Ubuntu USN · USN-8601-1

PAM vulnerability

Published: Thu, 23 Jul 2026 14:49

CVE-2026-54411

Summary

PAM could be made to expose sensitive information.

Details

It was discovered that PAM had a timing discrepancy in the pam_userdb module when comparing plaintext passwords. An attacker could possibly use this issue to obtain sensitive information by measuring response-timing differences during repeated authentication attempts.

Recommended actions per Ubuntu release

StackPatch playbook auto-generated per release codename and per affected package.

Ubuntu jammy

pam→1.4.0-11ubuntu2.7apt_upgrade
Standard apt upgrade. Install 1.4.0-11ubuntu2.7 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y pam
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-cracklib→1.4.0-11ubuntu2.7apt_upgrade
Standard apt upgrade. Install 1.4.0-11ubuntu2.7 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-cracklib
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-doc→1.4.0-11ubuntu2.7apt_upgrade
Standard apt upgrade. Install 1.4.0-11ubuntu2.7 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-doc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-modules→1.4.0-11ubuntu2.7apt_upgrade
Standard apt upgrade. Install 1.4.0-11ubuntu2.7 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-modules
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-modules-bin→1.4.0-11ubuntu2.7apt_upgrade
Standard apt upgrade. Install 1.4.0-11ubuntu2.7 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-modules-bin
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-runtime→1.4.0-11ubuntu2.7apt_upgrade
Standard apt upgrade. Install 1.4.0-11ubuntu2.7 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-runtime
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam0g→1.4.0-11ubuntu2.7apt_upgrade
Standard apt upgrade. Install 1.4.0-11ubuntu2.7 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam0g
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam0g-dev→1.4.0-11ubuntu2.7apt_upgrade
Standard apt upgrade. Install 1.4.0-11ubuntu2.7 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam0g-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu noble

pam→1.5.3-5ubuntu5.6apt_upgrade
Standard apt upgrade. Install 1.5.3-5ubuntu5.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y pam
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-doc→1.5.3-5ubuntu5.6apt_upgrade
Standard apt upgrade. Install 1.5.3-5ubuntu5.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-doc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-modules→1.5.3-5ubuntu5.6apt_upgrade
Standard apt upgrade. Install 1.5.3-5ubuntu5.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-modules
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-modules-bin→1.5.3-5ubuntu5.6apt_upgrade
Standard apt upgrade. Install 1.5.3-5ubuntu5.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-modules-bin
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-runtime→1.5.3-5ubuntu5.6apt_upgrade
Standard apt upgrade. Install 1.5.3-5ubuntu5.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-runtime
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam0g→1.5.3-5ubuntu5.6apt_upgrade
Standard apt upgrade. Install 1.5.3-5ubuntu5.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam0g
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam0g-dev→1.5.3-5ubuntu5.6apt_upgrade
Standard apt upgrade. Install 1.5.3-5ubuntu5.6 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam0g-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu resolute

pam→1.7.0-5ubuntu3.1apt_upgrade
Standard apt upgrade. Install 1.7.0-5ubuntu3.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y pam
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-doc→1.7.0-5ubuntu3.1apt_upgrade
Standard apt upgrade. Install 1.7.0-5ubuntu3.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-doc
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-modules→1.7.0-5ubuntu3.1apt_upgrade
Standard apt upgrade. Install 1.7.0-5ubuntu3.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-modules
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-modules-bin→1.7.0-5ubuntu3.1apt_upgrade
Standard apt upgrade. Install 1.7.0-5ubuntu3.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-modules-bin
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-runtime→1.7.0-5ubuntu3.1apt_upgrade
Standard apt upgrade. Install 1.7.0-5ubuntu3.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-runtime
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam0g→1.7.0-5ubuntu3.1apt_upgrade
Standard apt upgrade. Install 1.7.0-5ubuntu3.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam0g
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam0g-dev→1.7.0-5ubuntu3.1apt_upgrade
Standard apt upgrade. Install 1.7.0-5ubuntu3.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam0g-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Are YOU affected by USN-8601-1?

5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether USN-8601-1 (and any other live CVE) applies. Anonymous, no signup.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Read the bash source first

Want this automated for your servers?

StackPatch runs this match against YOUR installed packages every hour

Free (3 servers) / from $9/mo (14-day free trial) / Solo $9/mo / Pro $29/mo / Team $79/mo. Indie pricing.

Start free trial →See StackPatch →Live audit log →