angler-fishThe Vulnerability History Project

[1.8.x] Fixed CVE-2016-2513 -- Fixed user enumeration timing attack during login.

      This is a security fix.
by Leland the Mouse 2016-02-13 20:09:46 UTC
commit f4e6e02f7713a6924d16540be279909ff4091eb6
Django Fix CVE-2016-2513
django/contrib/auth/hashers.py
+20 -57
docs/releases/1.8.10.txt
-33
docs/topics/auth/passwords.txt
-30
tests/auth_tests/test_hashers.py
+1 -57
expand_less