Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 580
Alerts This Week
Warning Icon 1 580

Fedora 26: FEDORA-2017-a1b2c3d4e5 Severe: OpenSSL Memory Leak Vulnerability

fedora
Calendar Grey December 11, 2016
Dist Fedora Esm H88
Urgent update for cracklib patching CVE-2016-6318 on Fedora 25. Recommended for improving system security.
Security fix for CVE-2016-6318

Summary

CrackLib tests passwords to determine whether they match certain

security-oriented characteristics, with the purpose of stopping usersfrom choosing passwords that are easy to guess. CrackLib performs

several tests on passwords: it tries to generate words from a username

and gecos entry and checks those words against the password; it checks

for simplistic patterns in passwords; and it checks for the password

in a dictionary.

CrackLib is actually a library containing a particular C function

which is used to check the password, as well as other C

functions. CrackLib is not a replacement for a passwd program; it must

be used in conjunction with an existing passwd program.

Install the cracklib package if you need a program to check users'

passwords to see if they are at least minimally secure. If you install

CrackLib, you will also want to install the cracklib-dicts package.

Update Information:

Security fix for CVE-2016-6318

Topics%20covered

Topics Covered

security advisory buffer overflow critical Fedora password checking cracklib

Change Log

References


[ 1 ] Bug #1364944 - CVE-2016-6318 cracklib: Stack-based buffer overflow when parsing large GECOS field https://bugzilla.redhat.com/show_bug.cgi?id=1364944

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade cracklib' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: cracklib
Product: Fedora 25
Version: 2.9.6
Release: 4.fc25
URL: https://sourceforge.net/projects/cracklib/
Summary: A password-checking library

Topics%20covered

Topics Covered

security advisory buffer overflow critical Fedora password checking cracklib

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.