https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-2977.htmlhttps://patchthecve.com/cve/CVE-2005-2977.htmlTue, 16 Jun 2026 22:16:01 +0000LOW 2.1: The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.https://patchthecve.com/cve/CVE-2002-1227.htmlhttps://patchthecve.com/cve/CVE-2002-1227.htmlTue, 16 Jun 2026 21:58:58 +0000HIGH 7.5: PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.https://patchthecve.com/cve/CVE-1999-0342.htmlhttps://patchthecve.com/cve/CVE-1999-0342.htmlTue, 16 Jun 2026 21:48:11 +0000MEDIUM 6.2: Linux PAM modules allow local users to gain root access using temporary files.