Release date:
2026-09-15 11:39:20 UTC
Description:
- CVE-2026-54411: pam_userdb: observable timing discrepancy in the
plaintext password comparison path allowed recovery of the stored
password's length and prefix bytes (CWE-208)
Updated packages:
-
pam-1.5.1-26.el9_6.tuxcare.els1.i686.rpm
sha:ec279790ecef7f196200ea49d5d06e271aaa0e2f9e8d466dae2b497207d3406e
-
pam-1.5.1-26.el9_6.tuxcare.els1.x86_64.rpm
sha:932099431f5918294e1781c1970bfcc1fe6932e9babebdac5e1f3490e0346821
-
pam-devel-1.5.1-26.el9_6.tuxcare.els1.i686.rpm
sha:6673d44b535759bbc68da7e7a4ed9f49a16f4454014cd45c81141e0a0f59264b
-
pam-devel-1.5.1-26.el9_6.tuxcare.els1.x86_64.rpm
sha:48c537f5381ff95b4a775c939a824580cd4e2d3718a6bdc11a21e2ee88126d3a
-
pam-docs-1.5.1-26.el9_6.tuxcare.els1.x86_64.rpm
sha:32b633c879d8e75e83ce69430b90ed8648248af2acfeb9dd9e4dc285636bee27
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
