Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SHA-1 is a weak hash known to have hash collisions. #758

Closed
ftopacho opened this issue Jul 23, 2024 · 4 comments
Closed

SHA-1 is a weak hash known to have hash collisions. #758

ftopacho opened this issue Jul 23, 2024 · 4 comments

Comments

@ftopacho
Copy link

ftopacho commented Jul 23, 2024

I have this issue around use of weak Hashes for Huawei proprietary libraries. Would upgrading the libraries help remediate the vulnerability?
The huawei libraries am using are being flagged for weak hashing algorithms.

View attachment for assistance

@juliansteenbakker
Copy link
Collaborator

Hi, a possible fix for this issue will be discussed in #769

@ftopacho
Copy link
Author

Have you tested the solution and fully confirm that it addresses the vulnerability. Because I thought this is being flagged from Huawei libraries that am using.

@juliansteenbakker
Copy link
Collaborator

Hi, i have not tested anything yet since it is still a work in progress. Do you have any more information for me? I don't see any attachments.

@ftopacho
Copy link
Author

Let me get information and share

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants