File shadow-CVE-2023-4641.patch of Package shadow.35066
Index: shadow-4.8.1/src/gpasswd.c =================================================================== --- shadow-4.8.1.orig/src/gpasswd.c +++ shadow-4.8.1/src/gpasswd.c @@ -918,6 +918,7 @@ static void change_passwd (struct group strzero (cp); cp = getpass (_("Re-enter new password: ")); if (NULL == cp) { + memzero (pass, sizeof pass); exit (1); }