ELSA-2026-56131

ELSA-2026-56131 - pam security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-08-18

Description

[1.3.1-40.0.1]
- pam_limits: fix use after free in pam_sm_open_session [Orabug: 36272695]

[1.3.1-40]
- pam_userdb: fix password comparison timing leak.
Resolves: CVE-2026-54411 and RHEL-191699

Related CVEs

CVE-2026-54411

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	pam-1.3.1-40.0.1.el8_10.src.rpm	690d3222d27f727df1b494c0f7e6bacfe1aaf161c436a647b4ea507fb182a61d	-	ol8_aarch64_baseos_latest
	pam-1.3.1-40.0.1.el8_10.src.rpm	690d3222d27f727df1b494c0f7e6bacfe1aaf161c436a647b4ea507fb182a61d	-	ol8_aarch64_u10_baseos_patch
	pam-1.3.1-40.0.1.el8_10.aarch64.rpm	22799757f994dad677d01b3012542a1a7c0acd93ddeaac64db10337725beb54e	-	ol8_aarch64_baseos_latest
	pam-1.3.1-40.0.1.el8_10.aarch64.rpm	22799757f994dad677d01b3012542a1a7c0acd93ddeaac64db10337725beb54e	-	ol8_aarch64_u10_baseos_patch
	pam-devel-1.3.1-40.0.1.el8_10.aarch64.rpm	6ba7ef1e0cf497579c4048d6e111a5ea2e5ed8343e393fcb2a781418a8fdd672	-	ol8_aarch64_baseos_latest
	pam-devel-1.3.1-40.0.1.el8_10.aarch64.rpm	6ba7ef1e0cf497579c4048d6e111a5ea2e5ed8343e393fcb2a781418a8fdd672	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	pam-1.3.1-40.0.1.el8_10.src.rpm	690d3222d27f727df1b494c0f7e6bacfe1aaf161c436a647b4ea507fb182a61d	-	ol8_x86_64_baseos_latest
	pam-1.3.1-40.0.1.el8_10.src.rpm	690d3222d27f727df1b494c0f7e6bacfe1aaf161c436a647b4ea507fb182a61d	-	ol8_x86_64_u10_baseos_patch
	pam-1.3.1-40.0.1.el8_10.i686.rpm	5676d7d3ae0f9995c44334d824dee953c9dfdd9a8359d48cb2d6493e706a2cfd	-	ol8_x86_64_baseos_latest
	pam-1.3.1-40.0.1.el8_10.i686.rpm	5676d7d3ae0f9995c44334d824dee953c9dfdd9a8359d48cb2d6493e706a2cfd	-	ol8_x86_64_u10_baseos_patch
	pam-1.3.1-40.0.1.el8_10.x86_64.rpm	384bb073f8afb265c1d4a07400d97f4acc38ad051a76ddc15ac847276f46f493	-	ol8_x86_64_baseos_latest
	pam-1.3.1-40.0.1.el8_10.x86_64.rpm	384bb073f8afb265c1d4a07400d97f4acc38ad051a76ddc15ac847276f46f493	-	ol8_x86_64_u10_baseos_patch
	pam-devel-1.3.1-40.0.1.el8_10.i686.rpm	7f10b5b79722e137da661df514127463d98ddde67aa0437da2d4639ae0d63cd2	-	ol8_x86_64_baseos_latest
	pam-devel-1.3.1-40.0.1.el8_10.i686.rpm	7f10b5b79722e137da661df514127463d98ddde67aa0437da2d4639ae0d63cd2	-	ol8_x86_64_u10_baseos_patch
	pam-devel-1.3.1-40.0.1.el8_10.x86_64.rpm	92b7d6315e74f765e59c9a8806511b22a7cf49b6180ef60fe26a434b27853b66	-	ol8_x86_64_baseos_latest
	pam-devel-1.3.1-40.0.1.el8_10.x86_64.rpm	92b7d6315e74f765e59c9a8806511b22a7cf49b6180ef60fe26a434b27853b66	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team