]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
shadow: Fix for CVE-2023-4641
authorXiangyu Chen <xiangyu.chen@windriver.com>
Thu, 30 Nov 2023 09:27:51 +0000 (17:27 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 4 Dec 2023 11:23:33 +0000 (11:23 +0000)
commit7942df17d9dfcf690106b8b86506d496e6251327
treef84f4999f861ff1cafe0315332d400c976233914
parent2e0f552cac05c2b9f5a80ac396374a7987238a34
shadow: Fix for CVE-2023-4641

shadow-utils: possible password leak during passwd(1) change

CVE: CVE-2023-4641

Upstream-Status: Backport
[https://github.com/shadow-maint/shadow/commit/65c88a43a23c2391dcc90c0abda3e839e9c57904]

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/shadow/files/CVE-2023-4641.patch [new file with mode: 0644]
meta/recipes-extended/shadow/shadow.inc