Posts31-40
Log4j 2: New vulnerability on DoS in 2.16.0 and below
Log4j 2.17.0 was released due to security reason. It fixes DoS vulnerability in 2.16.0 and below on v2.
As to the new vulnerability on DoS (denial-of-service), it’s safe with a default Pattern Layout where a Context Lookup such as
... Read$${ctx:loginId}are NOT used in logging configuration. Otherwise, the CVSS score is 7.5 and the severity is high.New Log4j vulnerability was found in 2.15.0 which is less dangerous
About Apache Log4j RCE vulnerability (CVE-2021-44228)
Summary
- Caused by Apache Log4j’s JNDI (“Java Naming and Directory Interface”) features.
- How is it severe? The CVSS score is 10, the maximum, which means the highest risk.
Description
CVE-2021-44228 (named “log4shell” or “log4jam”): Remote code execution (RCE) severe vulnerability, discovered in Log4j, affects a wide range.
... ReadApache Log4j RCE vulnerability (CVE-2021-44228): Attack trials detected
Today, our company detected attack trials on Apache Log4j RCE vulnerability (CVE-2021-44228) due to its JNDI (“Java Naming and Directory Interface”) features to one of our servers in Swiss:
... ReadFix Flutter doctor failed due to java.lang.NoClassDefFoundError
Trouble
I updated Flutter version to 2.2.0 on my Arch Linux today. Then I met the error “Android license status unknown.” in running
... Readflutter doctorfor the first time. It seemed strange because I had already run it with an option:flutter doctor --android-licenses. Anyway, there was no way except running it again. And the result was:Fix Flutter doctor failed due to permission denied on Linux
Problem
When I tried to install Flutter 2 on Linux, running
flutter doctorwas required.Running it, however, resulted in the “Permission denied” error below.
... ReadFix missing Flutter menus in Android Studio
Problem
When I struggled to build Flutter 2 development environment with Android Studio in Arch Linux, I sometimes met the situation where Flutter menus were missing. I installed Flutter and Dart via pacman and also “Configure"d “Plugins” of them on Android Studio. The start menus didn’t show, however, Flutter menus.
... ReadFlutter 2 on Arch Linux: Getting started
Fix rustup failed with "error: linker `cc` not found" on Alpine Linux 3.13 (Rust 1.50)
Summary
Today, I made a Dockerfile for Rust development on Alpine Linux. I met the error below when installing Rust with Rustup:
... ReadDocker 19.03 without sudo