File shadow-CVE-2023-4641.patch of Package shadow.30602

Index: shadow-4.6/src/gpasswd.c
===================================================================
--- shadow-4.6.orig/src/gpasswd.c
+++ shadow-4.6/src/gpasswd.c
@@ -917,6 +917,7 @@ static void change_passwd (struct group
 		strzero (cp);
 		cp = getpass (_("Re-enter new password: "));
 		if (NULL == cp) {
+			memzero (pass, sizeof pass);
 			exit (1);
 		}
 
openSUSE Build Service is sponsored by