Red Hat Product Errata RHSA-2026:61224 - Security Advisory Issued: 2026-08-31 Updated: 2026-08-31 RHSA-2026:61224 - Security Advisory Overview Updated Packages Synopsis Moderate: pam security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for pam is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (CVE-2026-54411) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.4 x86_64 Red Hat Enterprise Linux Server - AUS 8.4 x86_64 Fixes BZ - 2488766 - CVE-2026-54411 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module CVEs CVE-2026-54411 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.4 SRPM pam-1.3.1-14.el8_4.3.src.rpm SHA-256: 98a0f573559efdbb5614b34f999ab40720da66665af4d156f716cf495fa47e8e x86_64 pam-1.3.1-14.el8_4.3.i686.rpm SHA-256: 5f0ef5c06b6e4b2886c9dd706dcb018a86007f646f0d67574c6b57630029e297 pam-1.3.1-14.el8_4.3.x86_64.rpm SHA-256: fbc3e0ffdf935f478fcf0dba93bc68a7f38e460077df4d34a6baa0b1a8791931 pam-debuginfo-1.3.1-14.el8_4.3.i686.rpm SHA-256: a816358f0526294cbdf3d3c30f63245b91c61615a8ca4ebf25a56f66f65cfec6 pam-debuginfo-1.3.1-14.el8_4.3.x86_64.rpm SHA-256: 132b0864606d819f8b0421ba8626504a879b6fb2999ec8367cc007893a902b19 pam-debugsource-1.3.1-14.el8_4.3.i686.rpm SHA-256: b3d5e381e6d44f4c8e4b6f8f71634040e96c6611b1c9ab00729f20c74f958a37 pam-debugsource-1.3.1-14.el8_4.3.x86_64.rpm SHA-256: 22b40cbb18c2dd5765a4e75ff336eb92f609690aef148d2d8f0cbe922372c8cd pam-devel-1.3.1-14.el8_4.3.i686.rpm SHA-256: 8a79ae682637ecab3361ad45a3de0b8a10033008e9151f622990482850a142bb pam-devel-1.3.1-14.el8_4.3.x86_64.rpm SHA-256: b0e1151da0d1aaa41f3d48103c76e7da8f874f9ac4077d20c6723cbdbf5862a2 Red Hat Enterprise Linux Server - AUS 8.4 SRPM pam-1.3.1-14.el8_4.3.src.rpm SHA-256: 98a0f573559efdbb5614b34f999ab40720da66665af4d156f716cf495fa47e8e x86_64 pam-1.3.1-14.el8_4.3.i686.rpm SHA-256: 5f0ef5c06b6e4b2886c9dd706dcb018a86007f646f0d67574c6b57630029e297 pam-1.3.1-14.el8_4.3.x86_64.rpm SHA-256: fbc3e0ffdf935f478fcf0dba93bc68a7f38e460077df4d34a6baa0b1a8791931 pam-debuginfo-1.3.1-14.el8_4.3.i686.rpm SHA-256: a816358f0526294cbdf3d3c30f63245b91c61615a8ca4ebf25a56f66f65cfec6 pam-debuginfo-1.3.1-14.el8_4.3.x86_64.rpm SHA-256: 132b0864606d819f8b0421ba8626504a879b6fb2999ec8367cc007893a902b19 pam-debugsource-1.3.1-14.el8_4.3.i686.rpm SHA-256: b3d5e381e6d44f4c8e4b6f8f71634040e96c6611b1c9ab00729f20c74f958a37 pam-debugsource-1.3.1-14.el8_4.3.x86_64.rpm SHA-256: 22b40cbb18c2dd5765a4e75ff336eb92f609690aef148d2d8f0cbe922372c8cd pam-devel-1.3.1-14.el8_4.3.i686.rpm SHA-256: 8a79ae682637ecab3361ad45a3de0b8a10033008e9151f622990482850a142bb pam-devel-1.3.1-14.el8_4.3.x86_64.rpm SHA-256: b0e1151da0d1aaa41f3d48103c76e7da8f874f9ac4077d20c6723cbdbf5862a2 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .