🟢 Low ⏱ 5–15 min Last verified: 19 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: findutils — GNU locate heap buffer overrun Related CVEs: CVE-2007-2452 Upstream summary: James Youngman reports: When GNU locate reads filenames from an old-format locate database, they are read into a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202405-20 Related CVEs: CVE-2020-17541 CVE-2021-37956 CVE-2021-37957 CVE-2021-37958 CVE-2021-37959 CVE-2021-37960 CVE-2021-37961 CVE-2021-37962 +10 more Upstream summary: Multiple vulnerabilities have been discovered in libjpeg-turbo. Please review the CVE identifiers referenced below for details. Table […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-treq — sensitive information leak vulnerability Related CVEs: CVE-2022-23607 Upstream summary: Treq's request methods (`treq.get`, `treq.post`, `HTTPClient.request`, `HTTPClient.get`, etc.) accept cookies as a dictionary. Such cookies are not bound to […]
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-6060 CVE-2014-7912 CVE-2014-7913 CVE-2016-1503 CVE-2016-1504 CVE-2019-11577 CVE-2019-11578 CVE-2019-11579 +1 more Upstream summary: The get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-19865 Upstream summary: A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15168 CVE-2022-0235 Upstream summary: node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was […]
We can use [Python os module](/community/tutorials/python-os-module) splitext() function to get the file extension. This function splits the file path into a tuple having two values – root and extension. Getting File Extension in Python Here is a simple program to get the file extension in Python. import os # unpacking the tuple file_name, file_extension = […]
Introduction This guide explains how to Configure SSH Hardening on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with the standard […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-10073 Upstream summary: The create_response function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a check for whether a file is under the webserver […]
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7360-1 Related CVEs: CVE-2020-14929 CVE-2021-38370 CVE-2021-46853 Upstream summary: It was discovered that Alpine did not use a secure connection under certain circumstances. A remote attacker could possibly use this issue […]
