File shadow-CVE-2023-4641.patch of Package shadow.30601
Index: shadow-4.8.1/src/gpasswd.c
===================================================================
--- shadow-4.8.1.orig/src/gpasswd.c
+++ shadow-4.8.1/src/gpasswd.c
@@ -918,6 +918,7 @@ static void change_passwd (struct group
strzero (cp);
cp = getpass (_("Re-enter new password: "));
if (NULL == cp) {
+ memzero (pass, sizeof pass);
exit (1);
}