Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-12701

ACL secured by SHA1 algorithm too weak/out dated

    XMLWordPrintable

Details

    Description

      SHA1 is known as unsecure/weak.
      There should be a secure hashing alternative.

      PCI Certified Enterprises can expect problems with auditing.

      https://www.heise.de/security/meldung/Todesstoss-Forscher-zerschmettern-SHA-1-3633589.html
      https://shattered.it/

      Attachments

        Issue Links

          is duplicated by

          Task - A task that needs to be done. MDEV-12160 Modern alternative to the SHA1 authentication plugin

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            People

              serg Sergei Golubchik
              adamk Adam Kubina
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.