[wp-trac] [WordPress Trac] #37324: Use hash_equals() when comparing hashes

WordPress Trac noreply at wordpress.org
Sun Jul 10 19:42:03 UTC 2016


#37324: Use hash_equals() when comparing hashes
--------------------------+------------------------
 Reporter:  ocean90       |       Owner:  ocean90
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:  4.6
Component:  Security      |     Version:
 Severity:  normal        |  Resolution:  fixed
 Keywords:  has-patch     |     Focuses:  multisite
--------------------------+------------------------
Changes (by ocean90):

 * owner:   => ocean90
 * status:  new => closed
 * resolution:   => fixed


Comment:

 In [changeset:"38032"]:
 {{{
 #!CommitTicketReference repository="" revision="38032"
 Multisite: Use `hash_equals()` when comparing hashes to mitigate timing
 attacks.

 Fixes #37324.
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/37324#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list