Edgewall Software

Opened 2 years ago

Closed 17 months ago

Last modified 17 months ago

#13465 closed defect (fixed)

hmac.compare_digest should be used to compare password hashes in trac/web/auth.py — at Version 2

Reported by: Jun Omae Owned by:
Priority: normal Milestone: 1.4.4
Component: web frontend Version:
Severity: normal Keywords:
Cc: Branch:
Release Notes:

Use hmac.compare_digest to compare password hashes.

API Changes:
Internal Changes:

Description

See ​https://docs.python.org/2/library/hmac.html#hmac.compare_digest

Change History (2)

comment:1 by Ryan J Ollos, 2 years ago

Milestone: 1.4.4 → 1.4.5

comment:2 by Jun Omae, 17 months ago

Milestone: 1.4.5 → 1.4.4
Release Notes: modified (diff)
Resolution: → fixed
Status: new → closed

Fixed in [17615] and merged into trunk in [17616].

Note: See TracTickets for help on using tickets.