Log4j�̍ė��H�@CUPS�̐Ǝ㐫�͂Ȃ��܂ŉߑ�]��ꂽ�̂��FCybersecurity Dive (original) (raw)

UNIX�n�̈��V�X�e��uCUPS�v�̒v��I�ȐƎ㐫�́A��2021�N�Ɍ��Apache Log4j�̐Ǝ㐫�Ɣ�r��̂ƌ��O��Ă��A��i�݁u��܂łł͂Ȃ��v�Ɣ��f��ꂽ�B�Ȃ��܂ŉߑ�]��ꂽ�̂��B

» 2024�N10��13�� 08��00�� J

��̋L��ł��B��o�^��ƑS�Ă��܂��B

�@�I�[�v��\�[�X�\�t�g�E�F�A�R�~��j�e�B�[�͏T��Ɉꑧ��Ƃ��ł��B�uUNIX�v�n�̈��V�X�e��uCUPS�v�̒v��I�ȐƎ�i��Ⴍ�j��Ɋ֘A��A�uLinux�v�̃V�X�e��S�̊�@�ɂЂ񂷂�Ƃ��̌��O��A�Z�L��e�B��҂ɂ��Ęa�炰��ꂽ��߂��B

Log4j�̍ė��H�@CUPS�̐Ǝ㐫�͂Ȃ��܂ŉߑ�]��ꂽ�̂�

�@CUPS�̐Ǝ㐫�́i��1�j�A��[�U�[��J�n��ۂɐƎ�ȃV�X�e��U��҂ɏ��\��̂��B��2021�N�Ɍ��uApache Log4j�v�i�ȉ��ALog4j�j�̐Ǝ㐫�̊�@�Ɣ�r��ꂽ��A��҂��̓��[�U�[�̑��삪�K�v�Ȃ��Ƃ��u��̃P�[�X�͂��قǑ傫��O��̂ł͂Ȃ��v�Ɠ`��B

�@��Ƃł��Forrester�̃G��b�N�E�m�X�g��i�V�j�A�A�i��X�g�j�́A�d�q��[��Ŏ��̂悤�ɏq�ׂ��B

�@�u��ȐƎ㐫�̓j��[�X�ɉe��^��Ă��邪�A��ɂ��đg�D��ً}�Ή��K�v�Ƃ��邩�ǂ��܂�킯�ł͂Ȃ��v

�@�uCVE-2024-47076�v�i��2�j�A�uCVE-2024-47175�v�i��3�j�A�uCVE-2024-47176�v�i��4�j�A�uCVE-2024-47177�v�Ƃ��ă��X�g�Ɍf�ڂ��Ă��邱��̐Ǝ㐫��p��邱�ƂŁi��5�j�A�U��҂̓v��^��IPP��URL��ӂ̂��o�[�W��ɒu��A��̌�R�}��h��s�ł��\��B

�@�Z�L��e�B��҂̃V��[�l�E�}��K��e�b��́A�ȑO�ɂ��̐Ǝ㐫�𔭌��Ă��A��ʂ��\��ɑΉ��Ă��Ȃ��Ƃւ̌��O��A��J�̗\��𑁂߂錈�f��B

�@��J�Ɋւ��鐧��t��̌v�悪�Z�L��e�B�R�~��j�e�B�[��Ō֒��A�Ǝ㐫�̈��p��X�N��ߑ�]��ꂽ�B��Log4j�̊�@�ƈقȂ�ACUPS�̐Ǝ㐫��p��ۂɂ̓��[�U�[�ɂ�鑀�삪�K�v�ŁA�U��҂ɂ�鈫�p�̂��߂ɂ͕��̃X�e�b�v��K�v��B

�@DevOps�c�[��`�F�[��̃\��[�V��񋟂��JFrog�̃��C�[��E�~�Y��q��i�V�j�A�Ǝ㐫��ҁj�́A�d�q��[��Ŏ��̂悤�ɏq�ׂ��B

�@�u��҂̃��|�[�g�ŋ��Ă��Ȃ��̂́A�v��^��Z�b�g��ł��A��ȃR�[�h��s��g��K�[�ƂȂ�̂́A��[�U�[��V��ǉ��ꂽ�v��^�Ɉ��W��u��X�P�W��[��Ƃ��Ƃ��_�ł��v

�@��҂��́ACUPS�̐Ǝ㐫�̖{��ɑ΂��鍬��邽�߂ɂ́A��J�Ɋւ��钲��苭��K�v��Ǝw�E��Ă��B

�@Open Source Security Foundation�iOSSF�j�̋Z�p��ψ��̋c��ł��N��X�g�t�@�[�E��r��\��́A��̂悤�ɏq�ׂ��B

�@�u�c�O�Ȃ��A��҂��ɕ��Ă��s��͂��̎�̑�K�͂ŕ��G�ȏC��ɂ��Ă悭��̂��B�Ǝ㐫��v��W�F�N�g�ɋ��L��ہA��m�Ȋ��҂ƃ^�C��C��炩��ߐݒ肷�邱�ƂŁA��̂悤�Ȗ��C�⊴��I�ȑΗ��炷��ƂȂ�A�S��ʂ̖ڕW�Ɍ��Ď��g�߂�v

�@�T�C�o�[�Z�L��e�B��Ƃ��c��Sonatype�̃u��C�A��E�t�H�b�N�X��i��n�ݎҌ��ō��Z�p�ӔC�ҁj�́uCUPS�Ɋւ��Č��ҊԂő傫�Ȃ��Ƃ肪��̂��Ȃ��A��̖h��Ȃ��s�ӂ�˂��͏��Ă��ǂ��v�Ƙb��Ă��B

�@�u�K��Ȃ��ƂɁA�wLog4Shell�x�̂悤�ȑ�K�͂Ȕ�Q��h��߂̍L�͂ȏ��͕K�v�Ȃ��A��ł��ł��邩�A��S�ɕs�ӂ�˂��邩�ɂ͑傫�ȈႢ��B��O�Ɍx��󂯎�邱�Ƃ��ł��ǂ��v�i�t�H�b�N�X��j

�@2022�N�A�T�C�o�[��S�R��iCSRB�j�́i��6�j�ALog4j�̈��p��I�ɋ��Ă��قǂ̋K�͂ł͂Ȃ��Ƃ��w�E��񍐏��𔭕\��B��ACSRB��Log4j��u��[��Ǝ㐫�v�ƕ]��Ă��A��S�ȉ��ɂ͐��N��\��Əq�ׂĂ��B

Log4j�̍ė��H�@CUPS�̐Ǝ㐫�͂Ȃ������܂ŉߑ�]�����ꂽ�̂��FCybersecurity Dive (original) (raw)

Log4j�̍ė��H�@CUPS�̐Ǝ㐫�͂Ȃ������܂ŉߑ�]�����ꂽ�̂�

�֘A�L��

Log4j�̍ė��H�@CUPS�̐Ǝ㐫�͂Ȃ��܂ŉߑ�]��ꂽ�̂��FCybersecurity Dive (original) (raw)

Log4j�̍ė��H�@CUPS�̐Ǝ㐫�͂Ȃ��܂ŉߑ�]��ꂽ�̂�