installing expo expo/webpack-config#18.0.1 has a lot of vulns - expo

I was installing #expo/webpack-config#18.0.1 when I noticed 28 new vulnerabilites. I could deal with the 5 that SDK 47.0.0 as I understand the vulnerability. Although 28 Is this safe? a alternative? I would like my app to be cross platform with web but is it worth it ? Should I be worried?

Related

Cold Fusion - New Server - Too many client tasks

I am trying to fine tune a ColdFsuion 2016 server.
On new Virtual Machine every once in awhile I am getting a:
Error Executing Database Query.[Macromedia][SequeLink JDBC Driver][ODBC Socket][Microsoft][ODBC Microsoft Access Driver] Too many client tasks.
I am going through many configurations and performance updates etc and trying to be sure the server settings are the same. Links here included for references.
New VMachine:
AMD EPVC 7542 32-Core Processor # 2.9 GHz
Memory: 4 GB
Windows Server 2016 : 64 bit
ColdFusion 2016
Data Connection: 1GB Down and 1 GB Up
Database Used: MS Access (I know but Access works fine - lol)
I was running Windows 2012 Server with ColdFusion 2016 : and rarely had any issues.
Previous VMachine:
Intel Xeon X5660 # 2.8 GHz (2 processors)
Memory: 45 GB (about 6GB used)
Windows Server 2012 : 64 bit
ColdFusion 2016
Data Connection: 1GB Down and 100mb Up (don't care about Download)
Database Used: MS Access (I know but Access works fine - lol)
Is there a way to see if potentially there is a different database driver on old vs new machine.
Is this a server memory issue? Thoughts anyone.
Error Executing Database Query.[Macromedia][SequeLink JDBC Driver][ODBC Socket][Microsoft][ODBC Microsoft Access Driver] Too many client tasks.
Some performance fine tuning links. I am doing all suggested and recommended settings. And also looking at previous settings in CF Admin.
https://coldfusion.adobe.com/2018/03/coldfusion-performance-issues-and-optimization/
https://www.cfguide.io/coldfusion-administrator/
A quick Google search on "[ODBC Microsoft Access Driver] Too many client tasks." turns up a number of issues related to the fact that MS Access is a desktop application and not suited for a web server. It may just "work fine" for development, but it is a liability in a production environment.
You may be able to find a short-term solution for this problem, but the only real fix is to convert your database to MySQL or SQL Server depending on your needs.

Visual Studio 2017 installer extremely slow

I tried to install the latest VS 2017 Update yesterday and since then I cannot get it to finish this.
This worked pretty fine in the last months and stopped working yesterday.
I already tried to do the following:
Uninstall VS 2017
Remove folder %PROGRAMFILESx86%\Microsoft Visual Studio\2017
Remove folder %PROGRAMDATA%\Microsoft\Visual Studio
Restart machine
I have a 50 MBit/s download rate and all other apps are working just fine. If I look into the logs I can see failed downloads when I abort the instalation. When I pick one of the URLs there and just download the vsix directly via the browser it just works.
Is there any caching or network setting that might be useful in this case?
UPDATE
I have tried 2 downloads (WLAN) from MS servers right now:
Has MS issues on certain download servers maybe and what to do or whom to tell in those cases?
I had the same problem with VS2017 Preview. I disabled IPV6 in the network adapter properties. After that the installer ran with full download speed.
After some heavy investigation and because of the feedback of trinitrotoluol I solved the issue by using an external VPN endpoint. That means, that my German hoster (Telekom) has got problems with some Microsoft download-servers. We contacted them but (not very suprisingly) there is no way to encourage them to examine their network a little bit deeper. So turns out that we have to wait until they fix this back or use a VPN client for such cases.
change download location via hosts (C:\Windows\System32\drivers\etc) entries:
I checked alternative servers with ping-test.ru
For example:
93.184.215.201 download.visualstudio.microsoft.com
or
68.232.34.200 download.visualstudio.microsoft.com
or
192.229.232.200 download.visualstudio.microsoft.com
or
27.22.54.160 download.visualstudio.microsoft.com

IIS ARR - offline installation?

trying to install IIS ARR, last time did it successful via the web platform online installer,however, our production servers are blocked of all internet connections, any way to do an offline installation of that? Really appreicate the help in advance!!
if the server use 64 bit OS, yes you can, just download the below package
https://www.microsoft.com/en-us/download/confirmation.aspx?id=47332

ColdFusion 9 / Win Server 2008 - Incorrect Perfmon Values

We've recently upgraded from CF 8 Enterprise to CF 9 Enterprise with hotfix 1.
What we have noticed is that some CF 9 counters accessed via perfmon are now giving crazy values.
I recall something very similar happening when we upgraded to CF 8, but that was addressed by the following hotfix:
http://kb2.adobe.com/cps/404/kb404026.html (discussion here)
In that issue the cfperfmon_8.dll was replaced.
Three of our recently upgraded Windows Server 2008 CF 9 servers are displaying a very similar issue. In my Windows event log I'm seeing a lot of these issues:
The data buffer created for the "ColdFusion 9 Application Server" service in the "C:\Windows\system32\cfperfmon_9.dll" library is not aligned on an 8-byte boundary. This may cause problems for applications that are trying to read the performance data buffer. Contact the manufacturer of this library or service to have this problem corrected or to get a newer version of this library.
Is there a similar fix available for CF 9?

How do I monitor ColdFusion in Resin?

I have ColdFusion 8 installed on resin-3.1.9 (Linux). On my standalone ColdFusion server, I can use /opt/coldfusion8/bin/cfstat to monitor active and queued requests.
On Resin, with ColdFusion 8 installed as a multi-server install, I don't know how to get this information. Can someone help me?
I have tried server monitor through ColdFusion 8 and it doesn't show me the queued request. I can't even find that information in FusionReactor.
I tried using <statistics-enable>true</statistics-enable> in /opt/resin/conf/resin.conf; however, I don't know where that information is outputted and if it would even help me.
According to ColdFusion 8 system requirements, Resin is not supported.
You may want to use one of the followings to save you some trouble:
WebLogic 8.1, 9.2, 10
WebSphere 5.1.1, 6.1, 6.1
Oracle Application Server 10g R1-R3
JRun 4 Updater 7
JBoss 4.0.3, 4.0.5, 4.2
You might look at FusionReactor, it lists Railo Resin support, so it might work for ColdFusion Resin, and you could use the trial to test it, or just ask them.