From e2337c3496d28a6bf8f96177d62755c4ad23a524 Mon Sep 17 00:00:00 2001
From: Manuel Laug <manuel.laug@dm.de>
Date: Fri, 21 Apr 2023 13:25:38 +0200
Subject: [PATCH] Prevent nested sensitive wrap of password alter query

---
 manifests/server/role.pp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifests/server/role.pp b/manifests/server/role.pp
index 8656141356..1fa2719285 100644
--- a/manifests/server/role.pp
+++ b/manifests/server/role.pp
@@ -160,7 +160,7 @@
             $hash,
             $salt,
           ]
-        )
+        ).unwrap
       }
       else {
         $pwd_hash_sql = postgresql::postgresql_password(
@@ -169,7 +169,7 @@
           false,
           $hash,
           $salt,
-        )
+        ).unwrap
       }
       if $pwd_hash_sql =~ Deferred {
         $pw_command = Deferred('sprintf', ["ALTER ROLE \"%s\" ENCRYPTED PASSWORD '%s'", $username, $pwd_hash_sql])