Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-12701

ACL secured by SHA1 algorithm too weak/out dated

          Details

            Description

            SHA1 is known as unsecure/weak.
            There should be a secure hashing alternative.

            PCI Certified Enterprises can expect problems with auditing.

            https://www.heise.de/security/meldung/Todesstoss-Forscher-zerschmettern-SHA-1-3633589.html
            https://shattered.it/

              Attachments

                Issue Links

                is duplicated by

                Task - A task that needs to be done. MDEV-12160 Modern alternative to the SHA1 authentication plugin

                • Critical - Crashes, loss of data, severe memory leak.
                • Closed

                  Activity

                    People

                    • Assignee:
                      serg Sergei Golubchik
                      Reporter:
                      adamk Adam Kubina
                    • Votes:
                      0 Vote for this issue
                      Watchers:
                      3 Start watching this issue

                      Dates

                      • Created:
                        Updated:
                        Resolved: