ImageX: DrupalCon Portland 2024: Top Session Picks from Our Team

Authored by: Nadiia Nykolaichuk 

“Join us this spring in the City of Roses, Portland!”

— the DrupalCon team

The best opportunity to grow your Drupal skills, plant the seeds of connection, and help the Drupal community flourish is just around the corner! This spring, the world’s biggest Drupal meetup is coming back to the City of Roses, which is one of the most famous nicknames for Portland, Oregon.

CVE-2024-27281: RCE vulnerability with .rdoc_options in RDoc

We have released the RDoc gem version 6.3.4.1, 6.4.1.1, 6.5.1.1 and 6.6.3.1 that have a security fix for a RCE vulnerability.
This vulnerability has been assigned the CVE identifier CVE-2024-27281.

Details

An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0.

When parsing .rdoc_options (used for configuration in RDoc) as a YAML file, object injection and resultant remote code execution are possible because there are no restrictions on the classes that can be restored.

When loading the documentation cache, object injection and resultant remote code execution are also possible if there were a crafted cache.

Recommended action

We recommend to update the RDoc gem to version 6.6.3.1 or later. In order to ensure compatibility with bundled version in older Ruby series, you may update as follows instead:

  • For Ruby 3.0 users: Update to rdoc 6.3.4.1
  • For Ruby 3.1 users: Update to rdoc 6.4.1.1
  • For Ruby 3.2 users: Update to rdoc 6.5.1.1

You can use gem update rdoc to update it. If you are using bundler, please add gem "rdoc", ">= 6.6.3.1" to your Gemfile.

Note: 6.3.4, 6.4.1, 6.5.1 and 6.6.3 have a incorrect fix. We recommend to upgrade 6.3.4.1, 6.4.1.1, 6.5.1.1 and 6.6.3.1 instead of them.

Affected versions

  • Ruby 3.0.6 or lower
  • Ruby 3.1.4 or lower
  • Ruby 3.2.3 or lower
  • Ruby 3.3.0
  • RDoc gem 6.3.3 or lower, 6.4.0 through 6.6.2 without the patch versions (6.3.4, 6.4.1, 6.5.1)

Credits

Thanks to ooooooo_q for discovering this issue.

History

  • Originally published at 2024-03-21 4:00:00 (UTC)

Posted by hsbt on 21 Mar 2024

Chuwi MiniBook X (2023): a lot of laptop for very little money

Chuwi MiniBook X (2023): a lot of laptop for very little money
What if the kind of laptop you’re looking for just isn’t available from any of the major or even minor manufacturers? You know exactly what you want out of a laptop, and while quite a few fulfill many of your requirements, the requirement that matters most just isn’t being made. It’s not a case of “too expensive” or “too cheap” – simply nobody will sell it to you. From HP, Dell, Apple, down to smaller and local OEMs, none of them can serve your particular set of needs. For me, that particular requirement, that particular need is that of the laptop with an 8″ to 10″ screen size. Even the most portable laptops sold by well-known brands today stop at 13″, often even 14″, with nowhere to go but up. I currently have a 13.3″ laptop – an otherwise excellent XPS 13 9370 with a gorgeous 4K display – but as much as I love it, it’s just too big and heavy for me. I want something smaller, no bigger than roughly 10″. Why? Well, I use my laptop in exactly two locations: on the couch in one of our two living rooms, or in bed (okay that’s technically three locations). That’s it. I work from home on my workstation, I play games on my gaming PC, so I don’t need big performance on the road, nor do I need a big portable display to make working on the go bearable. On top of all this, I have two small kids running around the house, so a laptop that is easier to quickly close and put out of harm’s way is very welcome. And considering the most intensive workload it’ll ever have to contend with is playing YouTube video, I don’t need the latest Core i7 or Apple M3 either. Why not a tablet, then? First and foremost, I want to use a desktop operating system, not Android or iOS, since writing OSNews posts or doing a quick translation for my job are not fun experiences on mobile operating systems. On top of that, a tablet with a keyboard accessory often makes use of a kickstand and flappy keyboard, which are cumbersome to use on the couch, in bed, or on your lap. The exception here would be the iPad with a Magic Keyboard, but that’s an incredibly expensive affair and an Apple product, so obviously a no-go. Luckily, while the kind of small laptop I’m looking for is not available from one of the major OEMs, there are a small number of specialised OEMs that do focus on making small laptops. Roughly, the devices they make fall into one of three pricing categories. First, there’s the high-end – these usually start at around €800 or so and get well over €1000, and have a decent set of specs, often focused on gaming by opting for AMD APUs. A major player in this market is GPD, who’ve been offering products in this segment for years, and are actually a decently well-known brand at this point, even being featured on major YouTube channels like Linus Tech Tips. Then there’s the very low end, a market segment drowning in the exact same 7″ laptop priced at €250 or so, sold under a variety of brand names, sporting the same low-end Celeron chip and rather crappy display. It’s also quite thick, made out of cheap plastic, and every review I’ve seen of these are not particularly positive. Unless you know what you’re getting into, do not buy these. They’re e-waste trash. In recent times, however, a middle segment has slowly started to take shape, coming in price points in between the low and high end, with reasonable specifications and build quality, without going overboard. This was exactly what I was looking for. Aside from price and specifications, mini-laptops also come in a variety of different input layouts. Being smaller than other laptops, some compromises will have to be made, and it’s this particular aspect that will most likely play a major role in which models appeal to you. The gaming-focused mini laptops will often come with dual joysticks and face buttons, while other models will come with a more traditional keyboard and trackpad, and the smallest laptops in this category ditch the trackpad in favour of a little sensor pad in the top-right of the keyboard, or a ThinkPad-style nipple. Having kept and eye on this market for years now, I knew exactly what I was looking for: I wanted a traditional keyboard and touchpad layout, with medium specifications, a capable display, and all-metal construction, for no more than roughly €400-500. Clearly, the time to strike was now, as the small, budget-oriented OEM Chuwi had just updated its 10″ mini laptop with Intel’s latest low-power processor, the N100. The Chuwi Minibook X (2023), as it’s called, has an all-aluminium construction, and comes with quite decent specifications, and I managed to snag a new model through their eBay store for a mere €320 (I asked them for a discount down from €400 , and they gave it; I did not mention who I was or that I run OSNews). It has the aforementioned Alder Lake Intel N100 – released earlier this year, it’s an Intel 7 processor with 4 cores and 4 threads (so no hyperthreading) with a maximum turbo frequency of 3.4 Ghz, with a TDP of just 6 W. It’s not going to compare well to the various Core i3/i5/i7 processors, of course, but considering the type of device, it makes perfect sense to opt for something like the N100. Furthermore, this device is packing 12 GB of LPDDR5 RAM running at 4800 Mhz, and my model comes with a 512 GB SSD. The display is a 10.3″ panel with a native resolution of 1920×1200, with a refresh rate of only 50Hz (although some people managed to reach 60Hz and even 90Hz), and support for touch. Ports-wise, it has two USB-C ports (one marked as compatible with charging – I haven’t dared

Website Development Company

Addon Solutions is Custom Web Development Company in India Provide Web Development solutions like Affordable Web Development, Web Development India, Offshore Web Development, Hire Web Developers, Open Source Web Development in USA, UK, France, Netherlands and world Wide. Get Web Development Services for Affordable price for Custom Web Development.

Fast Charging | android phone fast charging | android mobile fast charging app

Fast Charging | android phone fast charging | android mobile fast charging app

Charging background knowledge:
There are two ways to charge faster:
The first is to use a higher power AC charger and avoid using USB charging because the current is too low;
The second is to reduce the power consumption and load of the phone as much as possible during the charging process to reduce the loss of electricity. If the electricity consumption can be reduced, the phone can be charged faster. For example, under normal circumstances, the phone can be charged for 1000mAh in an hour. But if the phone is continuously under high load, such as playing games, watching HD videos or turning on the flashlight, it may consume 300mAh in one hour. In this case, only 700mAh can be charged in one hour. However, if the electricity consumption can be reduced to 100mAh, the phone can be charged for 900mAh in one hour. This means that the charging speed indirectly increased by nearly 30%.

Explanation of the function description:

☆ Try to stop the work of your own background thread when charging.
During charging, avoid running background threads to reduce power consumption.

☆ Reduce screen brightness, reduce power consumption and reduce power consumption.
The screen LED is one of the main factors that consumes electricity, and reducing the screen brightness is a very effective way to reduce energy loss.

☆ Notify users to deal with abnormal power consumption increase in a short time.
If the electricity consumption speed increases in a short period of time, it indicates that there may be non-normal CPU loads. Users need to be reminded to handle them.

☆ Optimize WiFi, GPS, Bluetooth and other system settings to reduce mobile phone consumption.
Suggest that users turn off power-consuming devices such as WiFi, GPS, Bluetooth, and automatic sync to reduce power consumption.

☆ Real-time monitoring of mobile phone temperature, remind users to unplug the charger to prevent overheating.
During charging, it will periodically monitor the temperature of the mobile phone. If it exceeds a certain threshold, it will remind the user that the phone is too hot and pay attention to safety.

☆ Accurately predict the remaining charging time and reset fully charged.
Through algorithms, estimate the time required to charge fully, to prevent overcharging and affect the battery life.

#fastcharging #fastchargebattery #androidurdu

Hello Dear’s ♥♥,
I’m Naseer And U Watching Android Urdu Youtube Channel, In This Channel I upload Daily Videos About Android Mobile, Android Apps, WhatsApp, Facebook Tips & Tricks,
So I Requset that If U intersted Android Tips & Tricks U Can Subscribe My Youtube Channel..Becuse I Upload Daily Fresh Tips & Tricks Videos.Thanks

Salarkhal0463@gmail.com

Join My Accounts Free;

1- WhatsApp Channel
https://bit.ly/3FmqUfz

2 – WhatsApp Group
http://bit.ly/3mWBqjS

3- Follow My Fb Page:
http://bit.ly/33a9KlI

4- My Telegram Group
http://bit.ly/3r1GyXl

How to Fix ‘Your Connection is Not Private Error in WordPress

Making sure your users have a secure connection is one of the most important things you can do to keep your website safe and trustworthy.
But you may have seen the scary “Your Connection is Not Private” error in WordPress. Both website owners and users can be annoyed whenever they get this notification.
In this complete guide, we will take the mystery out of this error. I will explain where it comes from, and show you step-by-step ways to fix it.
https://wpclerks.com/fix-connection-not-private-wordpress/

Join us for the Moodle Academy webinar “Moodle Tracker for Non-Techies” on Monday 25th March, 13:00 UTC

Join us for the Moodle Academy webinar “Moodle Tracker for Non-Techies” on Monday 25th March, 13:00 UTC
by Sandra Matz.  

As a Moodle user, have you ever needed to search the Tracker, comment or vote on an issue or even create an issue yourself? Did you find the process daunting?

If so, join Community Engagement Advisor Helen Foster for a non-technical introduction to the Moodle Tracker, including tips for successful searching and advice on how to report a bug or suggest a new feature. This free webinar will be held on Monday 25th March at 13:00-14:00 UTC.

This webinar is part of the course ‘Moodle Academy webinars‘. You have to be enrolled in this free course to register and join the webinar.

Register at Moodle Academy.

Join us for the Moodle Academy webinar “Moodle Tracker for Non-Techies” on Monday 25th March, 13:00 UTC