Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 547
Alerts This Week
Warning Icon 1 547

Fedora 44 pam Timing Leak Fix CVE-2026-54411 Security Advisory

fedora
Calendar Grey July 9, 2026
Dist Fedora Esm H88
Fix for pam User Database timing leak vulnerability in Fedora 44 requires immediate attention and update.
pam_userdb: fix password comparison timing leak

Summary

PAM (Pluggable Authentication Modules) is a system security tool that

allows system administrators to set authentication policy without

having to recompile programs that handle authentication.

Update Information:

pam_userdb: fix password comparison timing leak

Topics%20covered

Topics Covered

security advisory fedora update timing attack PAM password leak

Change Log

* Wed Jul 8 2026 Iker Pedrosa - 1.7.2-2 - pam_userdb: fix password comparison timing leak Resolves: #2496416 Resolves: CVE-2026-54411

References


[ 1 ] Bug #2496416 - CVE-2026-54411 pam: Plaintext password recovery via timing discrepancy in pam_userdb module [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2496416

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-377015b34b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: pam
Product: Fedora 44
Version: 1.7.2
Release: 2.fc44
URL: http://www.linux-pam.org/
Summary: An extensible library which provides authentication for applications

Topics%20covered

Topics Covered

security advisory fedora update timing attack PAM password leak

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.