2.9.6-r1 or newer would be good
The following revision refers to this bug: https://chromium.googlesource.com/chromiumos/overlays/portage-stable/+/a6aaba18462357dcb073da1e6aabccf0a7867d68 commit a6aaba18462357dcb073da1e6aabccf0a7867d68 Author: Drew Davenport <ddavenport@google.com> Date: Tue May 02 02:18:13 2017 cracklib: upgraded package to upstream Upgraded sys-libs/cracklib to version 2.9.6-r1 on amd64, arm, x86 BUG= chromium:710117 TEST=for b in reef bob x86-generic; do FEATURES=test emerge-$b -q cracklib; done Change-Id: Ib48e6ff8f3b7b4567dee4b07c01e59e3eca152e0 Reviewed-on: https://chromium-review.googlesource.com/489665 Commit-Ready: Drew Davenport <ddavenport@chromium.org> Tested-by: Drew Davenport <ddavenport@chromium.org> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org> [add] https://crrev.com/a6aaba18462357dcb073da1e6aabccf0a7867d68/metadata/md5-cache/sys-libs/cracklib-2.9.6-r1 [modify] https://crrev.com/a6aaba18462357dcb073da1e6aabccf0a7867d68/sys-libs/cracklib/Manifest [delete] https://crrev.com/c7ba763783cf2cb9ffca9d5d929fed2f4c23c49f/sys-libs/cracklib/cracklib-2.8.19.ebuild [add] https://crrev.com/a6aaba18462357dcb073da1e6aabccf0a7867d68/sys-libs/cracklib/files/cracklib-2.9.6-CVE-2016-6318.patch [modify] https://crrev.com/a6aaba18462357dcb073da1e6aabccf0a7867d68/sys-libs/cracklib/metadata.xml [delete] https://crrev.com/c7ba763783cf2cb9ffca9d5d929fed2f4c23c49f/metadata/md5-cache/sys-libs/cracklib-2.8.19 [add] https://crrev.com/a6aaba18462357dcb073da1e6aabccf0a7867d68/sys-libs/cracklib/cracklib-2.9.6-r1.ebuild [add] https://crrev.com/a6aaba18462357dcb073da1e6aabccf0a7867d68/sys-libs/cracklib/files/cracklib-2.9.6-fix-long-word-bufferoverflow.patch
Comment 1 by ddavenp...@chromium.org
, Apr 27 2017Status: Started (was: Available)