News

CVE-2024-49761: ReDoS vulnerability in REXML

by

There is a ReDoS vulnerability in REXML gem. This vulnerability has been assigned the CVE identifier CVE-2024-49761. We strongly recommend upgrading the REXML gem.

This does not happen with Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby. Note that Ruby 3.1 will reach EOL on 2025-03.

Details

When parsing an XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;).

Please update REXML gem to version 3.3.9 or later.

Affected versions

  • REXML gem 3.3.8 or prior with Ruby 3.1 or prior

Credits

Thanks to manun for discovering this issue.

History

  • Originally published at 2024-10-28 03:00:00 (UTC)

Posted by kou on 28 Oct 2024

What’s new in POSIX 2024 – XCU

by
As of the previous release of POSIX, the Austin Group gained more control over the specification, having it be more working group oriented, and they got to work making the POSIX specification more modern. POSIX 2024 is the first release that bears the fruits of this labor, and as such, the changes made to it are particularly interesting, as they will define the direction of the specification going forwards. This is what this article is about! Well, mostly. POSIX is composed of a couple of sections. Notably XBD (Base Definitions, which talk about things like what a file is, how regular expressions work, etc), XSH (System Interfaces, the C API that defines POSIX’s internals), and XCU (which defines the shell command language, and the standard utilities available for the system). There’s also XRAT, which explains the rationale of the authors, but it’s less relevant for our purposes today. XBD and XRAT are both interesting as context for XSH and XCU, but those are the real meat of the specification. This article will focus on the XCU section, in particular the utilities part of that section. If you’re more interested in the XSH section, there’s an excellent summary page by sortix’s Jonas Termansen that you can read here. ↫ im tosti The weekend isn’t over yet, so here’s some more light reading.

La première voiture SOLAIRE arrive bientôt !

by
Pour parler de la vidéo avec des gens passionnés tech : / discord

Mon setup COMPLET (PC / Caméra / Autres) : http://textup.fr/248446PT

Si vous voulez me soutenir, vous pouvez le faire en achetant vos produits technologiques avec ce lien : https://leotechmaker.com/me-soutenir
(Vous ça ne vous change rien au prix de ce que vous achetez, moi je récupère un % de la vente, merci ❤️❤️)

SUIVEZ MOI ICI PARTOUT POUR NE JAMAIS ARRÊTER D’APPRENDRE !
—————————————————
Twitter: / leotechmaker
Instagram: / leotechmaker
TikTok: / leotechmaker
Twitch: / leotechmaker

Mon extension Chrome à installer ABSOLUMENT : http://leotechmaker.com/addon

Si tu es descendu jusque-là, n’oublie pas de liker la vidéo, après tout, t’as bien cliqué sur “en voir plus”, tu peux bien utiliser un clic de plus…

How to fix video unavailable playback on other websites has been disabled by the video owner…

by
Hi, viewers in this video I am going to show you how you can fix the problem which is that when you insert a video of Youtube on your Blogging, News, Tech, E-Commerce, Business, Personal, Non-Profit, Event, Educational, Entertainment etc website whether it’s on Blogger, WordPress, Wix plateform or it’s a coded website like developed with Angular, React, JavaScript, Booststrap, PHP, Python, Ruby, CSS, HTML5, Java, C#, TypeScript, Go, Rust, Pearl, Objective-C, Scala and Vue.js etc the text shows up on it which is video unavailable playback on other websites has been disabled by the video owner watch on youtube. So, viewers watch this video till the end.
#getinformationandknowledge
#youtubefixproblen

Drupal Core News: Drupal 11.1 alpha phase begins October 28; 11.1.0 to be released December 12-13

by

Drupal 11.1.0 and 10.4.0 release dates

Drupal core typically has a minor release window the second week of December. This is to provide enough time after PHP and Symfony’s release dates for core compatibility to be updated, but still far enough before the major end-of-year holidays to avoid interfering with vacations and travel.

This year, DrupalCon Singapore is scheduled for the same week as the minor release. Normally, we would avoid having a minor release the same week as a DrupalCon, but in this case we are unable to move the release date. We will aim to release 11.1.0 and 10.4.0 later in the week to avoid having the release during the actual days of the conference. The release window is now December 12-13 UTC.

Drupal 11.0 and 10.3 will continue to have security coverage until June 2025. So, it is safe for site owners to wait until January 2025 or later, if necessary, to update their sites.

Drupal 11.1 alpha phase begins October 28

In preparation for the minor release, Drupal 11.1.x will enter the alpha phase the week of October 28, 2024. Core developers should plan to complete changes that are only allowed in minor releases prior to the alpha release. The 11.1.0-alpha1 deadline for most core patches is October 28, 2024.

The 10.5.x release branch of core will be created for the next maintenance minor release.

  • Developers and site owners can begin testing the alpha after its release.

  • The 11.1.x release branch of core will be created before the alpha is tagged. Future feature and API additions will continue to be targeted against 11.x.

  • After 11.1.x is branched but before 11.1.0-alpha1 is tagged, alpha experimental modules will be removed from the 11.1.x codebase. Their development will continue in 11.x only.

  • Following the release of Drupal 11.1 and 10.4, only security issues will be fixed in Drupal 11.0 and 10.3. Additionally, Drupal 10.2 will become end-of-life (EOL).

  • During the alpha phase, core issues will be committed according to the following policy:

    1. Most issues that are allowed for patch releases will be committed to 11.1.x and 10.4.x. Such issues may also be committed to 11.0.x and 10.3.x until the final normal bugfix releases of 11.0 and 10.3 on December 4, 2024.
    2. Most issues that are only allowed in minor releases will be committed to 11.x only. (Such issues may be released in 11.2 or another future minor.). A few strategic issues may be backported to 11.1.x, but only at committer discretion after the issue is fixed in 11.x (so leave them set to 11.x unless you are a committer), and only up until the beta deadline.
    3. Most issues that are allowed in maintenance minor releases will be committed to 11.x and 10.5.x only. A few strategic issues may be backported to 11.1.x and 10.4.x, but only at committer discretion after the issue is fixed in 11.x (so leave them set to 11.x unless you are a committer), and only up until the beta deadline.

Roughly two weeks after the alpha release, the first beta release will be created. All the restrictions of the alpha release apply to beta releases as well. The release of the first beta is a firm deadline for all feature and API additions. Even if an issue is pending in the Reviewed & Tested by the Community (RTBC) queue when the commit freeze for the beta begins, it will be committed to the next minor release only.

The release candidate phase will begin the week of November 25.

Security support of Drupal 10 and 11

Drupal 10.2.x Security releases will be provided until December 12, 2024.
Drupal 10.3.x and 11.0.x Security releases will be provided until June 18, 2025.

See the Drupal core release process overview, the Drupal core release schedule, allowed changes during the Drupal 10 and 11 release cycles, and Drupal 10 and 11 backwards compatibility and internal API policy for more information.

How to get dogs in blum – Dogs airdrop eligibility criteria in Blum – Blum Upate news

by
#blumprice #blumupdate #blumdog
How to get dogs in blum – Dogs airdrop eligibility criteria in Blum – Blum Upate news

Listen Guys,
If You Want to Learn More Pc / Laptop Software , Hardware tips and Tricks and solutions So Sᴜʙsᴄʀɪʙᴇ & Hit The
#friendsclubtech

Join Blum
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
https://t.me/blum/app?startapp=ref_SgyCGC7V96

Web Article
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬

More Videos
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
Blum Premarket Token Price | Blum Airdrop Update | BLUM Price Update | blum price prediction
https://youtu.be/ltw7BOYUnWY

HOW TO SHOW DOGS TOKEN | Blum Dogs Airdrop | Blum criteria Dogs Token not showing
https://youtu.be/XpGwdCBgBVk

How To Increase Blum Farming Speed | | Blum Coin Kaise Badhaye | blum farming speed kaise badhaye
https://youtu.be/SG95l9k7qx8

How to Connect Blum Wallet | Blum Wallet New Update | Blum AirDrop Withdrawal | Tonkeeper Blum
https://youtu.be/vN_I25AMjXE

How to create Ton Wallet account – Tonkeeper Account Create – Tonkeeper with Blum – Hamster etc
https://youtu.be/ZoZqbsZOhPg

how to create blum account – How to earn maximum Coin – blum coin price – blum earning app
https://youtu.be/bPyudDGKN3U

What Is Blum – Real or Fake – Blum Earning App Sy paise kaise kamaye – Blum Price with Proof
https://youtu.be/PM_BMbmrVpo

savings account highest profit rate bank in pakistan – HBL Daily Munafa Account
https://youtu.be/WDqeZb3d7vc

Difference between Simple Interest Rate and Effective Interest Rate | Friends Club Tech | Profit
https://youtu.be/Sn6L7b501AY

Easypaisa saving account investment detail | Investment App | Highest Profit Rate in Pakistan
https://youtu.be/USwFsvwvikM

Your Quires & Searching Relevant Keywords
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
blum price
blum price prediction
blum price in pakistan
blum price update
blum price prediction and listing date
blum price list
blum price on binance
blum price today
blum price prediction today
blum price new update
blum price in pakistan today
blum price update today
blum price prediction hindi
blum price in india
blum price 2024
blum price and
blum price and listing date
blum price and listing
blum
blum airdrop
blum crypto
blum mining
blum update
blum token
blum news
blum coin
blum listing date
blum listing
blum airdrop claim
blum new update
blum launch date
blum update news
blum wallet
Blum Airdrop Claim
Blum Airdrop launch date
Blum Airdrop Withdrawal
Dogs Token Withdrawal in Blum
Dogs Token claim in Blum
Dogs point
Telegram new mining app
Crypto mining app
Bitcoin news today
New mining app
Telegram tap to earn
New meme coin
Best crypto coin
Best meme coin
BLUM token price
Blum Airdrop exchange Listing News
How to invest in crypto
How to buy crypto coin
Meme coin
how to get dogs in blum
how to get dogs in blum game
get dogs coin in blum
blum airdrop update
blum airdrop eligibility criteria
dogs coins
blum airdrop listing date
blum airdrop listing date and price
blum airdrop price prediction
blum airdrop coin increase
blum airdrop collect dogs

Attention à pas se tromper…

by
Pour parler de la vidéo avec des gens passionnés tech : / discord

Mon setup COMPLET (PC / Caméra / Autres) : http://textup.fr/248446PT

Si vous voulez me soutenir, vous pouvez le faire en achetant vos produits technologiques avec ce lien : https://leotechmaker.com/me-soutenir
(Vous ça ne vous change rien au prix de ce que vous achetez, moi je récupère un % de la vente, merci ❤️❤️)

SUIVEZ MOI ICI PARTOUT POUR NE JAMAIS ARRÊTER D’APPRENDRE !
—————————————————
Twitter: / leotechmaker
Instagram: / leotechmaker
TikTok: / leotechmaker
Twitch: / leotechmaker

Mon extension Chrome à installer ABSOLUMENT : http://leotechmaker.com/addon

Si tu es descendu jusque-là, n’oublie pas de liker la vidéo, après tout, t’as bien cliqué sur “en voir plus”, tu peux bien utiliser un clic de plus…