Red Hat Product Errata RHSA-2026:61228 - Security Advisory Issued: 2026-08-31 Updated: 2026-08-31 RHSA-2026:61228 - Security Advisory Overview Updated Packages Synopsis Moderate: pam security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for pam is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fix(es): linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (CVE-2026-54411) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2488766 - CVE-2026-54411 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module CVEs CVE-2026-54411 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM pam-1.5.1-24.el9_4.2.src.rpm SHA-256: 4ec7424539adf8eeaebad524b1839266839b74f5447cc9f66f800f0814bc9a9c x86_64 pam-1.5.1-24.el9_4.2.i686.rpm SHA-256: 87884285d3c8a678256bedf17ea9755f6a9ba23634cf5a7805a5a747e30b1aa0 pam-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: ecadf68f4ec3a666f5ecd9633d4751af84f66de4030f8228244c49e167359e57 pam-debuginfo-1.5.1-24.el9_4.2.i686.rpm SHA-256: b7f17ed045af35159fe86c7a8fdfeddd16bac5cd9c7b1786380fd3d614199576 pam-debuginfo-1.5.1-24.el9_4.2.i686.rpm SHA-256: b7f17ed045af35159fe86c7a8fdfeddd16bac5cd9c7b1786380fd3d614199576 pam-debuginfo-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: 3c66c56a029b6a0addb01e28b3ea200d94a8f11f02b1ad78567477c9e866bba9 pam-debuginfo-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: 3c66c56a029b6a0addb01e28b3ea200d94a8f11f02b1ad78567477c9e866bba9 pam-debugsource-1.5.1-24.el9_4.2.i686.rpm SHA-256: 631a2f26a0e470d58d1aea3f81007ec97292341c35b97c16bb4e6d14033c81f8 pam-debugsource-1.5.1-24.el9_4.2.i686.rpm SHA-256: 631a2f26a0e470d58d1aea3f81007ec97292341c35b97c16bb4e6d14033c81f8 pam-debugsource-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: c67d58ce6597237a677beb41d6e254b4b6f18d6391297f1348f490d93387ca80 pam-debugsource-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: c67d58ce6597237a677beb41d6e254b4b6f18d6391297f1348f490d93387ca80 pam-devel-1.5.1-24.el9_4.2.i686.rpm SHA-256: b6a7618f47057a5633709abf6c871dbde46115af0268be1a6a785da8aa77b233 pam-devel-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: 09c22d70c2f9163227c2c9cde81657e576cd214acad371dc06d78cb94e393d83 pam-docs-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: b566950c9000990f03484101a3815b3c08cd1d0c864b114a3b606a8d7d13f31d Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM pam-1.5.1-24.el9_4.2.src.rpm SHA-256: 4ec7424539adf8eeaebad524b1839266839b74f5447cc9f66f800f0814bc9a9c ppc64le pam-1.5.1-24.el9_4.2.ppc64le.rpm SHA-256: 6bbace878c3d7c6524b13a67bdbed70fd587b4a63855b68fe752ddc4e88f0345 pam-debuginfo-1.5.1-24.el9_4.2.ppc64le.rpm SHA-256: be1c7f8b910016c4c945f7a1be1b8de1e3e3ba2ebda23d483c96c98adf24402f pam-debuginfo-1.5.1-24.el9_4.2.ppc64le.rpm SHA-256: be1c7f8b910016c4c945f7a1be1b8de1e3e3ba2ebda23d483c96c98adf24402f pam-debugsource-1.5.1-24.el9_4.2.ppc64le.rpm SHA-256: d6b78bfbb3ebac80ffc940a32b8488d6fee1756d174d1ae88e111f7e0a75ba5b pam-debugsource-1.5.1-24.el9_4.2.ppc64le.rpm SHA-256: d6b78bfbb3ebac80ffc940a32b8488d6fee1756d174d1ae88e111f7e0a75ba5b pam-devel-1.5.1-24.el9_4.2.ppc64le.rpm SHA-256: def631e6a0399673ff18d34be57060a04052b63be4326e2aa6571d065d947539 pam-docs-1.5.1-24.el9_4.2.ppc64le.rpm SHA-256: 00ae68eb8aadd0a718cf3e433fd57f27f69707f65e7f0456e375e02f5d5aed29 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM pam-1.5.1-24.el9_4.2.src.rpm SHA-256: 4ec7424539adf8eeaebad524b1839266839b74f5447cc9f66f800f0814bc9a9c x86_64 pam-1.5.1-24.el9_4.2.i686.rpm SHA-256: 87884285d3c8a678256bedf17ea9755f6a9ba23634cf5a7805a5a747e30b1aa0 pam-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: ecadf68f4ec3a666f5ecd9633d4751af84f66de4030f8228244c49e167359e57 pam-debuginfo-1.5.1-24.el9_4.2.i686.rpm SHA-256: b7f17ed045af35159fe86c7a8fdfeddd16bac5cd9c7b1786380fd3d614199576 pam-debuginfo-1.5.1-24.el9_4.2.i686.rpm SHA-256: b7f17ed045af35159fe86c7a8fdfeddd16bac5cd9c7b1786380fd3d614199576 pam-debuginfo-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: 3c66c56a029b6a0addb01e28b3ea200d94a8f11f02b1ad78567477c9e866bba9 pam-debuginfo-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: 3c66c56a029b6a0addb01e28b3ea200d94a8f11f02b1ad78567477c9e866bba9 pam-debugsource-1.5.1-24.el9_4.2.i686.rpm SHA-256: 631a2f26a0e470d58d1aea3f81007ec97292341c35b97c16bb4e6d14033c81f8 pam-debugsource-1.5.1-24.el9_4.2.i686.rpm SHA-256: 631a2f26a0e470d58d1aea3f81007ec97292341c35b97c16bb4e6d14033c81f8 pam-debugsource-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: c67d58ce6597237a677beb41d6e254b4b6f18d6391297f1348f490d93387ca80 pam-debugsource-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: c67d58ce6597237a677beb41d6e254b4b6f18d6391297f1348f490d93387ca80 pam-devel-1.5.1-24.el9_4.2.i686.rpm SHA-256: b6a7618f47057a5633709abf6c871dbde46115af0268be1a6a785da8aa77b233 pam-devel-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: 09c22d70c2f9163227c2c9cde81657e576cd214acad371dc06d78cb94e393d83 pam-docs-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: b566950c9000990f03484101a3815b3c08cd1d0c864b114a3b606a8d7d13f31d Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM pam-1.5.1-24.el9_4.2.src.rpm SHA-256: 4ec7424539adf8eeaebad524b1839266839b74f5447cc9f66f800f0814bc9a9c aarch64 pam-1.5.1-24.el9_4.2.aarch64.rpm SHA-256: a1597a9e40e85dafb097e10908a34616df6d6eeb8bf2d976f553fa4e6862c2c6 pam-debuginfo-1.5.1-24.el9_4.2.aarch64.rpm SHA-256: 15ca5fbd02378842ad6850e3026fdec75d34f8527cc7d4e2b4624fe913f58117 pam-debuginfo-1.5.1-24.el9_4.2.aarch64.rpm SHA-256: 15ca5fbd02378842ad6850e3026fdec75d34f8527cc7d4e2b4624fe913f58117 pam-debugsource-1.5.1-24.el9_4.2.aarch64.rpm SHA-256: 5c65fddce7207e8509ef9db67de9a9fda62696b5da8f88e5db24cda222df1d09 pam-debugsource-1.5.1-24.el9_4.2.aarch64.rpm SHA-256: 5c65fddce7207e8509ef9db67de9a9fda62696b5da8f88e5db24cda222df1d09 pam-devel-1.5.1-24.el9_4.2.aarch64.rpm SHA-256: 236da09cdccf8746f8376140a501484596c88c5a3a9798db80457ec27dc4b5ed pam-docs-1.5.1-24.el9_4.2.aarch64.rpm SHA-256: ef95ee2bb0f4ebd307e2bfdff6ab48c7b84c63182f38dcaf6b1ad3c227e5d05e Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 SRPM pam-1.5.1-24.el9_4.2.src.rpm SHA-256: 4ec7424539adf8eeaebad524b1839266839b74f5447cc9f66f800f0814bc9a9c s390x pam-1.5.1-24.el9_4.2.s390x.rpm SHA-256: 09e416dd4519f1f8e3752cd690920b7b20be28abb4f8c033fae1cadb3c62472f pam-debuginfo-1.5.1-24.el9_4.2.s390x.rpm SHA-256: 35a9fc41103abd592b1819efa751a1e906d36d56869c568661bc25d20e703454 pam-debuginfo-1.5.1-24.el9_4.2.s390x.rpm SHA-256: 35a9fc41103abd592b1819efa751a1e906d36d56869c568661bc25d20e703454 pam-debugsource-1.5.1-24.el9_4.2.s390x.rpm SHA-256: 8fdb746ebe972d1a6a44b05295069f4654ad39adb8571ea5f841fa67db120536 pam-debugsource-1.5.1-24.el9_4.2.s390x.rpm SHA-256: 8fdb746ebe972d1a6a44b05295069f4654ad39adb8571ea5f841fa67db120536 pam-devel-1.5.1-24.el9_4.2.s390x.rpm SHA-256: 8880d97da13b877feaee590e2d7f2ad555435cbc2e1fcd902ce2bebeb2e459af pam-docs-1.5.1-24.el9_4.2.s390x.rpm SHA-256: 89660962ab33ab422f70cb94f3b2b9a98992672f5a71ad4cbd8adab583e957eb Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 SRPM pam-1.5.1-24.el9_4.2.src.rpm SHA-256: 4ec7424539adf8eeaebad524b1839266839b74f5447cc9f66f800f0814bc9a9c x86_64 pam-1.5.1-24.el9_4.2.i686.rpm SHA-256: 87884285d3c8a678256bedf17ea9755f6a9ba23634cf5a7805a5a747e30b1aa0 pam-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: ecadf68f4ec3a666f5ecd9633d4751af84f66de4030f8228244c49e167359e57 pam-debuginfo-1.5.1-24.el9_4.2.i686.rpm SHA-256: b7f17ed045af35159fe86c7a8fdfeddd16bac5cd9c7b1786380fd3d614199576 pam-debuginfo-1.5.1-24.el9_4.2.i686.rpm SHA-256: b7f17ed045af35159fe86c7a8fdfeddd16bac5cd9c7b1786380fd3d614199576 pam-debuginfo-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: 3c66c56a029b6a0addb01e28b3ea200d94a8f11f02b1ad78567477c9e866bba9 pam-debuginfo-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: 3c66c56a029b6a0addb01e28b3ea200d94a8f11f02b1ad78567477c9e866bba9 pam-debugsource-1.5.1-24.el9_4.2.i686.rpm SHA-256: 631a2f26a0e470d58d1aea3f81007ec97292341c35b97c16bb4e6d14033c81f8 pam-debugsource-1.5.1-24.el9_4.2.i686.rpm SHA-256: 631a2f26a0e470d58d1aea3f81007ec97292341c35b97c16bb4e6d14033c81f8 pam-debugsource-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: c67d58ce6597237a677beb41d6e254b4b6f18d6391297f1348f490d93387ca80 pam-debugsource-1.5.1-24.el9_4.2.x86_64.rpm SHA-256: c67d58ce6597237a677beb41d6e254b4b6f18d6391297f1348f490d93387ca80 pam-devel-1.5.1-24.el9_4.2.i686.rpm SHA-256: b6a7618f47057a5633709abf6