========================================================================== Ubuntu Security Notice USN-8601-1 July 23, 2026
pam vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: PAM could be made to expose sensitive information. Software Description: - pam: Pluggable Authentication Modules Details: It was discovered that PAM had a timing discrepancy in the pam_userdb module when comparing plaintext passwords. An attacker could possibly use this issue to obtain sensitive information by measuring response-timing differences during repeated authentication attempts. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libpam-modules 1.7.0-5ubuntu3.1 Ubuntu 24.04 LTS libpam-modules 1.5.3-5ubuntu5.6 Ubuntu 22.04 LTS libpam-modules 1.4.0-11ubuntu2.7 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8601-1 CVE-2026-54411 Package Information: https://launchpad.net/ubuntu/+source/pam/1.7.0-5ubuntu3.1 https://launchpad.net/ubuntu/+source/pam/1.5.3-5ubuntu5.6 https://launchpad.net/ubuntu/+source/pam/1.4.0-11ubuntu2.7
signature.asc
Description: OpenPGP digital signature
