From e52acc64e53c6272187da7249dd07d001164788f Mon Sep 17 00:00:00 2001 From: thetechprepper Date: Wed, 29 Apr 2026 17:56:07 -0700 Subject: [PATCH 1/2] js8call - Fetching JS8Call 2.2.0 from an alternate location as it looks like there are new site owners for the js8call domain --- scripts/install-js8call.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/install-js8call.sh b/scripts/install-js8call.sh index 9bda5b1..6eb3636 100755 --- a/scripts/install-js8call.sh +++ b/scripts/install-js8call.sh @@ -1,7 +1,7 @@ #!/bin/bash # Author : Gaston Gonzalez # Date : 6 April 2023 -# Updated : 24 October 2024 +# Updated : 29 May 2026 # Purpose : Install JS8Call set -e trap 'last_command=$current_command; current_command=$BASH_COMMAND' DEBUG @@ -11,7 +11,7 @@ trap 'et-log "\"${last_command}\" command failed with exit code $?."' ERR VERSION="2.2.0" FILE="js8call_${VERSION}_20.04_amd64.deb" -URL="http://files.js8call.com/${VERSION}/${FILE}" +URL="https://github.com/thetechprepper/emcomm-tools-os-community/releases/download/emcomm-tools-os-community-20260401-r6-final-6.0.0/js8call_2.2.0_20.04_amd64.deb" et-log "Installing JS8Call dependencies..." apt install \ From 4ec08ce850b5610fcb6c5ac5dbf1a668a68ae9c8 Mon Sep 17 00:00:00 2001 From: thetechprepper Date: Sat, 2 May 2026 18:54:29 -0700 Subject: [PATCH 2/2] security - Disabled the algif_aead module to prevent the exploitation of CVE-2026-31431 --- scripts/install.sh | 5 ++++- scripts/patch-copy-fail.sh | 11 +++++++++++ 2 files changed, 15 insertions(+), 1 deletion(-) create mode 100755 scripts/patch-copy-fail.sh diff --git a/scripts/install.sh b/scripts/install.sh index 8d852ad..4dd7b3e 100755 --- a/scripts/install.sh +++ b/scripts/install.sh @@ -2,7 +2,7 @@ # # Author : Gaston Gonzalez # Date : 16 March 2024 -# Updated : 27 March 2026 +# Updated : 2 May 2026 # Purpose : Main installer for EmComm Tools Community (ETC) . ./env.sh @@ -112,3 +112,6 @@ exitIfNotRoot # Install WSJT-X (FT8) ./install-wsjtx.sh + +# Security Patches +./patch-copy-fail.sh diff --git a/scripts/patch-copy-fail.sh b/scripts/patch-copy-fail.sh new file mode 100755 index 0000000..2739489 --- /dev/null +++ b/scripts/patch-copy-fail.sh @@ -0,0 +1,11 @@ +#!/bin/bash +# Author : Gaston Gonzalez +# Date : 2 May 2026 +# Purpose : Patch "Copy Fail" vulnerability (CVE-2026-31431). +# +# See https://copy.fail + +et-log "Security: Patching Copy Fail vulnerability..." + +echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf +rmmod algif_aead