Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-12701

ACL secured by SHA1 algorithm too weak/out dated

    Details

      Description

      SHA1 is known as unsecure/weak.
      There should be a secure hashing alternative.

      PCI Certified Enterprises can expect problems with auditing.

      https://www.heise.de/security/meldung/Todesstoss-Forscher-zerschmettern-SHA-1-3633589.html
      https://shattered.it/

        Attachments

          Issue Links

          is duplicated by

          Task - A task that needs to be done. MDEV-12160 Modern alternative to the SHA1 authentication plugin

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

            Activity

              People

              • Assignee:
                serg Sergei Golubchik
                Reporter:
                adamk Adam Kubina
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: