Home / mailings

PDF

[USN-8688-1] PAM vulnerability

Posted on 27 August 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8688-1
August 27, 2026

pam vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS

Summary:

A system hardening measure could be bypassed.

Software Description:
- pam: Pluggable Authentication Modules

Details:

Juthawong Naisanguansee discovered that PAM incorrectly cleared failed
login attempt records when certain services invoked the account phase
without first performing authentication. An attacker could possibly use
this issue to reset failed login counters, resulting in authentication
lockout restrictions being bypassed.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
libpam-doc 1.5.3-5ubuntu5.7
libpam-modules 1.5.3-5ubuntu5.7
libpam-modules-bin 1.5.3-5ubuntu5.7
libpam-runtime 1.5.3-5ubuntu5.7
libpam0g 1.5.3-5ubuntu5.7
libpam0g-dev 1.5.3-5ubuntu5.7

Ubuntu 22.04 LTS
libpam-cracklib 1.4.0-11ubuntu2.8
libpam-doc 1.4.0-11ubuntu2.8
libpam-modules 1.4.0-11ubuntu2.8
libpam-modules-bin 1.4.0-11ubuntu2.8
libpam-runtime 1.4.0-11ubuntu2.8
libpam0g 1.4.0-11ubuntu2.8
libpam0g-dev 1.4.0-11ubuntu2.8

Ubuntu 20.04 LTS
libpam-cracklib 1.3.1-5ubuntu4.7+esm1
Available with Ubuntu Pro
libpam-doc 1.3.1-5ubuntu4.7+esm1
Available with Ubuntu Pro
libpam-modules 1.3.1-5ubuntu4.7+esm1
Available with Ubuntu Pro
libpam-modules-bin 1.3.1-5ubuntu4.7+esm1
Available with Ubuntu Pro
libpam-runtime 1.3.1-5ubuntu4.7+esm1
Available with Ubuntu Pro
libpam0g 1.3.1-5ubuntu4.7+esm1
Available with Ubuntu Pro
libpam0g-dev 1.3.1-5ubuntu4.7+esm1
Available with Ubuntu Pro

Ubuntu 18.04 LTS
libpam-cracklib 1.1.8-3.6ubuntu2.18.04.6+esm2
Available with Ubuntu Pro
libpam-doc 1.1.8-3.6ubuntu2.18.04.6+esm2
Available with Ubuntu Pro
libpam-modules 1.1.8-3.6ubuntu2.18.04.6+esm2
Available with Ubuntu Pro
libpam-modules-bin 1.1.8-3.6ubuntu2.18.04.6+esm2
Available with Ubuntu Pro
libpam-runtime 1.1.8-3.6ubuntu2.18.04.6+esm2
Available with Ubuntu Pro
libpam0g 1.1.8-3.6ubuntu2.18.04.6+esm2
Available with Ubuntu Pro
libpam0g-dev 1.1.8-3.6ubuntu2.18.04.6+esm2
Available with Ubuntu Pro

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8688-1
https://launchpad.net/bugs/2164901

Package Information:
https://launchpad.net/ubuntu/+source/pam/1.5.3-5ubuntu5.7
https://launchpad.net/ubuntu/+source/pam/1.4.0-11ubuntu2.8

--===============0886159151177402576==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP