pam:add patch CVE