diff --git a/cracklib-2.9.6-coverity.patch b/cracklib-2.9.6-coverity.patch
new file mode 100644
index 0000000..457b55f
--- /dev/null
+++ b/cracklib-2.9.6-coverity.patch
@@ -0,0 +1,20 @@
+diff -up cracklib-2.9.6/lib/rules.c.coverity cracklib-2.9.6/lib/rules.c
+--- cracklib-2.9.6/lib/rules.c.coverity	2018-10-09 12:15:31.455187555 +0200
++++ cracklib-2.9.6/lib/rules.c	2018-10-10 14:28:43.472740618 +0200
+@@ -774,6 +774,8 @@ Mangle(input, control, area)		/* returns
+ 		    }
+ 		}
+ 	    }
++	    break;
++
+ 	case RULE_MLAST:
+ 	    if (!ptr[1] || (ptr[1] == RULE_CLASS && !ptr[2]))
+ 	    {
+@@ -809,6 +811,7 @@ Mangle(input, control, area)		/* returns
+ 		    }
+ 		}
+ 	    }
++	    break;
+ 
+ 	default:
+ 	    Debug(1, "Mangle: unknown command %c in %s\n", *ptr, control);
diff --git a/cracklib.spec b/cracklib.spec
index 8540daf..016e5fc 100644
--- a/cracklib.spec
+++ b/cracklib.spec
@@ -5,7 +5,7 @@
 Summary: A password-checking library
 Name: cracklib
 Version: 2.9.6
-Release: 16%{?dist}
+Release: 17%{?dist}
 Group: System Environment/Libraries
 Source0: https://github.com/cracklib/cracklib/releases/download/cracklib-%{version}/cracklib-%{version}.tar.gz
 Source1: https://github.com/cracklib/cracklib/releases/download/cracklib-%{version}/cracklib-words-%{version}.gz
@@ -26,6 +26,7 @@ Patch4: cracklib-2.9.6-packlib-reentrant.patch
 Patch6: cracklib-2.9.6-simplistic.patch
 Patch7: cracklib-2.9.6-translation-updates.patch
 Patch8: cracklib-2.9.6-cve-2016-6318.patch
+Patch9: cracklib-2.9.6-coverity.patch
 URL: http://sourceforge.net/projects/cracklib/
 License: LGPLv2+
 Buildroot: %{_tmppath}/%{name}-%{version}-root
@@ -110,6 +111,7 @@ install -p -m 644 %{SOURCE3} po/zh_CN.po
 %patch6 -p1 -b .simplistic
 %patch7 -p1 -b .translations
 %patch8 -p1 -b .overflow
+%patch9 -p1 -b .coverity
 
 mkdir cracklib-dicts
 for dict in %{SOURCE10} %{SOURCE1}
@@ -233,6 +235,9 @@ EOF
 %endif
 
 %changelog
+* Wed Oct 10 2018 Tomáš Mráz <tmraz@redhat.com> - 2.9.6-17
+- Fix minor bug found in the Coverity scan
+
 * Tue Oct  9 2018 Tomáš Mráz <tmraz@redhat.com> - 2.9.6-16
 - Updated translations