Skip to content

Releases: hamarshehmhmd/patchgap

Release list

patchgap v0.1.0

patchgap v0.1.0 Latest
Latest

Choose a tag to compare

View all tags
@hamarshehmhmd hamarshehmhmd released this 03 Nov 09:43
v0.1.0
7ee1b32

First release.

  • patchgap check: shows which hosts are exposed to hot Linux CVEs, based on the running kernel or package. Works locally, over ssh, or from saved inventories. JSON output, and exit codes 0/1/2/3.
  • patchgap mitigate: applies vetted, reversible stopgaps (nftables, module block, sshd drop-in, sysctl). Dry run by default. Configs are syntax-checked before loading, verified after, and rolled back on failure.
  • patchgap cleanup: removes stopgaps once the running system is fixed. A fixed kernel that's installed but not booted yet keeps them.
  • Feed (generated 2026-11-03 from the Debian, Ubuntu, Red Hat and ALAS trackers, with a source URL on every entry): CVE-2026-98432, CVE-2026-31431 (Copy Fail), CVE-2024-6387 (regreSSHion).

Install: curl -fsSL https://raw.githubusercontent.com/hamarshehmhmd/patchgap/main/install.sh | sh

demo.mp4 is the narrated 2.5-minute demo. GNU AGPL-3.0-or-later; commercial licenses are available from the author.

Assets 4
Loading