SUSE-SU-2026:3162-1

Details

Description of the patch:

This update for pam fixes the following issue

CVE-2026-54411: timing discrepancy in the pam_userdb module's plaintext-password comparison (bsc#1268290).

Affected Packages

pam

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

1.1.8-24.80.1

pam-32bit

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

1.1.8-24.80.1

pam-devel

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

1.1.8-24.80.1

pam-doc

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

1.1.8-24.80.1

pam-extra

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

1.1.8-24.80.1

pam-extra-32bit

SUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

1.1.8-24.80.1

References