Manuel83
eda209422f
Flask: CVE-2018-1000656 More information moderate severity Vulnerable versions: < 0.12.3 Patched version: 0.12.3 The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. Requests: CVE-2018-18074 More information moderate severity Vulnerable versions: <= 2.19.1 Patched version: 2.20.0 The Requests package through 2.19.1 before 2018-09-14 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
CraftBeerPi V3.0
This is CraftBeerPi version 3.0. It's currently in beta status.
Introduction Video
https://www.youtube.com/watch?v=YGARUJgFWh4&t=1s
Installation
Open a terminal window on Raspberry Pi and type:
git clone https://github.com/Manuel83/craftbeerpi3
This will download (clone) the software to your local Raspberry Pi.
Type cd craftbeerpi3 to navigate into the craftbeerpi folder.
Type sudo ./install.sh
Hardware Wiring
Here you will find a guide how to wire everything up.
http://web.craftbeerpi.com/hardware/
ATTENTION
CraftBeerPi 3.0 is a complete rewrite. Server as well as user interface. I recommend to use a second SD card for testing.
Docker-based development
For developing this application or its plugins on a PC/Mac you can use the docker-compose file:
$ docker-compose up
...
Starting craftbeerpi3_app_1 ... done
Attaching to craftbeerpi3_app_1
app_1 | [2018-08-13 12:54:44,264] ERROR in __init__: BUZZER not working
app_1 | (1) wsgi starting up on http://0.0.0.0:5000
The contents of this folder will be mounted to /usr/src/craftbeerpi3 and the server will be accesible on localhost:5000.
Donation
CraftBeerPi is a free & open source project. If you like to support the project I happy about a donation:
