Release date:
2026-09-09 16:34:36 UTC
Description:
- CVE-2026-54411: pam_userdb: observable timing discrepancy in the
plaintext password comparison path allowed recovery of the stored
password's length and prefix bytes (CWE-208)
Updated packages:
-
pam-1.5.1-14.el9.tuxcare.els6.i686.rpm
sha:2574f3cea365592c04641b70c95f45be1b8d046c96e2206d42501d04c4767f0c
-
pam-1.5.1-14.el9.tuxcare.els6.x86_64.rpm
sha:e65982611a5c418e4d626a81146bbad83fabf9fbb8cceb8d704455f4bef2603c
-
pam-devel-1.5.1-14.el9.tuxcare.els6.i686.rpm
sha:ef16baec4d9866d8c8d32b61ec926d1e59c6af6e7efd68226a7ae8585dbd20bd
-
pam-devel-1.5.1-14.el9.tuxcare.els6.x86_64.rpm
sha:6fb797dfd0a722492852aca49307c0fe87d15486bc8529093667314ebe7de10e
-
pam-docs-1.5.1-14.el9.tuxcare.els6.x86_64.rpm
sha:a9c36247cd37749d84c21f6bbde02c9c2402700026eaa6df5af596b8eeaed6b7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
