← All KD5FMU repositories

APRS-Linux_Under_Development

https://github.com/KD5FMU/APRS-Linux_Under_Development · Shell · 2 findings · Review date 2026-07-11

Executive Summary

APRS-Adventures-Not_Tested

APRS-Adventures-Not_Tested

Summary Counts

0
Critical Security
1
High Security
1
Medium Security
0
Low Security
0
Critical Bugs
0
High Bugs
0
Medium Bugs
0
Low Bugs

Quick Reference

IDSeverityCategoryFileLinesFinding
APRS-001 High Security APRS_Adventure.sh 25-28 Downloads and installs .deb without verification
APRS-002 Medium Security APRS_Adventure.sh 35-43 Builds DireWolf from unpinned git clone

High Security Issues

[APRS-001] Downloads and installs .deb without verification

APRS_Adventure.sh : 25-28

wget xaster.deb and dpkg -i as root.

Impact: MITM installs malicious package.

Medium Issues

[APRS-002] Builds DireWolf from unpinned git clone

APRS_Adventure.sh : 35-43

git clone wb2osz/direwolf with no commit pin.

Impact: Upstream changes could introduce unexpected code on reinstall.