← All KD5FMU repositories

New-weather.sh-file-Nov-27-2025

https://github.com/KD5FMU/New-weather.sh-file-Nov-27-2025 · Shell · 2 findings · Review date 2026-07-11

Executive Summary

This is the latest weather.sh file, Updated by Mike Webb WG5EEK and Paul Aidukas KN2R

This is the latest weather.sh file, Updated by Mike Webb WG5EEK and Paul Aidukas KN2R

Summary Counts

0
Critical Security
0
High Security
2
Medium Security
0
Low Security
0
Critical Bugs
0
High Bugs
0
Medium Bugs
0
Low Bugs

Quick Reference

IDSeverityCategoryFileLinesFinding
WEATHER-NOV-001 Medium Security weather.sh 555-556 World-writable airport cache file (chmod 666)
WEATHER-NOV-002 Medium Security weather.sh 613-619 curl --insecure used for external data downloads

Medium Issues

[WEATHER-NOV-001] World-writable airport cache file (chmod 666)

weather.sh : 555-556

init_cache and save_to_cache set chmod 666 on CACHE_FILE in /var/tmp.

Impact: Any local user can tamper with cached airport coordinates.

[WEATHER-NOV-002] curl --insecure used for external data downloads

weather.sh : 613-619

curl -4 --insecure for HTTPS endpoints.

Impact: MITM can substitute weather or airport data.