Project

General

Profile

Actions
Copy link

Task #99366

closed

Add backward compatibility handling for frontend login

Added by Oliver Hader almost 2 years ago. Updated almost 2 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2022-12-14
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
10
PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

Security fix for TYPO3-CORE-SA-2022-013 in https://review.typo3.org/c/Packages/TYPO3.CMS/+/77084 enforced the existence of an HMAC signed pid value. There have been reports in custom authentication services, where this might be problematic (albeit it could be solved). To provide better backward compatibility, a new feature flag is introduced.

Actions
Copy link
 #1

Updated by Gerrit Code Review almost 2 years ago

  • Status changed from New to Under Review

Patch set 1 for branch 10.4 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/77130

Actions
Copy link
 #2

Updated by Gerrit Code Review almost 2 years ago

Patch set 1 for branch 11.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/77155

Actions
Copy link
 #3

Updated by Oliver Hader almost 2 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
Actions
Copy link
 #4

Updated by Benni Mack almost 2 years ago

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: Atom PDF