https://bugzilla.novell.com/show_bug.cgi?id=713727
https://bugzilla.novell.com/show_bug.cgi?id=713727#c6
Ludwig Nussel changed:
What |Removed |Added
----------------------------------------------------------------------------
Priority|P5 - None |P2 - High
Group|novellonly |
CC| |security-team@suse.de
AssignedTo|security-team@suse.de |lnussel@novell.com
Severity|Normal |Major
--- Comment #6 from Ludwig Nussel 2011-08-23 16:37:50 CEST ---
packaging mistake. The hack in the libxcrypt plugin to detect the file name of
the plugin doesn't work. dlopen is too smart and doesn't load a lib twice if
it's symlink points to the same file.
If the old password has id 2a compat mode turns it in 2x so libxcrypt_2x.so.1
(symlink to libxcrypt_2a.so.1) is loaded. Then the new password is supposed to
get id 2y but dlopen doesn't actually load libxcrypt_2y.so.1 as it's the same
file as for 2x. So when the plugin looks at it's file name it sees 2x and
thinks it must generate a salt for 2x which is not possible.
Fix is to not install symlinks bug copies in the spec file of libxcrypt.
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.