File shadow-CVE-2023-4641.patch of Package shadow

Index: shadow-4.8.1/src/gpasswd.c
===================================================================
--- shadow-4.8.1.orig/src/gpasswd.c
+++ shadow-4.8.1/src/gpasswd.c
@@ -918,6 +918,7 @@ static void change_passwd (struct group
 		strzero (cp);
 		cp = getpass (_("Re-enter new password: "));
 		if (NULL == cp) {
+			memzero (pass, sizeof pass);
 			exit (1);
 		}
 
openSUSE Build Service is sponsored by