libuser

#76 Leakage of sensitive information such as password
Opened by oaygnahz. Modified

Open
Close Issue

Currently, we do not clear sensitive information before releasing memory. This may result in sensitive information still remaining in memory.

In libxcrypt, before calling free, explicit_bzero is always invoked.

Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.