Comment 23 for bug 1265665

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to swift (stable/havana)

Reviewed: https://review.openstack.org/67186
Committed: https://git.openstack.org/cgit/openstack/swift/commit/?id=b2c61375b3255486adb2900922a894dc7dad3c6d
Submitter: Jenkins
Branch: stable/havana

commit b2c61375b3255486adb2900922a894dc7dad3c6d
Author: Samuel Merritt <email address hidden>
Date: Thu Jan 16 13:44:23 2014 +0100

    Use constant time comparison in tempURL

    Use constant time comparison when evaluating tempURL to avoid timing
    attacks (CVE-2014-0006). This is the havana backport of the master
    patch.

    Fixes bug 1265665

    Change-Id: I11e4ad83cc4077e52adf54a0bd0f9749294b2a48