Tobias Brunner 8ae96ed798 sec-updater: Use process_t to avoid potential command injection ...

Since the version passed to the `dpkg` command comes from a local
`Packages` file, it is presumably trusted.  But if the script is called
on a random file or the attacker can control its contents, it might be
possible to inject commands.

2026-07-24 08:47:37 +02:00

..

.gitignore

sec-updater: Checks for security updates

2017-09-01 11:19:40 +02:00

Makefile.am

Some whitespace fixes

2019-08-22 15:18:06 +02:00

sec-updater.8.in

sec-updater: Import SWID tags of updated packages

2017-09-09 20:23:19 +02:00

sec-updater.c

sec-updater: Use process_t to avoid potential command injection

2026-07-24 08:47:37 +02:00

sec-updater.sh

sec-updater: Use latest versions

2021-09-09 22:54:38 +02:00