use of weak password hash algorithm in libxcrypt

libxcrypt is used on openSUSE to calculate the hash value of passwords. It can be configured to use DES, MD5 or blowfish. Due to a bug in libxcrypt the DES algorithm was used if MD5 was configured in /etc/default/passwd. The default algorithm used on openSUSE is blowfish which worked as expected though.

Solution

There is no known workaround, please install the update packages.