Comment 4 for bug 1379826

Revision history for this message
Julian Edwards (julian-edwards) wrote : Re: [Bug 1379826] Re: uuid.uuid1() is not suitable as an unguessable identifier/token

On Tuesday 14 Oct 2014 15:38:31 you wrote:
> Well spotted. This is a trivial fix, let's land this as part of 1.7 if
> we can.

Let's not. If it's in 1.7 it needs to be pushed to all other releases at the
same time because of disclosure.

We can safely SRU this as a security fix after the release.