- add passwords derived from rockyou breach data to the dictionaries

(Matthew Miller, #557592)

cracklib.spec

@@ -5,7 +5,7 @@
 Summary: A password-checking library
 Name: cracklib
 Version: 2.8.15
-Release: 2%{?dist}
+Release: 3%{?dist}
 Group: System Environment/Libraries
 Source0: http://prdownloads.sourceforge.net/cracklib/cracklib-%{version}.tar.gz
 
@@ -42,7 +42,9 @@ Source36: http://ftp.cerias.purdue.edu/pub/dict/wordlists/names/surnames.finnish
 
 # No upstream source for this; it came in as a bugzilla attachment.
 Source37: pass_file.gz
-
+# https://bugzilla.redhat.com/show_bug.cgi?id=557592
+# https://bugzilla.redhat.com/attachment.cgi?id=386022
+Source38: ry-threshold10.txt
 Patch0: cracklib-2.8.15-suffix.patch
 Patch1: cracklib-2.8.15-inttypes.patch
 Patch2: cracklib-2.8.12-gettext.patch
@@ -121,7 +123,7 @@ for dict in %{SOURCE10} %{SOURCE11} %{SOURCE12} %{SOURCE13} %{SOURCE14} \
             %{SOURCE20} %{SOURCE21} %{SOURCE22} %{SOURCE23} %{SOURCE24} \
             %{SOURCE25} %{SOURCE26} %{SOURCE27} %{SOURCE28} %{SOURCE29} \
             %{SOURCE30} %{SOURCE31} %{SOURCE32} %{SOURCE33} %{SOURCE34} \
-            %{SOURCE35} %{SOURCE36} %{SOURCE37} %{SOURCE1}
+            %{SOURCE35} %{SOURCE36} %{SOURCE37} %{SOURCE38} %{SOURCE1}
 do
         cp -fv ${dict} cracklib-dicts/
 done
@@ -227,6 +229,10 @@ EOF
 %{_libdir}/../lib/python*/site-packages/*.py*
 
 %changelog
+* Fri Jan 22 2010 Nalin Dahyabhai <nalin@redhat.com> - 2.8.15-3
+- add passwords derived from rockyou breach data to the dictionaries (Matthew
+  Miller, #557592)
+
 * Thu Jan 21 2010 Nalin Dahyabhai <nalin@redhat.com> - 2.8.15-2
 - update license: tag
 - include license file