CVE-2023-4641

Published: 1 September 2023

[gpasswd(1) password leak]

Notes

Technically this doesn't seem able to be exploited in practice
but since it is a CVE in such a ubiquitous and security sensitive package,
I am leaving this as medium so it gets patched sooner than later.

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4641
• https://bugzilla.redhat.com/show_bug.cgi?id=2215945
• https://github.com/shadow-maint/shadow/commit/65c88a43a23c2391dcc90c0abda3e839e9c57904 (4.14.0-rc1)
• NVD
• Launchpad
• Debian