RHSA-2001:132 | Vulnetix

RHSA-2001:132 PUBLISHED

New util-linux packages are available that fix a problem with /bin/login's PAM implementation. This could, in some non-default setups, cause users to receive credentials of other users. It is recommended that all users update to the fixed packages. 2001-10-22: Packages are now available for Red Hat Linux 7.2. Notably, these packages also fix the problem noted in RHSA-2001:095-04 (vipw incorrectly setting permissions on some files) - this bug was accidentally reintroduced in Red Hat Linux 7.2.

Affected Products

Vendor	Product	Versions
	Red Hat Linux 7.1
	Red Hat Linux 7.2

Timeline

Oct 16, 2001 CVE Published
Jan 13, 2026 CVE Updated
Apr 9, 2026 Distribution Patch
Apr 9, 2026 Distribution Patch
Aug 7, 2026 Security Advisory
Aug 7, 2026 Security Advisory
Aug 7, 2026 Security Advisory

References

https://bugzilla.redhat.com/show_bug.cgi?id=51646 url
https://security.access.redhat.com/data/csaf/v2/advisories/2001/rhsa-2001_132.json advisory
https://access.redhat.com/errata/RHSA-2001:132 fix

Open in Interactive Console →