Gentoo Linux Security Advisory GLSA 200510-22 – The SELinux patches for PAM introduce a vulnerability allowing a password to be checked with the unix_chkpwd utility without delay or logging. This vulnerability doesn’t affect users who do not run SELinux. Versions less than 0.78-r3 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41061/glsa-200510-22.txt
Source: https://packetstormsecurity.com/files/41061/Gentoo-Linux-Security-Advisory-200510-22.html

