Comment 12 for bug 1325128

Revision history for this message
Jeremy Stanley (fungi) wrote : Re: nova metadata does not use a constant time compare for validating an HMAC token

Also, is the proposed patch something we would consider backporting to stable release branches? It does look trivial, introducing no new dependencies nor config options, so I'm assuming yes.