android-x86-64-libssh
MEDIUM
maintainer hipersayan_x
0 votes
scanned 2026-09-21 21:36:21.639675
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
source=("https://www.libssh.org/files/${pkgver%.*}/libssh-${pkgver}.tar.xz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
2
# Contributor: Karl-Felix Glatzer <karl.glatzer@gmx.de>
3
# Contributor: Antonio Rojas <arojas@archlinux.org>
4
# Contributor: Tom Gundersen <teg@jklm.no>
5
# Contributor: Andrea Scarpino <andrea@archlinux.org>
6
# Contributor: ice-man <icemanf@gmail.com>
7
# Contributor: sergeantspoon <sergeantspoon@archlinux.us>
8
# Contributor: Alexey Pavlov <alexpux@gmail.com>
9
10
_android_arch=x86-64
11
12
pkgname=android-${_android_arch}-libssh
13
pkgver=0.12.2
14
pkgrel=1
15
arch=('any')
16
pkgdesc="Library for accessing ssh client services through C libraries (Android ${_android_arch})"
17
license=('LGPL')
18
url="https://www.libssh.org/"
19
groups=('android-libssh')
20
depends=("android-${_android_arch}-zlib"
21
"android-${_android_arch}-openssl")
22
makedepends=('android-cmake'
23
'python')
24
options=(!strip !buildflags staticlibs !emptydirs)
25
source=("https://www.libssh.org/files/${pkgver%.*}/libssh-${pkgver}.tar.xz"
26
'0001-Fix-static-lib.patch'
27
'0002-Disable-getifaddrs.patch')
28
md5sums=('d8a7ab5a0b337353494eac1f343db365'
29
'66588a420aac9c580c31018a5b1c78cf'
30
'063230102f24f4bcb8aea86575e00def')
31
32
prepare() {
33
cd "${srcdir}/libssh-${pkgver}"
34
source android-env ${_android_arch}
35
36
# Disable automatic detection of openssl since it picks up openssl-1.0
37
sed 's/find_package(OpenSSL)/#find_package(OpenSSL)/' -i CMakeLists.txt
38
39
patch -Np1 -i ../0001-Fix-static-lib.patch
40
41
if [ "${ANDROID_MINIMUM_PLATFORM}" -lt 24 ]; then
42
patch -Np1 -i ../0002-Disable-getifaddrs.patch
43
fi
44
}
45
46
build() {
47
cd "${srcdir}/libssh-${pkgver}"
48
source android-env ${_android_arch}
49
50
export CFLAGS="${CFLAGS} -D__USE_BSD"
51
export CXXFLAGS="${CXXFLAGS} -D__USE_BSD"
52
53
version=$(cat "${ANDROID_PREFIX_INCLUDE}/openssl/opensslv.h" | grep "OPENSSL_VERSION_TEXT" | sed 's/^[^\"]*"OpenSSL //' | sed 's/ .*$//')
54
55
android-${_android_arch}-cmake \
56
-S . \
57
-B build-shared \
58
-DWITH_GSSAPI=OFF \
59
-DBUILD_SHARED_LIBS=ON \
60
-DOPENSSL_FOUND=ON \
61
-DOPENSSL_INCLUDE_DIR="${ANDROID_PREFIX_INCLUDE}" \
62
-DOPENSSL_SSL_LIBRARY="${ANDROID_PREFIX_LIB}/libssl.so" \
63
-DOPENSSL_CRYPTO_LIBRARY="${ANDROID_PREFIX_LIB}/libcrypto.so" \
64
-DOPENSSL_VERSION="${version}" \
65
-DUNIT_TESTING=OFF \
66
-DWITH_EXAMPLES=OFF
67
make -C build-shared $MAKEFLAGS
68
69
android-${_android_arch}-cmake \
70
-S . \
71
-B build-static \
72
-DWITH_GSSAPI=OFF \
73
-DBUILD_SHARED_LIBS=OFF \
74
-DOPENSSL_FOUND=ON \
75
-DOPENSSL_INCLUDE_DIR="${ANDROID_PREFIX_INCLUDE}" \
76
-DOPENSSL_SSL_LIBRARY="${ANDROID_PREFIX_LIB}/libssl.a" \
77
-DOPENSSL_CRYPTO_LIBRARY="${ANDROID_PREFIX_LIB}/libcrypto.a" \
78
-DOPENSSL_VERSION="${version}" \
79
-DUNIT_TESTING=OFF \
80
-DWITH_EXAMPLES=OFF
81
make -C build-static $MAKEFLAGS
82
}
83
84
package(){
85
cd "${srcdir}/libssh-${pkgver}"
86
source android-env ${_android_arch}
87
88
make -C build-shared DESTDIR="${pkgdir}" install
89
make -C build-static DESTDIR="${pkgdir}" install
90
${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so
91
${ANDROID_STRIP} -g "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.a
92
93
install -vDm 644 COPYING -t "${pkgdir}/usr/share/licenses/${pkgname}/"
94
}
95
Changes since previous scan
--- PKGBUILD @ 2026-06-19 19:07+++ PKGBUILD @ 2026-09-21 21:36@@ -10,7 +10,7 @@ _android_arch=x86-64 pkgname=android-${_android_arch}-libssh-pkgver=0.11.3+pkgver=0.12.2 pkgrel=1 arch=('any') pkgdesc="Library for accessing ssh client services through C libraries (Android ${_android_arch})"@@ -25,7 +25,7 @@ source=("https://www.libssh.org/files/${pkgver%.*}/libssh-${pkgver}.tar.xz" '0001-Fix-static-lib.patch' '0002-Disable-getifaddrs.patch')-md5sums=('b55bad6ad6fd6b1e191fbb495adcfe40'+md5sums=('d8a7ab5a0b337353494eac1f343db365' '66588a420aac9c580c31018a5b1c78cf' '063230102f24f4bcb8aea86575e00def') Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-21 21:36:21 | Medium | 1 |
| 2026-06-19 19:07:35 | Clean | 2 |
| 2026-06-18 16:11:54 | Medium | 1 |