ELSA-2026-59379

ELSA-2026-59379 - pam security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-08-25

Description

[1.6.1-9.1]
- pam_userdb: fix password comparison timing leak.
Resolves: CVE-2026-54411 and RHEL-191704

Related CVEs

CVE-2026-54411

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	pam-1.6.1-9.el10_2.1.src.rpm	d63d9858fa7d9668b4234b27aca9abdfd264df99b5a52b7e2aa3c97f55f3135c	-	ol10_aarch64_appstream
	pam-1.6.1-9.el10_2.1.src.rpm	d63d9858fa7d9668b4234b27aca9abdfd264df99b5a52b7e2aa3c97f55f3135c	-	ol10_aarch64_baseos_latest
	pam-1.6.1-9.el10_2.1.src.rpm	d63d9858fa7d9668b4234b27aca9abdfd264df99b5a52b7e2aa3c97f55f3135c	-	ol10_aarch64_u2_baseos_patch
	pam-1.6.1-9.el10_2.1.aarch64.rpm	6c44c3f1d932e06da4e75191ac5c9380342d3d7c24b10bd025fbaba538d7cd80	-	ol10_aarch64_baseos_latest
	pam-1.6.1-9.el10_2.1.aarch64.rpm	6c44c3f1d932e06da4e75191ac5c9380342d3d7c24b10bd025fbaba538d7cd80	-	ol10_aarch64_u2_baseos_patch
	pam-devel-1.6.1-9.el10_2.1.aarch64.rpm	763bf346a1440f9f5b2ae484998a23074bb27f113369d8916663a518a61bfede	-	ol10_aarch64_appstream
	pam-libs-1.6.1-9.el10_2.1.aarch64.rpm	bc625a4d0ef03ebe5b8d4823a481985d5f6f0d5e0eace14072e6f47de43d5593	-	ol10_aarch64_baseos_latest
	pam-libs-1.6.1-9.el10_2.1.aarch64.rpm	bc625a4d0ef03ebe5b8d4823a481985d5f6f0d5e0eace14072e6f47de43d5593	-	ol10_aarch64_u2_baseos_patch
Oracle Linux 10 (x86_64)	pam-1.6.1-9.el10_2.1.src.rpm	d63d9858fa7d9668b4234b27aca9abdfd264df99b5a52b7e2aa3c97f55f3135c	-	ol10_x86_64_appstream
	pam-1.6.1-9.el10_2.1.src.rpm	d63d9858fa7d9668b4234b27aca9abdfd264df99b5a52b7e2aa3c97f55f3135c	-	ol10_x86_64_baseos_latest
	pam-1.6.1-9.el10_2.1.src.rpm	d63d9858fa7d9668b4234b27aca9abdfd264df99b5a52b7e2aa3c97f55f3135c	-	ol10_x86_64_u2_baseos_patch
	pam-1.6.1-9.el10_2.1.x86_64.rpm	c19f129f5a5ee6212cf71bde3417121d97f11c89263b15fb5e07b9d20f2f2843	-	ol10_x86_64_baseos_latest
	pam-1.6.1-9.el10_2.1.x86_64.rpm	c19f129f5a5ee6212cf71bde3417121d97f11c89263b15fb5e07b9d20f2f2843	-	ol10_x86_64_u2_baseos_patch
	pam-devel-1.6.1-9.el10_2.1.x86_64.rpm	3d8177c7051c4047ad1b8d1590f0d2123e65a1aa909f0a99d7237baed32a0038	-	ol10_x86_64_appstream
	pam-libs-1.6.1-9.el10_2.1.x86_64.rpm	88113bcff425e5e76b2c5510161a2f6c4b2891a04f45aa44e360415a375df123	-	ol10_x86_64_baseos_latest
	pam-libs-1.6.1-9.el10_2.1.x86_64.rpm	88113bcff425e5e76b2c5510161a2f6c4b2891a04f45aa44e360415a375df123	-	ol10_x86_64_u2_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team