Ausnahme gefangen: SSL certificate problem: certificate is not yet valid ๐Ÿ“Œ HPR3228: YAML basics

๐Ÿ  Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeitrรคge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden รœberblick รผber die wichtigsten Aspekte der IT-Sicherheit in einer sich stรคndig verรคndernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch รผbersetzen, erst Englisch auswรคhlen dann wieder Deutsch!

Google Android Playstore Download Button fรผr Team IT Security



๐Ÿ“š HPR3228: YAML basics


๐Ÿ’ก Newskategorie: Podcasts
๐Ÿ”— Quelle: hackerpublicradio.org

YAML has two data elements that serve as building blocks for complex data structures: sequences and mappings.

Sequence

This is a sequence:


---
- Emperor
- Gentoo
- Little Blue

Mapping

This is a mapping:


---
Penguin: Emperor

In this case, Penguin is a key and Emperor is a value. This is often called a "key and value pair", but in YAML it's just called a mapping.

Combining data blocks

You can embed these data types into one another. Here is a mapping that has a sequence as its value:


---
Penguin:
  - Emperor
  - Gentoo
  - Little Blue

Here is a sequence of mappings:


---
- Penguin: Emperor
- Penguin: Gentoo
- Penguin: Little Blue

yamllint

Use yamllint to detect errors in your YAML. To install:


$ pip install yamllint

Run it:


$ yamllint good.yaml
$ yamllint bad.yaml
bad.yaml
  1:1       warning  missing document start "---"  (document-start)
  4:14      error    no new line character at the end of file  (new-line-at-end-of-file)

yaml2json

Sometimes it's useful to convert your YAML to JSON so you can view the data structure in a different way. There are probably dozens of YAML-to-JSON converters out there, but here's the one I use: http://gitlab.com/slackermedia/yaml2json.git

Run it:


$ cat example.yaml
---
penguins:
  - Gentoo
  - Little Blue
  - Rockhopper
dragons:
  - black
  - white
  - red
$ ~/bin/yaml2json.py example.yaml
{"penguins": ["Gentoo", "Little Blue", "Rockhopper"], "dragons": ["black", "white", "red"]}

YAML police

There are no YAML police. As long as yamllint finds no errors, your YAML is valid and can be parsed by any one of the dozens of YAML libraries out there. However, these YAML libraries aren't magical, so you must understand the internal logic of your own YAML data. Keep that in mind when devising a scheme for the data you're recording.

YAML is a great method for creating configuration files, or storing simple data structures, and it's essential for Ansible playbooks.

Enjoy!

...



๐Ÿ“Œ HPR3228: YAML basics


๐Ÿ“ˆ 67.77 Punkte

๐Ÿ“Œ yaml-cpp 0.6.2 YAML File HandleFlowMap denial of service


๐Ÿ“ˆ 33.23 Punkte

๐Ÿ“Œ yaml-cpp 0.5.3 YAML File HandleNode denial of service


๐Ÿ“ˆ 33.23 Punkte

๐Ÿ“Œ yaml-cpp 0.6.2 singledocparser.cpp YAML::SingleDocParser denial of service


๐Ÿ“ˆ 33.23 Punkte

๐Ÿ“Œ yaml-cpp 0.6.2 YAML File HandleFlowSequence denial of service


๐Ÿ“ˆ 33.23 Punkte

๐Ÿ“Œ yaml-cpp 0.6.2 YAML File HandleFlowSequence denial of service


๐Ÿ“ˆ 33.23 Punkte

๐Ÿ“Œ osbs-client up to 0.56.0 yaml.load() YAML File Remote Code Execution


๐Ÿ“ˆ 33.23 Punkte

๐Ÿ“Œ yaml-rust up to 0.4.0 YAML Document load_from_str denial of service


๐Ÿ“ˆ 33.23 Punkte

๐Ÿ“Œ ROS Actionlib actionlib/tools/library.py:132 yaml Loader yaml.safe_load input validation


๐Ÿ“ˆ 33.23 Punkte

๐Ÿ“Œ CVE-2022-31115 | opensearch-ruby up to 2.0.0 YAML YAML.load deserialization (GHSA-977c-63xq-cgw3)


๐Ÿ“ˆ 33.23 Punkte

๐Ÿ“Œ yaml-cpp 0.5.3 YAML File HandleNode Denial of Service


๐Ÿ“ˆ 33.23 Punkte

๐Ÿ“Œ CVE-2022-31605 | NVIDIA NVFLARE up to 2.1.1 YAML File yaml.load deserialization (GHSA-hrf3-622q-8366)


๐Ÿ“ˆ 33.23 Punkte

๐Ÿ“Œ Red Hat OpenShift Enterprise 3.1 master-config.yaml Information Disclosure


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Red Hat OpenShift Enterprise 3.1 master-config.yaml Information Disclosure


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Vuln: LibYAML and Perl YAML-LibYAML Module 'scanner.c' Remote Denial of Service Vulnerability


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Vuln: Perl YAML-LibYAML Module 'perl_libyaml.c' Multiple Format String Vulnerabilities


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Vuln: Multiple Puppet Products YAML Deserialization CVE-2017-2295 Remote Code Execution Vulnerability


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Linux: Kernel-Hacker wollen Yaml zur Hardware-Beschreibung nutzen


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Swagger-Parser's bis 1.0.30 YAML Parser erweiterte Rechte


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ yaml-cpp: Eine Schwachstelle ermรถglicht einen Denial-of-Service-Angriff


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Azure DevOps: YAML-Verbesserungen bei Azure Pipelines und mehr


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ yaml-cpp 0.6.2 EnsureTokensInQueue denial of service


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Ausfรผhren beliebiger Kommandos in perl-YAML (Fedora)


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Ausfรผhren beliebiger Kommandos in perl-YAML (Fedora)


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ YAML CI/CD and Kubernetes Deployments - BDL2057


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Sampler - A Tool For Shell Commands Execution, Visualization And Alerting (Configured With A Simple YAML File)


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ lintian bis 2.5.50.3 YAML File Deserialization erweiterte Rechte


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Invalid Yaml error


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ lintian up to 2.5.50.3 YAML File Deserialization privilege escalation


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Drupal up to 8.3.3 PECL YAML Parser privilege escalation


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ MCollective up to 2.10.3 YAML Deserialization privilege escalation


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Drupal bis 8.3.3 PECL YAML Parser erweiterte Rechte


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ [CVE-2017-6920] PECL YAML parser unsafe object handling


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ puppet up to 4.10.0 YAML Deserialization privilege escalation


๐Ÿ“ˆ 16.62 Punkte

๐Ÿ“Œ Generating PCAP Files from YAML, (Tue, Oct 29th)


๐Ÿ“ˆ 16.62 Punkte











matomo