News for hackers. Stuff that matters.

A comment on Third High Severity CVE in Log4j Is Published. Parent comment

Re:Third High Severity CVE in Log4j Is Published by Too on Sunday December 19, 2021 @01:44AM (#29611976)
That doesn’t provide a link back to the source, unless you store that hash elsewhere. Giving you the problem of maintaining a database also.
[ Parent | on HN ]
Re:Third High Severity CVE in Log4j Is Published by pabs3 on Friday December 24, 2021 @04:39AM (#29672079)
You store the source packages alongside the binary packages, and then index hashes of all the source/binary package contents. Then you know which source files were used from which source/binary packages to produce a particular executable.
[ Parent | on HN ]