ELSA-2026-60224-0

ELSA-2026-60224-0 - pam security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-08-28

Description

[1.5.1-28.0.1.1]
- pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534]

[1.5.1-28.1]
- pam_userdb: fix password comparison timing leak.
Resolves: CVE-2026-54411 and RHEL-191702

Related CVEs

CVE-2026-54411

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	pam-1.5.1-28.0.1.el9_8.1.src.rpm	89db9764d75231f5eba424588ec55c67fad7326d05a8419d368a06c3df165b6d	-	ol9_aarch64_appstream
	pam-1.5.1-28.0.1.el9_8.1.src.rpm	89db9764d75231f5eba424588ec55c67fad7326d05a8419d368a06c3df165b6d	-	ol9_aarch64_baseos_latest
	pam-1.5.1-28.0.1.el9_8.1.src.rpm	89db9764d75231f5eba424588ec55c67fad7326d05a8419d368a06c3df165b6d	-	ol9_aarch64_u8_baseos_patch
	pam-1.5.1-28.0.1.el9_8.1.aarch64.rpm	1cbe013611839da510b1d680ed06d64a3627b4700640ebee8ce092b76a5363c6	-	ol9_aarch64_baseos_latest
	pam-1.5.1-28.0.1.el9_8.1.aarch64.rpm	1cbe013611839da510b1d680ed06d64a3627b4700640ebee8ce092b76a5363c6	-	ol9_aarch64_u8_baseos_patch
	pam-devel-1.5.1-28.0.1.el9_8.1.aarch64.rpm	5fd3feb7a1bae5d302d43edefa089a71ea29a1dd1049ee7696c9b6ea9bc3b667	-	ol9_aarch64_appstream
	pam-docs-1.5.1-28.0.1.el9_8.1.aarch64.rpm	a2f40128dbb95e7621420fadc98bf67299db3e9b18cd00905ced02971579b961	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	pam-1.5.1-28.0.1.el9_8.1.src.rpm	89db9764d75231f5eba424588ec55c67fad7326d05a8419d368a06c3df165b6d	-	ol9_x86_64_appstream
	pam-1.5.1-28.0.1.el9_8.1.src.rpm	89db9764d75231f5eba424588ec55c67fad7326d05a8419d368a06c3df165b6d	-	ol9_x86_64_baseos_latest
	pam-1.5.1-28.0.1.el9_8.1.src.rpm	89db9764d75231f5eba424588ec55c67fad7326d05a8419d368a06c3df165b6d	-	ol9_x86_64_u8_baseos_patch
	pam-1.5.1-28.0.1.el9_8.1.i686.rpm	234d670c77e2d205b38e7f7c264d6d69cac3a918aee29d916e6eb07bb3784457	-	ol9_x86_64_baseos_latest
	pam-1.5.1-28.0.1.el9_8.1.i686.rpm	234d670c77e2d205b38e7f7c264d6d69cac3a918aee29d916e6eb07bb3784457	-	ol9_x86_64_u8_baseos_patch
	pam-1.5.1-28.0.1.el9_8.1.x86_64.rpm	654ecaa30a98ee6ab7d78d2688fc2331d30f5214dc0d9ccb0fd0ac7aff8ff9a6	-	ol9_x86_64_baseos_latest
	pam-1.5.1-28.0.1.el9_8.1.x86_64.rpm	654ecaa30a98ee6ab7d78d2688fc2331d30f5214dc0d9ccb0fd0ac7aff8ff9a6	-	ol9_x86_64_u8_baseos_patch
	pam-devel-1.5.1-28.0.1.el9_8.1.i686.rpm	c1754312b380fe8e19c5d0203d7ca8aafc8cfab169c257ba0d6d431489b06a20	-	ol9_x86_64_appstream
	pam-devel-1.5.1-28.0.1.el9_8.1.x86_64.rpm	b478c329d38ba2b62642e09918f6a50a5d5f8cc8ca43904dac56715e506b373d	-	ol9_x86_64_appstream
	pam-docs-1.5.1-28.0.1.el9_8.1.x86_64.rpm	89c83ef1f2eac1d7dc63282fe266e9d43d8586062466b08a4c72da490561df2a	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team