le comportement de toutes les "
+"applications utilisant PAM qui sont présentes sur le système. Veuillez "
+"indiquer lequel de ces comportements vous voulez autoriser."
 
 #. Type: error
 #. Description
@@ -177,7 +181,7 @@ msgstr "Veuillez choisir un autre jeu de modules à activer."
 #. Description
 #: ../libpam-runtime.templates:4001
 msgid "Override local changes to /etc/pam.d/common-*?"
-msgstr "Écraser les modifications locales sur /etc/pam.d/common-* ?"
+msgstr "Faut-il écraser les modifications locales sur /etc/pam.d/common-* ?"
 
 #. Type: boolean
 #. Description
@@ -189,11 +193,11 @@ msgid ""
 "decline this option, you will need to manage your system's authentication "
 "configuration by hand."
 msgstr ""
-"Au moins un des fichiers /etc/pam.d/common-{auth,account,password,session} "
-"a été modifié localement. Veuillez indiquer s'il faut abandonner ces "
+"Au moins un des fichiers /etc/pam.d/common-{auth,account,password,session} a "
+"été modifié localement. Veuillez indiquer s'il faut abandonner ces "
 "changements locaux et revenir à la configuration standard du système. Dans "
-"le cas contraire, vous devrez configurer vous-même le système "
-"d'authentification."
+"le cas contraire, vous devrez configurer vous-même l'authentification dans "
+"le système."
 
 #. Type: error
 #. Description
@@ -232,9 +236,59 @@ msgid ""
 "stopped before continuing this upgrade, to avoid locking your users out of "
 "their current sessions."
 msgstr ""
-"Une ou plusieurs instances de xscreensaver et/ou de xlockmore ont été "
-"détectées sur le système. À cause de la modification de certaines "
-"bibliothèques, la mise à niveau du paquet libpam-modules entrainera "
-"l'impossibilité de s'authentifier. Avant de poursuivre la mise à niveau, ces "
-"programmes doivent être redémarrés ou arrêtés pour éviter que des "
-"utilisateurs ne puissent plus accéder à leur session."
+"Une ou plusieurs instances de xscreensaver ou de xlockmore ont été détectées "
+"sur le système. À cause de la modification de certaines bibliothèques, la "
+"mise à niveau du paquet libpam-modules entraînera l'impossibilité de "
+"s'authentifier. Avant de poursuivre la mise à niveau, vous devrez planifier "
+"le redémarrage ou l'arrêt de ces programmes pour éviter que des utilisateurs "
+"ne puissent plus accéder à leur session."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr "Les profils PAM avec des modules obsolètes sont désactivés."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+"Le système comportait des profils PAM activés avec les modules PAM "
+"${modules}. Ces modules ont été retirés de PAM. Laisser ces profils PAM "
+"activés pourrait empêcher l'accès d'utilisateurs au système. En conséquence, "
+"ces profils ont été désactivés."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr "Vous utilisez pam_tally ou pam_tally2 dans votre configuration."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+"Les modules pam_tally et pam_tally2 ont été retirés de PAM. Vous utilisez un "
+"de ces modules dans le fichier de configuration de PAM dans /etc/pam.d. Vous "
+"devez supprimer l'usage de ces modules avant que PAM puissent être mis à "
+"niveau. L'inclusion de ces modules dans la configuration de PAM après la "
+"mise à niveau empêchera certains utilisateurs de se connecter au système."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
+"Vous devriez envisager d'utiliser le module pam_faillock comme alternative à "
+"pam_tally."
diff --git a/debian/po/gl.po b/debian/po/gl.po
index c397ce2b..7a4e609b 100644
--- a/debian/po/gl.po
+++ b/debian/po/gl.po
@@ -9,7 +9,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam_1.1.1-3_gl\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
 "PO-Revision-Date: 2011-03-29 13:01-0700\n"
 "Last-Translator: Jorge Barreiro <yortx.barry@gmail.com>\n"
 "Language-Team: Galician <proxecto@trasno.net>\n"
@@ -29,11 +29,16 @@ msgstr "Servizos a reiniciar para a actualización da biblioteca PAM:"
 #. Type: string
 #. Description
 #: ../libpam0g.templates:1001
+#, fuzzy
+#| msgid ""
+#| "Most services that use PAM need to be restarted to use modules built for "
+#| "this new version of libpam.  Please review the following space-separated "
+#| "list of init.d scripts for services to be restarted now, and correct it "
+#| "if needed."
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "A maioría dos servizos que empregan PAM deben reiniciarse para empregar os "
 "módulos compilados para esta versión de libpam. Revise a seguinte lista de "
@@ -223,3 +228,42 @@ msgstr ""
 "quen de autenticarse nestes programas. Deber reiniciar ou deter estes "
 "programas antes de continuar coa actualización, para evitar deixar trancados "
 "os usuarios fora das súas sesións de traballo actuais."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
diff --git a/debian/po/it.po b/debian/po/it.po
index f13a59a1..1f2e3ee6 100644
--- a/debian/po/it.po
+++ b/debian/po/it.po
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam 0.99.7.1-5\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
 "PO-Revision-Date: 2010-10-23 21:21+0200\n"
 "Last-Translator: Nicole B. <damn3dg1rl@gmail.com>\n"
 "Language-Team: Italiano <tp@lists.linux.it>\n"
@@ -28,11 +28,16 @@ msgstr "Servizi da riavviare per l'aggiornamento della libreria PAM:"
 #. Type: string
 #. Description
 #: ../libpam0g.templates:1001
+#, fuzzy
+#| msgid ""
+#| "Most services that use PAM need to be restarted to use modules built for "
+#| "this new version of libpam.  Please review the following space-separated "
+#| "list of init.d scripts for services to be restarted now, and correct it "
+#| "if needed."
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "La maggior parte dei servizi che usano PAM hanno bisogno di essere riavviati "
 "per utilizzare i moduli compilati per questa nuova versione di libpam. "
@@ -227,3 +232,42 @@ msgstr ""
 "l'arresto di questi programmi prima di continuare con l'aggiornamento, al "
 "fine di evitare che gli utenti siano bloccati al di fuori delle proprie "
 "sessioni."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
diff --git a/debian/po/ja.po b/debian/po/ja.po
index de3439b9..a4b7de54 100644
--- a/debian/po/ja.po
+++ b/debian/po/ja.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam 1.3.6-1\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
 "PO-Revision-Date: 2012-01-22 10:47+0900\n"
 "Last-Translator: Kenshi Muto <kmuto@debian.org>\n"
 "Language-Team: Japanese <debian-japanese@lists.debian.org>\n"
@@ -25,11 +25,16 @@ msgstr "PAM ライブラリの更新のために再起動するサービス:"
 #. Type: string
 #. Description
 #: ../libpam0g.templates:1001
+#, fuzzy
+#| msgid ""
+#| "Most services that use PAM need to be restarted to use modules built for "
+#| "this new version of libpam.  Please review the following space-separated "
+#| "list of init.d scripts for services to be restarted now, and correct it "
+#| "if needed."
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "PAM を利用するほとんどのサービスは、この libpam の新しいバージョンでビルドさ"
 "れたモジュールを使うために再起動を必要とします。以下の、スペースで区切られた"
@@ -222,3 +227,42 @@ msgstr ""
 "プログラムでの認証ができなくなるという事態にあなたを追いやります。ユーザが現"
 "在のセッションの外に締め出されるのを避けるため、このパッケージの更新を継続す"
 "る前に、これらのプログラムを再起動するか停止するように手配すべきです。"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
diff --git a/debian/po/nl.po b/debian/po/nl.po
index fd96e244..b063463d 100644
--- a/debian/po/nl.po
+++ b/debian/po/nl.po
@@ -4,19 +4,22 @@
 # Bart Cornelis <cobaco@skolelinux.no>, 2007.
 # Eric Spreen <erispre@gmail.com>, 2010.
 # Jeroen Schot <schot@a-eskwadraat.nl>, 2011.
+# Frans Spiesschaert <Frans.Spiesschaert@yucom.be>, 2021.
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: pam 1.1.3-6\n"
+"Project-Id-Version: pam 1.4.0-6\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
-"PO-Revision-Date: 2011-11-25 16:33+0100\n"
-"Last-Translator: Jeroen Schot <schot@a-eskwadraat.nl>\n"
-"Language-Team: Debian l10n Dutch <debian-l10n-dutch@lists.debian.org>\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
+"PO-Revision-Date: 2021-02-26 22:27+0100\n"
+"Last-Translator: Frans Spiesschaert <Frans.Spiesschaert@yucom.be>\n"
+"Language-Team: Debian Dutch l10n Team <debian-l10n-dutch@lists.debian.org>\n"
 "Language: nl\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Poedit 2.2.1\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
 #. Type: string
 #. Description
@@ -30,13 +33,12 @@ msgstr "Bij de opwaardering van de PAM-bibliotheek te herstarten diensten:"
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "De meeste PAM-gebruikende diensten moeten herstart worden voor ze gebruik "
 "kunnen maken van modules die gebouwd zijn voor de nieuwe libpam-versie. De "
-"volgende, met spaties gescheiden, lijst van init.d scripts wordt herstart. "
-"Gelieve deze lijst te controleren en indien nodig aan te passen."
+"volgende, met spaties gescheiden, lijst van diensten wordt herstart. Gelieve "
+"deze lijst te controleren en indien nodig aan te passen."
 
 #. Type: error
 #. Description
@@ -172,7 +174,8 @@ msgstr "Selecteer een andere set modules om in te schakelen."
 #. Description
 #: ../libpam-runtime.templates:4001
 msgid "Override local changes to /etc/pam.d/common-*?"
-msgstr "Wilt u de locale veranderingen aan /etc/pam.d/common-* overschrijven?"
+msgstr ""
+"Wilt u de lokale veranderingen aan /etc/pam.d/common-* laten overschrijven?"
 
 #. Type: boolean
 #. Description
@@ -187,8 +190,8 @@ msgstr ""
 "Een of meer van de bestanden /etc/pam.d/common-{auth,account,password,"
 "session} zijn lokaal aangepast. Geef aan of deze lokale veranderingen moeten "
 "worden overschreven, door de door het systeem geleverde configuratie te "
-"gebruiken. Als u dit weigert, zult u de configuratie van de authenticatie "
-"van uw systeem met de hand moeten onderhouden."
+"gebruiken. Als u dit afwijst, zult u de configuratie van de authenticatie op "
+"uw systeem met de hand moeten onderhouden."
 
 #. Type: error
 #. Description
@@ -233,3 +236,51 @@ msgstr ""
 "ervoor te zorgen dat deze programma's worden herstart of gestopt voordat u "
 "verder gaat met deze upgrade, om te voorkomen dat gebruikers worden "
 "uitgesloten van hun huidige sessies."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr "PAM-profielen met achterhaalde modules uitgeschakeld"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+"Op uw systeem waren PAM-profielen ingeschakeld met de PAM-modules "
+"${modules}. Deze modules zijn verwijderd uit PAM. Deze PAM-profielen "
+"ingeschakeld laten zou gebruikers de toegang tot uw systeem beletten. Daarom "
+"zijn deze profielen uitgeschakeld."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr "u gebruikt in uw configuratie pam_tally of pam_tally2"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+"De modules pam_tally en pam_tally2 zijn verwijderd uit PAM. U gebruikt één "
+"van deze modules in uw PAM-configuratie in /etc/pam.d. U moet het gebruik "
+"van deze modules verwijderen voordat PAM opgewaardeerd kan worden; het "
+"opnemen van deze modules in uw PAM-configuratie na de opwaardering zal "
+"ervoor zorgen dat gebruikers zich niet meer kunnen aanmelden op het systeem."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr "Beschouw de module pam_faillock als een vervanging voor pam_tally."
diff --git a/debian/po/pl.po b/debian/po/pl.po
index 00cbdae5..c37b498c 100644
--- a/debian/po/pl.po
+++ b/debian/po/pl.po
@@ -6,7 +6,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: \n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
 "PO-Revision-Date: 2012-01-26 12:07+0100\n"
 "Last-Translator: Michał Kułach <michal.kulach@gmail.com>\n"
 "Language-Team: Polish <debian-l10n-polish@lists.debian.org>\n"
@@ -28,11 +28,16 @@ msgstr ""
 #. Type: string
 #. Description
 #: ../libpam0g.templates:1001
+#, fuzzy
+#| msgid ""
+#| "Most services that use PAM need to be restarted to use modules built for "
+#| "this new version of libpam.  Please review the following space-separated "
+#| "list of init.d scripts for services to be restarted now, and correct it "
+#| "if needed."
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "Większość usług używających PAM musi być zrestartowana, aby używać modułów "
 "zbudowanych do tej nowej wersji libpam. Proszę przeglądnąć poniższą listę "
@@ -229,3 +234,42 @@ msgstr ""
 "libpam-modules uniemożliwiła by autoryzację użytkownika do tych programów. "
 "Należy zrestartować lub zatrzymać te programy przed aktualizacją, aby "
 "zapobiec utknięciu użytkowników poza ich aktualnymi sesjami."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
diff --git a/debian/po/pt.po b/debian/po/pt.po
index 52211a5a..e324a069 100644
--- a/debian/po/pt.po
+++ b/debian/po/pt.po
@@ -3,14 +3,14 @@
 # This file is distributed under the same license as the pam package.
 #
 # Américo Monteiro <a_monteiro@netcabo.pt>, 2007, 2009.
-# Pedro Ribeiro <p.m42.ribeiro@gmail.com>, 2011.
+# Pedro Ribeiro <p.m42.ribeiro@gmail.com>, 2011, 2021.
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: pam 1.1.3-6\n"
+"Project-Id-Version: pam 1.4.0-6\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
-"PO-Revision-Date: 2011-12-17 18:46+0000\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
+"PO-Revision-Date: 2021-02-26 20:46+0000\n"
 "Last-Translator: Pedro Ribeiro <p.m42.ribeiro@gmail.com>\n"
 "Language-Team: Portuguese <traduz@debianpt.org>\n"
 "Language: pt\n"
@@ -31,13 +31,12 @@ msgstr "Serviços a reiniciar para a actualização da biblioteca PAM:"
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "A maioria dos serviços que usam PAM necessitam ser reiniciados para usarem "
 "os módulos construídos para esta nova versão do libpam. Por favor, reveja a "
-"seguinte lista de scripts init.d de serviços, separados por espaços, para "
-"serem reiniciados agora e corrija-a se for necessário."
+"seguinte lista de serviços, separados por espaços, a serem reiniciados agora "
+"e corrija-a se for necessário."
 
 #. Type: error
 #. Description
@@ -233,3 +232,51 @@ msgstr ""
 "nestes programas. Você deve fazer com que estes programas sejam reiniciados "
 "ou parados antes de continuar com esta actualização, para evitar trancar os "
 "seus utilizadores fora das suas sessões actuais."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr "Perfis PAM com Módulos Deprecados Desativados"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+"O seu sistema tem perfis PAM activos com os módulos PAM ${modules}. Estes "
+"módulos foram removidos do PAM. Deixar estes perfis activos iria impedir os "
+"utilizadores de aceder ao seu sistema. Deste modo, estes perfis foram "
+"desactivados."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr "está a usar pam_tally ou pam_tally2 na sua configuração"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+"Os módulos pam_tally e pam_tally2 foram removidos do PAM. Está a usar um "
+"destes módulos na sua configuração de PAM em /etc/pam.d. Tem que remover as "
+"referências a estes módulos antes de actualizar o PAM; incluir estes módulos "
+"na sua configuração após a actualização do PAM irá impedir os utilizadores de "
+"fazer login no seu sistema."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr "Considere usar o módulo pam_faillock como substuituto do pam_tally."
diff --git a/debian/po/pt_BR.po b/debian/po/pt_BR.po
index d36ff2e5..de34e0ad 100644
--- a/debian/po/pt_BR.po
+++ b/debian/po/pt_BR.po
@@ -3,15 +3,15 @@
 # This file is distributed under the same license as the pam package.
 # Eder L. Marques <eder@edermarques.net>, 2007-2009.
 # Fernando Ike de Oliveira <fike@midstorm.org>, 2013.
-# Adriano Rafael Gomes <adrianorg@arg.eti.br>, 2009-2015.
+# Adriano Rafael Gomes <adrianorg@debian.org>, 2009-2021.
 #
 msgid ""
 msgstr ""
 "Project-Id-Version: pam\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
-"PO-Revision-Date: 2015-09-18 20:27-0300\n"
-"Last-Translator: Adriano Rafael Gomes <adrianorg@arg.eti.br>\n"
+"POT-Creation-Date: 2021-03-15 18:23-0400\n"
+"PO-Revision-Date: 2021-03-06 14:11-0300\n"
+"Last-Translator: Adriano Rafael Gomes <adrianorg@debian.org>\n"
 "Language-Team: Brazilian Portuguese <debian-l10n-portuguese@lists.debian."
 "org>\n"
 "Language: pt_BR\n"
@@ -31,13 +31,12 @@ msgstr "Serviços a serem reiniciados para atualização da biblioteca PAM:"
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "A maioria dos serviços que utilizam PAM precisam ser reiniciados para usar "
 "os módulos construídos para esta nova versão da libpam. Por favor, revise a "
-"seguinte lista separada por espaços de scripts init.d de serviços que serão "
-"reiniciados agora, e a corrija, se necessário."
+"seguinte lista de serviços que serão reiniciados agora, separados por "
+"espaços, e a corrija, se necessário."
 
 #. Type: error
 #. Description
@@ -234,3 +233,51 @@ msgstr ""
 "se autenticar nestes programas. Você deve providenciar que estes programas "
 "sejam reiniciados ou parados antes de continuar com esta atualização, para "
 "evitar bloquear seus usuários fora de suas sessões atuais."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr "Perfis PAM com módulos obsoletos desabilitados"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+"O seu sistema tinha perfis PAM habilitados com os módulos PAM ${modules}. "
+"Esses módulos foram removidos do PAM. Deixar esses perfis PAM habilitados "
+"impediria que os usuários acessassem o seu sistema. Como resultado, esses "
+"perfis foram desabilitados."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr "você está usando pam_tally ou pam_tally2 na sua configuração"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+"Os módulos pam_tally e pam_tally2 foram removidos do PAM. Você está usando "
+"um desses módulos na sua configuração do PAM em /etc/pam.d. Você deve "
+"remover o uso desses módulos antes que o PAM possa ser atualizado. Incluir "
+"esses módulos na sua configuração do PAM depois da atualização impedirá que "
+"os usuários consigam logar no sistema."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr "Considere o módulo pam_faillock como um substituto para o pam_tally."
diff --git a/debian/po/ro.po b/debian/po/ro.po
index edbede44..23e6f3c5 100644
--- a/debian/po/ro.po
+++ b/debian/po/ro.po
@@ -9,7 +9,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam 1.0.1-7\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
 "PO-Revision-Date: 2011-03-29 13:01-0700\n"
 "Last-Translator: Eddy Petrișor <eddy.petrisor@gmail.com>\n"
 "Language-Team: Romanian <debian-l10n-romanian@lists.debian.org>\n"
@@ -30,11 +30,16 @@ msgstr "Serviciile repornite la actualizarea bibliotecii PAM:"
 #. Type: string
 #. Description
 #: ../libpam0g.templates:1001
+#, fuzzy
+#| msgid ""
+#| "Most services that use PAM need to be restarted to use modules built for "
+#| "this new version of libpam.  Please review the following space-separated "
+#| "list of init.d scripts for services to be restarted now, and correct it "
+#| "if needed."
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "Majoritatea serviciilor ce folosesc PAM trebuie repornite pentru a folosi "
 "modulele pentru noua versiune de libpam. Următoarea listă folosește ca "
@@ -225,3 +230,42 @@ msgstr ""
 "în aceste programe. Va trebui să aranjați lucrurile în așa fel încât aceste "
 "programe să fie repornite sau oprite înainte de a continua înnoirea pentru a "
 "evita blocarea utilizatorilor în afara sesiunilor lor curente."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
diff --git a/debian/po/ru.po b/debian/po/ru.po
index b9b755e4..8274b4e5 100644
--- a/debian/po/ru.po
+++ b/debian/po/ru.po
@@ -5,21 +5,23 @@
 # Yuri Kozlov <kozlov.y@gmail.com>, 2007.
 # Max Kosmach <max@tcen.ru>, 2009.
 # Yuri Kozlov <yuray@komyakino.ru>, 2009, 2011.
+# Алексей Шилин <shilin.aleksej@gmail.com>, 2021.
+#
 msgid ""
 msgstr ""
-"Project-Id-Version: pam 1.1.3-6\n"
+"Project-Id-Version: pam 1.4.0-6\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
-"PO-Revision-Date: 2011-12-04 09:00+0400\n"
-"Last-Translator: Yuri Kozlov <yuray@komyakino.ru>\n"
-"Language-Team: Russian <debian-l10n-russian@lists.debian.org>\n"
+"POT-Creation-Date: 2021-03-15 18:23-0400\n"
+"PO-Revision-Date: 2021-03-07 19:17+0300\n"
+"Last-Translator: Алексей Шилин <shilin.aleksej@gmail.com>\n"
+"Language-Team: русский <debian-l10n-russian@lists.debian.org>\n"
 "Language: ru\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"X-Generator: Lokalize 1.0\n"
-"Plural-Forms:  nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
-"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
+"X-Generator: Gtranslator 3.30.1\n"
+"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
+"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2)\n"
 
 #. Type: string
 #. Description
@@ -33,13 +35,12 @@ msgstr "Службы, которые будут перезапущены пос�
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
-"Чтобы задействовать новые версии модулей из libpam нужно перезапустить "
-"большинство служб, использующих PAM. Внимательно просмотрите и, при "
-"необходимости, отредактируйте список сценариев из init.d для служб, которые "
-"будут перезапущены. Элементы списка разделяются пробелом."
+"Чтобы задействовать новые версии модулей из libpam, нужно перезапустить "
+"большинство служб, использующих PAM. Внимательно просмотрите и при "
+"необходимости отредактируйте следующий список служб, которые будут "
+"перезапущены. Элементы списка разделяются пробелом."
 
 #. Type: error
 #. Description
@@ -58,7 +59,7 @@ msgid ""
 msgstr ""
 "Для работы с новой версией libpam программам для входа в систему wdm и xdm "
 "требуется перезапуск, но это прервёт все запущенные X-сеансы. Поэтому вам "
-"нужно перезапустить эти службы вручную для того, чтобы можно было снова "
+"нужно перезапустить эти службы вручную, для того чтобы можно было снова "
 "входить в систему через X."
 
 #. Type: error
@@ -81,13 +82,13 @@ msgstr ""
 msgid ""
 "You will need to start these manually by running '/etc/init.d/<service> "
 "start'."
-msgstr "Вам нужно запустить их вручную, выполнив '/etc/init.d/<служба> start'."
+msgstr "Вам нужно запустить их вручную, выполнив «/etc/init.d/<служба> start»."
 
 #. Type: boolean
 #. Description
 #: ../libpam0g.templates:4001
 msgid "Restart services during package upgrades without asking?"
-msgstr "Перезапускать службы при обновлении пакета не задавая вопрос?"
+msgstr "Перезапускать службы при обновлении пакета, не задавая вопросов?"
 
 #. Type: boolean
 #. Description
@@ -102,11 +103,11 @@ msgid ""
 "asked questions on each library upgrade."
 msgstr ""
 "В системе установлены службы, которые требуют перезапуска после обновления "
-"определённых библиотек (например, libpam, libc и libssl). Так как это может "
-"вызвать перерыв в работе службы, обычно, при каждом обновлении выдаётся "
-"список служб, которые нужно перезапустить. Чтобы этот вопрос не задавался, "
-"вы можете ответить утвердительно; в этом случае все необходимые службы будут "
-"перезапущены автоматически."
+"определённых библиотек (например, libpam, libc и libssl). Поскольку это "
+"может вызвать перерыв в работе служб, то обычно при каждом обновлении вам "
+"будет предложено указать список служб, которые вы хотите перезапустить. "
+"Чтобы этот вопрос не задавался, вы можете ответить утвердительно; в этом "
+"случае все необходимые службы будут перезапущены автоматически."
 
 #. Type: title
 #. Description
@@ -129,10 +130,10 @@ msgid ""
 "allowing configuration of additional actions to take when starting user "
 "sessions."
 msgstr ""
-"Через подключаемые модули аутентификации (PAM) указывается как нужно "
+"Через подключаемые модули аутентификации (PAM) указывается, как нужно "
 "проводить аутентификацию, авторизацию и смену пароля в системе, а также "
-"можно назначать запуск дополнительных действий при старте пользовательского "
-"сеанса."
+"можно назначать запуск дополнительных действий при старте пользовательских "
+"сеансов."
 
 #. Type: multiselect
 #. Description
@@ -182,10 +183,10 @@ msgid ""
 "decline this option, you will need to manage your system's authentication "
 "configuration by hand."
 msgstr ""
-"Один или более файлов в /etc/pam.d/common-{auth,account,password,session} "
-"был изменён вручную. Заметьте, что данные локальные изменения должны быть "
-"переопределены через системные настройки. Если вы ответите отрицательно, то "
-"вам придётся управлять настройками аутентификации системы вручную."
+"Один или более из файлов /etc/pam.d/common-{auth,account,password,session} "
+"был изменён вручную. Укажите, следует ли заменить эти локальные правки "
+"конфигурацией, предоставленной системой. Если вы ответите отрицательно, то "
+"вам придётся управлять настройками аутентификации вашей системы вручную."
 
 #. Type: error
 #. Description
@@ -201,9 +202,10 @@ msgid ""
 "all users access without authenticating, and is not allowed.  Please select "
 "at least one PAM profile from the available list."
 msgstr ""
-"В системе для работы не выбрано ни одного профиля PAM. Это предоставит "
-"полный доступ всем пользователям без аутентификации, что нежелательно. "
-"Выберите, по крайней мере, один профиль PAM из доступных."
+"Для использования в системе не выбрано ни одного профиля PAM. Это "
+"предоставило бы полный доступ всем пользователям без аутентификации, что "
+"запрещено. Пожалуйста, выберите по крайней мере один профиль PAM из "
+"доступных."
 
 #. Type: error
 #. Description
@@ -223,8 +225,54 @@ msgid ""
 "their current sessions."
 msgstr ""
 "Обнаружено, что в системе запущен один или несколько процессов xscreensaver "
-"или xlockmore. Из-за изменений в библиотеке, обновление пакета libpam-"
-"modules приведёт к невозможности выполнения аутентификации из этих программ. "
-"Перед тем как продолжить обновление вам нужно перезапустить или остановить "
-"работу этих программ, чтобы избежать блокировки пользователей в их активных "
-"сеансах."
+"или xlockmore. Из-за изменений в библиотеке обновление пакета libpam-modules "
+"приведёт к невозможности выполнения аутентификации в этих программах. Перед "
+"тем как продолжить обновление, вам нужно перезапустить или остановить работу "
+"этих программ, чтобы избежать блокировки пользователей в их активных сеансах."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr "Профили PAM с устаревшими модулями отключены"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+"В вашей системе были включены профили PAM с модулями ${modules}. Эти модули "
+"были удалены из PAM. Если оставить данные профили включёнными, то "
+"пользователи не смогут получить доступ к системе. По этой причине данные "
+"профили были отключены."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr "В вашей конфигурации используется pam_tally или pam_tally2"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+"Модули pam_tally и pam_tally2 были удалены из PAM, однако в ваших настройках "
+"PAM в /etc/pam.d используется один из этих модулей. Перед обновлением PAM "
+"необходимо удалить использование данных модулей; включение этих модулей в "
+"конфигурацию PAM после обновления не позволит пользователям войти в систему."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr "Рассмотрите модуль pam_faillock как замену pam_tally."
diff --git a/debian/po/sk.po b/debian/po/sk.po
index 662ac9ad..5a9bf0bb 100644
--- a/debian/po/sk.po
+++ b/debian/po/sk.po
@@ -6,14 +6,15 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
-"PO-Revision-Date: 2012-01-19 22:37+0100\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
+"PO-Revision-Date: 2021-03-09 11:35+0100\n"
 "Last-Translator: Ivan Masár <helix84@centrum.sk>\n"
 "Language-Team: Slovak <sk-i18n@lists.linux.sk>\n"
 "Language: sk\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Poedit 2.4.1\n"
 
 #. Type: string
 #. Description
@@ -27,13 +28,12 @@ msgstr "Pri aktualizácii knižnice PAM reštartovať nasledovné služby:"
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
-"Väčšinu služieb využívajúcich PAM je potrebné reštartovať, aby začali "
-"používať moduly zostavené pre túto novú verziu libpam. Prosím, skontrolujte "
-"nasledovný zoznam init.d skriptov (oddelené čiarkami), ktoré sa majú teraz "
-"reštartovať a ak je to potrebné, opravte ho."
+"Väčšinu služieb, ktoré používajú PAM, je nutné reštartovať, aby sa použili "
+"moduly vytvorené pre túto novú verziu libpamu.  Skontrolujte prosím "
+"nasledujúci zoznam služieb oddelených medzerou, ktoré sa teraz reštartujú. V "
+"prípade potreby ho opravte."
 
 #. Type: error
 #. Description
@@ -114,7 +114,7 @@ msgstr "Konfigurácia PAM"
 #. Description
 #: ../libpam-runtime.templates:2001
 msgid "PAM profiles to enable:"
-msgstr "Zapnúř nasledovné profily PAM:"
+msgstr "Zapnúť nasledovné profily PAM:"
 
 #. Type: multiselect
 #. Description
@@ -177,11 +177,10 @@ msgid ""
 "decline this option, you will need to manage your system's authentication "
 "configuration by hand."
 msgstr ""
-"Jeden alebo viac zo súborov /etc/pam.d/common-{auth,account,password,"
-"session} bolo na lokálnom systéme zmenených. Uveďte prosím, či sa majú tieto "
+"Jeden alebo viacero zo súborov /etc/pam.d/common-{auth,account,password,"
+"session} bolo na lokálnom systéme zmenených. Zvoľte prosím, či sa majú tieto "
 "lokálne zmeny prepísať štandardnými konfiguračnými voľbami. Ak túto možnosť "
-"zamietnete, budete musieť spravovať nastavenia autentifikácie tohto systému "
-"ručne."
+"zamietnete, budete musieť nastaviť autentifikácie tohto systému ručne."
 
 #. Type: error
 #. Description
@@ -205,7 +204,7 @@ msgstr ""
 #. Description
 #: ../libpam-modules.templates:1001
 msgid "xscreensaver and xlockmore must be restarted before upgrading"
-msgstr "Pred aktualizáciou je potrebné reštartovať xscreensaver a xlockmore"
+msgstr "je nutné reštartovať xscreensaver a xlockmore pred aktualizáciou"
 
 #. Type: error
 #. Description
@@ -220,8 +219,55 @@ msgid ""
 msgstr ""
 "Na tomto systéme bola zistená jedna alebo viacero bežiacich inštancií "
 "programov xscreensaver alebo xlockmore. Z dôvodu nekomaptibilných zmien v "
-"knižniciach balíka libpam-modules by ste po aktualizácii neboli schopní "
-"overiť sa týmto programom. Mali by ste zariadiť, aby sa tieto programy "
+"knižniciach balíka libpam-modules nebudete schopní po aktualizácii overiť "
+"identitu týmto programom. Mali by ste zariadiť, aby sa tieto programy "
 "reštartovali alebo zastavili predtým, než budete v tejto aktualizácii "
 "pokračovať, aby ste predišli tomu, že používatelia sa nebudú môcť prihlásiť "
 "zo svojich súčasných relácií."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr "Profily PAM s vypnutými zastaranými modulmi"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+"Váš systém mal povolené PAM profily s modulmi ${modules}. Tieto moduly boli "
+"odstránené z PAM. Ponechanie týchto PAM profilov by zabránilo používateľom v "
+"prístupe k vášmu systému. V dôsledku toho boli tieto profily vypnuté."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr "používate pam_tally alebo pam_tally2 vo vašej konfigurácii"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+"Moduly pam_tally a pam_tally2 boli z PAM odstránené. Používate jeden z "
+"týchto modulov v konfigurácii PAM v /etc/pam.d. Pred aktualizáciou PAM "
+"musíte odstrániť použitie týchto modulov. Zahrnutie týchto modulov do "
+"konfigurácie PAM by po aktualizácii znemožnilo používateľom prihlásiť sa do "
+"systému."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr "Zvážte pam_faillock modul ako náhradu za pam_tally."
diff --git a/debian/po/sv.po b/debian/po/sv.po
index f56344ee..c826ba32 100644
--- a/debian/po/sv.po
+++ b/debian/po/sv.po
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam 0.99.7.1-5\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
 "PO-Revision-Date: 2014-04-08 11:37+0200\n"
 "Last-Translator: Martin Bagge / brother <brother@bsnet.se>\n"
 "Language-Team: Swedish <debian-l10n-swedish@lists.debian.org>\n"
@@ -28,11 +28,16 @@ msgstr "Tjänster att starta om efter uppgradering av PAM-biblioteket:"
 #. Type: string
 #. Description
 #: ../libpam0g.templates:1001
+#, fuzzy
+#| msgid ""
+#| "Most services that use PAM need to be restarted to use modules built for "
+#| "this new version of libpam.  Please review the following space-separated "
+#| "list of init.d scripts for services to be restarted now, and correct it "
+#| "if needed."
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "De flesta tjänster som använder PAM behöver startas om för att använda "
 "moduler som byggts för denna nya libpam-version. Gå igenom följande lista av "
@@ -134,8 +139,7 @@ msgid ""
 msgstr ""
 "Pluggable Authentication Modules (PAM) hanterar hur autentisering, "
 "identifiering och byte av lösenord ska utföras på systemet. Dessutom "
-"hanteras särskilda åtgärder som ska vidtas vid uppstart av "
-"användarsessioner."
+"hanteras särskilda åtgärder som ska vidtas vid uppstart av användarsessioner."
 
 #. Type: multiselect
 #. Description
@@ -235,6 +239,45 @@ msgstr ""
 "före uppgraderingen, resultatet kan annars innebära att du inte kan komma åt "
 "dina aktiva sessioner på systemet."
 
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
+
 #~ msgid "Your system allowed access without a password!"
 #~ msgstr "Ditt system tillät anslutningar utan lösenord!"
 
diff --git a/debian/po/templates.pot b/debian/po/templates.pot
index 84a5fc37..6f5cf1eb 100644
--- a/debian/po/templates.pot
+++ b/debian/po/templates.pot
@@ -1,14 +1,14 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
-# This file is distributed under the same license as the PACKAGE package.
+# This file is distributed under the same license as the pam package.
 # FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
 #
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: PACKAGE VERSION\n"
+"Project-Id-Version: pam\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-03-15 18:23-0400\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -29,8 +29,7 @@ msgstr ""
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 
 #. Type: error
@@ -189,3 +188,42 @@ msgid ""
 "stopped before continuing this upgrade, to avoid locking your users out of "
 "their current sessions."
 msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
diff --git a/debian/po/tr.po b/debian/po/tr.po
index 960ce5e8..5d8eebf7 100644
--- a/debian/po/tr.po
+++ b/debian/po/tr.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam 0.99.7.1-5\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
 "PO-Revision-Date: 2014-08-01 14:42+0200\n"
 "Last-Translator: Mert Dirik <mertdirik@gmail.com>\n"
 "Language-Team: Debian L10n Turkish <debian-l10n-turkish@lists.debian.org>\n"
@@ -28,11 +28,16 @@ msgstr ""
 #. Type: string
 #. Description
 #: ../libpam0g.templates:1001
+#, fuzzy
+#| msgid ""
+#| "Most services that use PAM need to be restarted to use modules built for "
+#| "this new version of libpam.  Please review the following space-separated "
+#| "list of init.d scripts for services to be restarted now, and correct it "
+#| "if needed."
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "PAM kullanan çoğu hizmet, libpam'ın bu yeni sürümü için derlenmiş "
 "modüllerden yararlanabilmek için yeniden başlatılmak zorunda.  Lütfen "
@@ -48,11 +53,6 @@ msgstr "Görüntü yöneticisinin elle yeniden başlatılması gerekli"
 #. Type: error
 #. Description
 #: ../libpam0g.templates:2001
-#| msgid ""
-#| "The kdm, wdm, and xdm display managers require a restart for the new "
-#| "version of libpam, but there are X login sessions active on your system "
-#| "that would be terminated by this restart.  You will therefore need to "
-#| "restart these services by hand before further X logins will be possible."
 msgid ""
 "The wdm and xdm display managers require a restart for the new version of "
 "libpam, but there are X login sessions active on your system that would be "
@@ -240,3 +240,42 @@ msgstr ""
 "paketinin yükseltilmesi bu programlarda kimlik doğrulamasını olanaksız hale "
 "getirecek. Mevcut oturumların kilitlenmesi önlemek için, yükseltme işlemine "
 "devam etmeden önce bu programları durdurmalı ya da yeniden başlatmalısınız."
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
diff --git a/debian/po/vi.po b/debian/po/vi.po
index 868a8359..5746fe1e 100644
--- a/debian/po/vi.po
+++ b/debian/po/vi.po
@@ -6,7 +6,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam 1.1.1-6.1\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
 "PO-Revision-Date: 2010-10-24 20:46+1030\n"
 "Last-Translator: Clytie Siddall <clytie@riverland.net.au>\n"
 "Language-Team: Vietnamese <vi-VN@googlegroups.com>\n"
@@ -26,11 +26,16 @@ msgstr "Dịch vụ cần khởi chạy lại để nâng cấp thư viện PAM:
 #. Type: string
 #. Description
 #: ../libpam0g.templates:1001
+#, fuzzy
+#| msgid ""
+#| "Most services that use PAM need to be restarted to use modules built for "
+#| "this new version of libpam.  Please review the following space-separated "
+#| "list of init.d scripts for services to be restarted now, and correct it "
+#| "if needed."
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "Phần lớn dịch vụ sử dụng PAM thì cũng cần phải được khởi chạy lại để sử dụng "
 "những mô-đun được xây dựng cho phiên bản libpam mới này. Hãy xem lại danh "
@@ -227,6 +232,45 @@ msgstr ""
 "này trước khi tiếp tục tiến trình nâng cấp, để tránh chặn người dùng đăng "
 "nhập vào buổi hợp đang chạy."
 
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr ""
+
 #~ msgid "Your system allowed access without a password!"
 #~ msgstr "Hệ thống này cho phép truy cập mà không nhập mật khẩu !"
 
diff --git a/debian/po/zh_CN.po b/debian/po/zh_CN.po
index 23291f5e..d2b76da2 100644
--- a/debian/po/zh_CN.po
+++ b/debian/po/zh_CN.po
@@ -12,14 +12,15 @@ msgid ""
 msgstr ""
 "Project-Id-Version: pam\n"
 "Report-Msgid-Bugs-To: pam@packages.debian.org\n"
-"POT-Creation-Date: 2011-10-30 15:05-0400\n"
-"PO-Revision-Date: 2009-01-01 12:30+0800\n"
-"Last-Translator: Deng Xiyue <manphiz-guest@users.alioth.debian.org>\n"
+"POT-Creation-Date: 2021-02-26 10:32-0500\n"
+"PO-Revision-Date: 2021-02-26 21:04-0500\n"
+"Last-Translator: Boyuan Yang <byang@debian.org>\n"
 "Language-Team: Debian Chinese [GB] <debian-chinese-gb@lists.debian.org>\n"
-"Language: \n"
+"Language: zh_CN\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Poedit 2.4.2\n"
 
 #. Type: string
 #. Description
@@ -33,12 +34,11 @@ msgstr "因 PAM 库升级而需要重新启动的服务："
 msgid ""
 "Most services that use PAM need to be restarted to use modules built for "
 "this new version of libpam.  Please review the following space-separated "
-"list of init.d scripts for services to be restarted now, and correct it if "
-"needed."
+"list of  services to be restarted now, and correct it if needed."
 msgstr ""
 "为了使用基于这个新版本 libpam 编译的模块，绝大部分使用 PAM 的服务都需要被重新"
-"启动。请复查下面这个需要重新启动的服务所对应的 init.d script 列表，script 名"
-"称之间以半角空格分隔。如列表有误，请直接更正。"
+"启动。请复查下面这个需要重新启动的服务所对应的列表，script 名称之间以半角空格"
+"分隔。如列表有误，请直接更正。"
 
 #. Type: error
 #. Description
@@ -49,22 +49,15 @@ msgstr "必须手动重新启动显示管理器"
 #. Type: error
 #. Description
 #: ../libpam0g.templates:2001
-#, fuzzy
-#| msgid ""
-#| "The kdm, wdm, and xdm display managers require a restart for the new "
-#| "version of libpam, but there are X login sessions active on your system "
-#| "that would be terminated by this restart.  You will therefore need to "
-#| "restart these services by hand before further X logins will be possible."
 msgid ""
 "The wdm and xdm display managers require a restart for the new version of "
 "libpam, but there are X login sessions active on your system that would be "
 "terminated by this restart.  You will therefore need to restart these "
 "services by hand before further X logins will be possible."
 msgstr ""
-"由于 lipam 更新到新版本，显示管理器 kdm、wdm 和 xdm 需要被重新启动。但是您的"
-"系统上有正在运行的 X 登录会话，而如果重新启动显示管理器服务，这些 X 会话就会"
-"被强行结束。因此，您需要手动重新启动这些服务，否则您将无法再登录进 X 窗口系"
-"统。"
+"由于 libpam 更新到新版本，wdm 和 xdm 等显示管理器需要被重新启动。但是您的系统"
+"上有正在运行的 X 登录会话，而如果重新启动显示管理器服务，这些 X 会话就会被强"
+"行结束。因此，您需要手动重新启动这些服务，否则您将无法再登录进 X 窗口系统。"
 
 #. Type: error
 #. Description
@@ -91,7 +84,7 @@ msgstr "您需要运行“/etc/init.d/<服务> start”来手动启动这些服�
 #. Description
 #: ../libpam0g.templates:4001
 msgid "Restart services during package upgrades without asking?"
-msgstr ""
+msgstr "是否在软件包升级过程中不经询问直接重新启动服务？"
 
 #. Type: boolean
 #. Description
@@ -105,18 +98,23 @@ msgid ""
 "necessary restarts will be done for you automatically so you can avoid being "
 "asked questions on each library upgrade."
 msgstr ""
+"您的系统上有一些正在运行的服务需要在特定的软件库（如 libpam、libc、libssl）的"
+"升级过程中重新启动。因为重新启动这些服务可能造成系统功能的中断，通常情况下您"
+"会在每次升级时收到决定是否重启服务的提醒。您也可以选择本选项以避免收到提醒；"
+"在此情况下，所有必需的服务重启均会自动进行，您也不会在各个库进行更新时收到询"
+"问。"
 
 #. Type: title
 #. Description
 #: ../libpam-runtime.templates:1001
 msgid "PAM configuration"
-msgstr ""
+msgstr "PAM 配置"
 
 #. Type: multiselect
 #. Description
 #: ../libpam-runtime.templates:2001
 msgid "PAM profiles to enable:"
-msgstr ""
+msgstr "要启用的 PAM 配置策略："
 
 #. Type: multiselect
 #. Description
@@ -127,6 +125,8 @@ msgid ""
 "allowing configuration of additional actions to take when starting user "
 "sessions."
 msgstr ""
+"可插入身份验证模块（PAM）决定系统上的身份验证、授权和密码更改应当如何进行，同"
+"时允许配置启动用户会话时要进行的额外操作。"
 
 #. Type: multiselect
 #. Description
@@ -136,12 +136,14 @@ msgid ""
 "adjust the behavior of all PAM-using applications on the system.  Please "
 "indicate which of these behaviors you wish to enable."
 msgstr ""
+"某些 PAM 模块软件包提供了配置策略（profile），可用来自动调整系统上所有使用 "
+"PAM 的应用程序的行为。请选择您希望启用其中的哪些行为。"
 
 #. Type: error
 #. Description
 #: ../libpam-runtime.templates:3001
 msgid "Incompatible PAM profiles selected."
-msgstr ""
+msgstr "选中了不兼容的 PAM 配置策略。"
 
 #. Type: error
 #. Description
@@ -149,19 +151,19 @@ msgstr ""
 #. PAM profile names.
 #: ../libpam-runtime.templates:3001
 msgid "The following PAM profiles cannot be used together:"
-msgstr ""
+msgstr "以下的 PAM 配置策略不能共同使用："
 
 #. Type: error
 #. Description
 #: ../libpam-runtime.templates:3001
 msgid "Please select a different set of modules to enable."
-msgstr ""
+msgstr "请选择另一组要启用的模块。"
 
 #. Type: boolean
 #. Description
 #: ../libpam-runtime.templates:4001
 msgid "Override local changes to /etc/pam.d/common-*?"
-msgstr ""
+msgstr "覆盖 /etc/pam.d/common-* 的本地修改吗？"
 
 #. Type: boolean
 #. Description
@@ -173,12 +175,15 @@ msgid ""
 "decline this option, you will need to manage your system's authentication "
 "configuration by hand."
 msgstr ""
+"在 /etc/pam.d/common-{auth,account,password,session} 中的一个或多个文件有本地"
+"的修改。请选择是否应当使用系统提供的配置覆盖这些本地修改。如果您拒绝本选项，"
+"您需要稍后手动管理您系统上的验证配置。"
 
 #. Type: error
 #. Description
 #: ../libpam-runtime.templates:5001
 msgid "No PAM profiles have been selected."
-msgstr ""
+msgstr "未选择任何 PAM 配置策略。"
 
 #. Type: error
 #. Description
@@ -188,6 +193,8 @@ msgid ""
 "all users access without authenticating, and is not allowed.  Please select "
 "at least one PAM profile from the available list."
 msgstr ""
+"未选中任何用于本系统的 PAM 配置策略。如果这样做会允许所有用户不经验证进行访"
+"问，而这种行为是不允许出现的。请从可用列表中选择至少一个 PAM 配置策略。"
 
 #. Type: error
 #. Description
@@ -209,3 +216,48 @@ msgstr ""
 "检测到一个或多个 xscreensaver 或 xlockmore 运行实例。因为不兼容的库的变化，"
 "libpam-module 软件包的升级将使您无法向这些程序认证。您需要在继续此升级前安排"
 "这些程序重新启动或者停止运行，以避免将您的用户锁在他们的当前会话之外。"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid "PAM Profiles with Deprecated Modules Disabled"
+msgstr "已禁用带有已弃用模块的 PAM 配置策略"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:2001
+msgid ""
+"Your system had PAM profiles enabled with the ${modules} PAM modules. These "
+"modules have been removed from PAM. Leaving these PAM profiles enabled would "
+"prevent users from accessing your system. As a result, these profiles have "
+"been disabled."
+msgstr ""
+"您的系统上存在带有 ${modules} PAM 模块的 PAM 配置策略。这些模块已从 PAM 中移"
+"除。如继续启用这些 PAM 配置策略则用户将无法经此方式验证并访问系统。因此，这些"
+"配置策略已被禁用。"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "you are using pam_tally or pam_tally2 in your configuration"
+msgstr "您的配置文件中正在使用 pam_tally 或 pam_tally2"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid ""
+"The pam_tally and pam_tally2 modules have been removed from PAM. You are "
+"using one of these modules in your PAM configuration in /etc/pam.d. You must "
+"remove the uses of these modules before PAM can be upgraded; including these "
+"modules in your PAM configuration after the upgrade will stop users from "
+"being able to log into the system."
+msgstr ""
+"请注意，pam_tally 和 pam_tally2 模块已从 PAM 中移除。您正在系统上 /etc/pam.d "
+"中的配置文件中使用其中某个模块。在 PAM 更新之前，您必须移除对这些模块的使用；"
+"在升级后依旧于 PAM 配置中使用这些模块将导致用户无法使用该方式登录系统。"
+
+#. Type: error
+#. Description
+#: ../libpam-modules.templates:3001
+msgid "Consider the pam_faillock module as a replacement for pam_tally."
+msgstr "请考虑使用 pam_faillock 模块作为 pam_tally 的替代。"
diff --git a/debian/rules b/debian/rules
index f8ad3c18..eae93f04 100755
--- a/debian/rules
+++ b/debian/rules
@@ -41,6 +41,19 @@ ifneq (,$(findstring libpam-modules, $(shell dh_listpackages)))
 	dh_install -plibpam-modules -Xpam_cracklib
 endif
 	dh_install -Nlibpam-modules
+	# Make sure the md5sums for the templates we ship are
+	# recognized by pam-auth-update.
+	for f in common-auth common-session common-session-noninteractive common-account common-password; do \
+	if grep -q $$(perl debian/template-md5sum debian/local/$$f ) debian/local/pam-auth-update; then \
+	    echo $$f okay; \
+	else \
+	    echo md5sum for $$f not registered in debian/local/pam-auth-update; \
+	    echo use debian/template-md5sum to compute; \
+	    exit 2; \
+	fi; \
+	done
+
+
 
 # again, excluding files by hand; also, build our local manpage for pam_getenv
 # from the XML
diff --git a/debian/template-md5sum b/debian/template-md5sum
new file mode 100755
index 00000000..e043a82b
--- /dev/null
+++ b/debian/template-md5sum
@@ -0,0 +1,51 @@
+#!/usr/bin/perl
+use IPC::Open2;
+
+
+	my($template) = @ARGV;
+	my $state = 0;
+
+	open(INPUT,$template) || return '';
+	my($md5sum_fd,$output_fd);
+	my $pid = open2($md5sum_fd, $output_fd, 'md5sum');
+	return '' if (!$pid);
+
+	while (<INPUT>) {
+		if ($state == 1) {
+			if (/^# here's the fallback if no module succeeds/) {
+				print $output_fd $_;
+				$state++;
+			}
+			next;
+		}
+		if ($state == 3) {
+			if (/^# end of pam-auth-update config/) {
+				print $output_fd $_;
+				$state++;
+			}
+			next;
+		}
+
+		print $output_fd $_;
+
+		my ($pattern,$val);
+		if ($state == 0) {
+			$pattern = '^# here are the per-package modules \(the "Primary" block\)';
+		} elsif ($state == 2) {
+			$pattern = '^# and here are more per-package modules \(the "Additional" block\)';
+		} else {
+			next;
+		}
+
+		if (/$pattern/) {
+			$state++;
+		}
+	}
+	close(INPUT);
+	close($output_fd);
+	my $md5sum = <$md5sum_fd>;
+	close($md5sum_fd);
+	waitpid $pid, 0;
+
+	$md5sum = (split(/\s+/,$md5sum))[0];
+	print $md5sum;