HCE2-SA-2024-0176 Moderate HCE 2.0 Security Fix(es): shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees (CVE-2013-4235) A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory. (CVE-2023-4641) HCE 2.0 shadow-4.9-4.r15.hce2.aarch64.rpm shadow-help-4.9-4.r15.hce2.noarch.rpm shadow-subid-devel-4.9-4.r15.hce2.aarch64.rpm shadow-4.9-4.r15.hce2.x86_64.rpm shadow-help-4.9-4.r15.hce2.noarch.rpm shadow-subid-devel-4.9-4.r15.hce2.x86_64.rpm