From 6dad3beedac1a440cb24341d42abdfeafffde790 Mon Sep 17 00:00:00 2001
From: Ulrich Müller <ulm@gentoo.org>
Date: Mon, 26 Aug 2013 21:40:12 +0200
Subject: Erase cleartext passwords from memory, bug 482588.

---
 .../pam_skey/1.1.5/05_all_delete_response.patch     | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 patchsets/pam_skey/1.1.5/05_all_delete_response.patch

diff --git a/patchsets/pam_skey/1.1.5/05_all_delete_response.patch b/patchsets/pam_skey/1.1.5/05_all_delete_response.patch
new file mode 100644
index 0000000..1e45f25
--- /dev/null
+++ b/patchsets/pam_skey/1.1.5/05_all_delete_response.patch
@@ -0,0 +1,21 @@
+https://bugs.gentoo.org/482588
+Erase cleartext passwords from memory (CVE-2013-4285).
+
+--- pam_skey-1.1.5/pam_skey.c
++++ pam_skey/pam_skey.c
+@@ -129,6 +129,7 @@
+     }
+     if (strcasecmp(response,"s/key")!=0) {
+       status = pam_set_item(pamh, PAM_AUTHTOK, response);
++      _pam_delete(response);
+       if (status != PAM_SUCCESS)
+ 	return status;
+       return PAM_IGNORE;
+@@ -176,6 +177,7 @@
+   }
+ 
+   status = pam_set_item(pamh, PAM_AUTHTOK, response);
++  _pam_delete(response);
+   return PAM_IGNORE;
+ }
+ 
-- 
cgit v1.2.3-65-gdbad