This patch cherry-picks an upstream commit to fix a buffer overflow in cracklib. Please see the patch file for more information about the bug.