Adamu Kos A makon da ya gabata an bayyana cewa wani rami na tsaro a cikin kayan aikin log4j mai buɗewa yana jefa miliyoyin aikace-aikacen da masu amfani da su a duniya ke amfani da su cikin haɗari. Masana harkokin tsaro na Intanet da kansu sun bayyana shi a matsayin mafi girman raunin tsaro a cikin shekaru 10 da suka gabata. Kuma ya shafi Apple, musamman iCloud.
Log4j kayan aiki ne na buɗaɗɗen shiga yanar gizo da aikace-aikace ke amfani dashi. Saboda haka za a iya amfani da ramin tsaro da aka fallasa a zahiri a zahiri miliyoyin aikace-aikace. Yana ba masu kutse damar gudanar da muggan code akan sabar masu rauni kuma ana iya zargin su da shafar dandamali kamar iCloud ko Steam. Wannan, haka kuma, a cikin tsari mai sauqi qwarai, wanda shine dalilin da ya sa kuma aka ba shi digiri na 10 cikin 10 dangane da mahimmancinsa.
Baya ga hatsarori da ke tattare da yaɗuwar amfani da Log4j, yana da matuƙar sauƙi ga maharin yin amfani da Log4Shell. Dole ne kawai ya sanya aikace-aikacen ya adana jerin haruffa na musamman a cikin log ɗin. Saboda aikace-aikace akai-akai suna shigar da abubuwa iri-iri, kamar saƙon da aka aiko da karɓa ta masu amfani ko cikakkun bayanai na kurakuran tsarin, wannan raunin yana da sauƙin amfani da ba a saba gani ba, kuma ana iya haifar da shi ta hanyoyi daban-daban.
Zai iya zama sha'awar ku
Apple ya riga ya amsa
A cewar kamfanin Kamfanin Eclectic Light Company Apple ya riga ya gyara wannan rami a cikin iCloud. Gidan yanar gizon ya bayyana cewa har yanzu wannan raunin iCloud yana cikin haɗari a ranar 10 ga Disamba, yayin da kwana ɗaya bayan haka ba za a iya amfani da shi ba. Amfani da kanta ba ya bayyana ya shiga macOS ta kowace hanya. Amma Apple ba shine kaɗai ke cikin haɗari ba. A karshen mako, alal misali, Microsoft ya gyara rami a Minecraft.
Idan ku masu haɓakawa ne kuma masu tsara shirye-shirye, kuna iya duba shafukan mujallar tsirara, inda za ku sami cikakkiyar labarin da ke tattauna batun gaba ɗaya.
