use of weak password hash algorithm

Please Install the Updated Packages.

libxcrypt is used on openSUSE to calculate the hash value of passwords. It can be configured to use DES, MD5 or blowfish. Due to a bug in libxcrypt the DES algorithm was used if MD5 was configured in /etc/default/passwd. The default algorithm used on openSUSE is blowfish which worked as expected though.

libxcrypt on openSUSE 11.0

• http://www.novell.com/linux/security/advisories/2008_36_libxcrypt.html

---

Updated on 2015-03-25