Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

All VCID are created with similar "aaa" suffix! #1579

Closed
pombredanne opened this issue Sep 2, 2024 · 2 comments · Fixed by #1571
Closed

All VCID are created with similar "aaa" suffix! #1579

pombredanne opened this issue Sep 2, 2024 · 2 comments · Fixed by #1571
Assignees
@pombredanne
Labels
1-next bug

Comments

@pombredanne
Copy link
Member

All VCIDs the are generated with similar aaa suffixes:

VCID-111c-u9bh-aaac
VCID-111e-ksxg-aaaj
VCID-111u-8dyk-aaas
VCID-111u-e1ne-aaaq
VCID-111y-ch3k-aaas
VCID-1121-h7qj-aaab
VCID-1126-y2e1-aaas
VCID-112b-57q4-aaac
VCID-112d-zjff-aaap
VCID-112g-p831-aaak
VCID-112h-ztww-aaad
VCID-112s-d8hf-aaag

We need to fix this ASAP, as we are not using the full 60 bits of entropy we are supposed to0 use.
@pombredanne pombredanne self-assigned this Sep 2, 2024
@pombredanne pombredanne added the bug label Sep 2, 2024
@pombredanne
Copy link
Member Author

This has been reported by @tdruez and I have a fix for this

pombredanne added a commit that referenced this issue Sep 11, 2024
@pombredanne
Generate correct VCIDs
2a270ce 
Reference: #1579
Reported-by: tdruez <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
@pombredanne
Copy link
Member Author

This has been fixed now and also released in https://pypi.org/project/aboutcode.hashid/

TG1999 pushed a commit that referenced this issue Sep 16, 2024
@pombredanne @TG1999
Generate correct VCIDs
c1c798d 
Reference: #1579
Reported-by: tdruez <[email protected]>
Signed-off-by: Philippe Ombredanne <[email protected]>
@pombredanne pombredanne mentioned this issue Sep 29, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@pombredanne pombredanne

Labels
1-next bug
Projects
04-VulnerableCode Data Quality and next
Status: Done
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Improve export command aboutcode-org/vulnerablecode
1 participant
@pombredanne