Iko kukanganisa kwekusagadzikana kwakashata muJava library Log4j inodhonza. Kunyangwe iro dambudziko hombe rakagadziriswa nekuchimbidza chigamba 2.16, iyi vhezheni inoita senge inogona kushungurudzwa. Vatsvakurudzi vekuchengetedza vakawana musuwo weDenial of Service (DoS) kurwisa. Log4j 2.17 yakaburitswa kuvhara yekupinda.
Apache, mugadziri weraibhurari yeJava, anopa zano masangano kuti ashandise chigamba chekukurumidzira. Zano iroro rinoshanda kechitatu kubvira pakaonekwa kuti raibhurari yacho haina ngozi.
Vhiki nehafu yapfuura, vaongorori vekuchengetedza kubva kuAlibaba's cloud timu yekuchengetedza yakaratidza nzira yekushungurudza zvikumbiro neLog4j. Log4j inoshandiswa mumashandisirwo ekunyora zviitiko. Zvakazoitika kuti uwane maapplication neraibhurari kubva kunze nemirairo yekuuraya malware. Kushungurudzwa kunotora zvishoma kupfuura kukurumidza. Wedzera kune izvo zvinofungidzirwa kuitika kweraibhurari munzvimbo dzakawanda dzemakambani uye unonzwisisa chiyero chenjodzi yakatarisana nepasi rose IT landscape.
Vagadziri veSoftware vakaita seFortinet, Cisco, IBM uye akawanda evamwe vanoshandisa raibhurari mune yavo software. Vagadziri vavo vakashanda nguva yakawandisa mukupera kwesvondo Zvita 11 kugadzirisa yekutanga chigamba chekusagadzikana uye nekuchiendesa kumasangano evashandisi. Kudonha kwakafanana kwaitarisirwa kubva kuzvikwata zveIT mukati memasangano aya. Mazana ezviuru ekuedza kurwisa akaitika pasi rose. Munhu wose aifanira kushandura ku2.15 nokukurumidza sezvazvinogona - kusvikira 2.15 yakawanikwawo kuva yakaoma.
Zvimwe zvigadziriso zveraibhurari zvakaramba zvichigoneka muvhezheni 2.15. Kushandisa zvigadziriso izvi kwakasimudzira kusagadzikana. Shanduro 2.16 yakaita kuti zvigadziriso zvisaite, zvichivimbisa chigamba chitsva. Kazhinji kunyadziswa kwezvikwata zveIT zvakatonyanya kushanda. Zvisinei, inogona kugara ichinyanya kuipa, nokuti 2.16 inewo chirwere.
Kudzokera kunotanga
Kutarisisa kukuru kwepasirese kudambudziko kwakakurudzira kuferefetwa kukuru kwepasirese. Apache, mugadziri weraibhurari, haaite seanobata mweya wake kwemazuva maviri pasina kambani yekuchengetedza inonongedza dambudziko idzva, rinodzvanya.
Muchidimbu, zvinoratidzika kuti zvinokwanisika kumhanyisa akawanda ezvinyorwa zvelog4j - kusanganisira 2.16 - nemutsara mumwe (tambo) kutanga chiuno chisingaperi chinopunzika application. Mamiriro ezvinhu anofanira kusangana nemhoteredzo kuti ashandiswe akawandisa. Zvakawanda zvekuti kukomba kwedambudziko kunopokana. Iyo chigamba inokurudzirwa zviri pamutemo, asi havasi vese vanogutsikana.
Zvekare, kwete ese chiitiko cheLog4j chiri panjodzi, asi chete zviitiko apo raibhurari iri kushanda pane yakasarudzika marongero. Anogona kurwisa anodawo ruzivo rwakadzama rwekuti Log4j inoshanda sei. Musiyano wepakutanga, kusvikirwa nyore nyore.