diff --git a/.gitignore b/.gitignore
index c4bd298..0aba3d4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,13 @@
-SOURCES/libpwquality-1.4.4.tar.bz2
+/libpwquality-0.9.tar.bz2
+/libpwquality-0.9.9.tar.bz2
+/libpwquality-1.0.0.tar.bz2
+/libpwquality-1.1.0.tar.bz2
+/libpwquality-1.1.1.tar.bz2
+/libpwquality-1.2.0.tar.bz2
+/libpwquality-1.2.1.tar.bz2
+/libpwquality-1.2.2.tar.bz2
+/libpwquality-1.2.3.tar.bz2
+/libpwquality-1.2.4.tar.bz2
+/libpwquality-1.3.0.tar.bz2
+/libpwquality-1.4.0.tar.bz2
 /libpwquality-1.4.4.tar.bz2
diff --git a/libpwquality-1.4.0-covscan.patch b/libpwquality-1.4.0-covscan.patch
new file mode 100644
index 0000000..2b3fd5f
--- /dev/null
+++ b/libpwquality-1.4.0-covscan.patch
@@ -0,0 +1,32 @@
+From fbf963dde2cbe34dba1df269b9506f4a55c39357 Mon Sep 17 00:00:00 2001
+From: Tomas Mraz <tmraz@fedoraproject.org>
+Date: Mon, 22 Oct 2018 16:29:31 +0200
+Subject: [PATCH] Use calloc() instead of malloc() in distcalculate to
+ initialize the memory.
+
+---
+ src/check.c | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/src/check.c b/src/check.c
+index ac7cbd5..61218a7 100644
+--- a/src/check.c
++++ b/src/check.c
+@@ -96,12 +96,12 @@ distance(const char *old, const char *new)
+ 
+         m = strlen(old);
+         n = strlen(new);
+-        distances = malloc(sizeof(int*) * (m + 1));
++        distances = calloc(m + 1, sizeof(int*));
+         if (distances == NULL)
+                 return -1;
+ 
+         for (i = 0; i <= m; i++) {
+-                distances[i] = malloc(sizeof(int) * (n + 1));
++                distances[i] = calloc(n + 1, sizeof(int));
+                 if (distances[i] == NULL)
+                         goto allocfail;
+ 
+-- 
+2.14.5
+