CVE-2022-42889, aka “Text4Shell”, is a vulnerability in the popular
Java library “Apache Commons Text” which can result in arbitrary
code execution when processing malicious input.More information can
be found at GitHub advisory or this
Apache thread.
What can an attacker do?
If you’re vulnerable, an attacker can inject malicious input
containing keywords which can trigger:
With the rise of remote-first and hybrid work models in the tech
world, promoting developer engagement has become more important
than ever.Maintaining a culture of engagement, productivity, and
collaboration can be a hurdle for businesses making this new shift
to remote work.But it’s far from impossible.
As a fully-remote, developer-focused company, Docker was thrilled
to join in a like-minded conversation with RedMonk and Miva.Jake
Levirne (Head of Product at Docker) was joined by Jon Burchmore
(CTO at Miva) for a talk led by RedMonk’s Sr.
Are you looking for even simpler and faster ways to do what you
need in Docker Desktop?Whether you’re an admin looking for new ways
to secure the supply chain or a developer who wants to discover new
Docker Extensions or streamline your use of Dev Environments,
Docker Desktop 4.13 has the updates you’re looking for.Read on to
see what’s part of this release!
Enhanced security and management for Docker Business
customers
With this release, we’re introducing a new Docker Desktop security
model:Hardened Docker
While containers help developers rapidly build and run
cross-platform applications, creating error-free apps remains a
constant challenge.And while it’s not always obvious how container
errors occur, this mystery is even harder for newer developers to
unravel. Figuring out how to debug Docker containers can seem
daunting. In this Community All-Hands session, Ákos Takács
demonstrated how to solve many of these pesky problems and gain the
superpower of fixing containers.
Each issue can impact your image builds and final
You may have seen some hype around WebAssembly, or Wasm, as it’s often called.It’s a
relatively new technology that allows you to compile application
code written in languages like Rust, C, C++, Javascript, and Golang
to byte code, then run it inside a sandboxed environment. So why
all the hype?Well, those sandboxed environments can run in a large
variety of locations — including your web browser using a
Javascript virtual machine.Not only does this mean the sandbox
benefits from billions of dollars of
