Red Hat Security Advisory

RHSA-2024:10379

pam security update

Released 2024-11-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) pam-1.3.1-36.el8_10, pam-devel-1.3.1-36.el8_10

TI-2024-10162 CVE-2024-10963 · GHSA-rw99-6hrh-fmjr

LOW 36

A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00781 Published 2024-11-07 Partial fix · 1.7.0, 1.3.1-36.el8_10 +168 CWE-287

TI-2024-09318 CVE-2024-10041 · GHSA-7gm5-m2xc-vh2j

LOW 21

A vulnerability was found in PAM.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00265 Published 2024-10-23 Partial fix · 1.6.0, 1.3.1-36.el8_10 +2 CWE-922