← All KD5FMU repositories

DVSwitch-Server-for-Raspberry-Pi-Backup-REPO

https://github.com/KD5FMU/DVSwitch-Server-for-Raspberry-Pi-Backup-REPO · None · 1 finding · Review date 2026-07-11

Executive Summary

Backup Repository for DVSwitch Server for AllStarLink

Backup Repository for DVSwitch Server for AllStarLink

Summary Counts

0
Critical Security
0
High Security
1
Medium Security
0
Low Security
0
Critical Bugs
0
High Bugs
0
Medium Bugs
0
Low Bugs

Quick Reference

IDSeverityCategoryFileLinesFinding
DVSWBK-001 Medium Security bookworm 40-42 GPG keyring fetched over HTTP in backup installer

Medium Issues

[DVSWBK-001] GPG keyring fetched over HTTP in backup installer

bookworm : 40-42

Same HTTP key download pattern as DVSwitch-4-Me.

Impact: Supply-chain risk for apt repository trust anchor.

Recommended Fix Priority

  1. Use HTTPS with checksum verification for remote downloads