Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-12701

ACL secured by SHA1 algorithm too weak/out dated

    XMLWordPrintable

    Details

      Description

      SHA1 is known as unsecure/weak.
      There should be a secure hashing alternative.

      PCI Certified Enterprises can expect problems with auditing.

      https://www.heise.de/security/meldung/Todesstoss-Forscher-zerschmettern-SHA-1-3633589.html
      https://shattered.it/

        Attachments

          Issue Links

          is duplicated by

          Task - A task that needs to be done. MDEV-12160 Modern alternative to the SHA1 authentication plugin

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

            Activity

              People

              Assignee:
              serg Sergei Golubchik
              Reporter:
              adamk Adam Kubina
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: