Information Disclosure

libshadow.so is vulnerable to Information Disclosure. The vulnerability exists in changepasswd function at gpasswd.c because the password field is not properly zeroed out if the confirmation fails...