aspnet-targeting-pack-bin

maintainer Gr3q · 58 votes · base dotnet-core-bin · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads official .NET SDK binaries from Microsoft's build server (builds.dotnet.microsoft.com), which is a legitimate source for .NET artifacts; despite the non-standard hostname, this is a normal and expected source for the software, and the downloads are verified via sha512sums.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official .NET SDK binaries from Microsoft's build server (builds.dotnet.microsoft.com), which is a legitimate source for .NET artifacts; despite the non-standard hostname, this is a normal and expected source for the software, and the downloads are verified via sha512sums.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:23 source_armv7h=("https://builds.dotnet.microsoft.com/dotnet/Sdk/${_sdkver}/dotnet-sdk-${_sdkver}-linux-arm.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Attila Greguss <floyd0122[at]gmail[dot]com>
    
      2# Co-Maintainer: Nate Plumm <nate[at]ceresta[dot]com>
    
      3
    
      4pkgbase=dotnet-core-bin
    
      5pkgname=(
    
      6  'dotnet-host-bin'
    
      7  'aspnet-runtime-bin'
    
      8  'dotnet-runtime-bin'
    
      9  'dotnet-sdk-bin'
    
      10  'dotnet-targeting-pack-bin'
    
      11  'aspnet-targeting-pack-bin'
    
      12 )
    
      13pkgver=10.0.10.sdk302
    
      14_runtimever=10.0.10
    
      15_sdkver=10.0.302
    
      16_short_ver=10.0
    
      17pkgrel=1
    
      18arch=('x86_64' 'armv7h' 'aarch64')
    
      19url='https://www.microsoft.com/net/core'
    
      20license=('MIT')
    
      21options=('staticlibs')
    
      22source=('dotnet.sh')
    
      23source_armv7h=("https://builds.dotnet.microsoft.com/dotnet/Sdk/${_sdkver}/dotnet-sdk-${_sdkver}-linux-arm.tar.gz")
    
      24source_aarch64=("https://builds.dotnet.microsoft.com/dotnet/Sdk/${_sdkver}/dotnet-sdk-${_sdkver}-linux-arm64.tar.gz")
    
      25source_x86_64=("https://builds.dotnet.microsoft.com/dotnet/Sdk/${_sdkver}/dotnet-sdk-${_sdkver}-linux-x64.tar.gz")
    
      26sha512sums=('768151c7179fb6a126b3de9cae01e363e8894f6fab384b1e2c5066c2adca4578638983b1b62aea10dd18045e6d6e8f8ea13280481134de94f004a118919b2c06')
    
      27sha512sums_armv7h=('ae19c6d6ed848f2a60222d7da714aefdbe28c0eb1d7e1bdf207a5e106d8408458d31f1b415b73ff57ea3c56bab0f8668f7afa2f527f369b130d0a0366bc4c857')
    
      28sha512sums_aarch64=('9e409c14e00686d661c78fa4dd9ad0e4dcf695c328bd5ff777d05b4a9c34b42cf89b12573b92e9fb2f565dbe12016b4835f77c7d9a42b55a7494df21634cd5d6')
    
      29sha512sums_x86_64=('10069bec8783596484a610332f090d562802a41b9b40e3327a5a5688b572e10c296ae300f940d40461f23c157ed1b0843c2f8e6b3f20d8d8d9d83432d8143bac')
    
      30
    
      31package_dotnet-host-bin() {
    
      32  pkgdesc='A generic driver for the .NET Core Command Line Interface (binary)'
    
      33  provides=("dotnet-host" "dotnet-host=${_runtimever}")
    
      34  conflicts=('dotnet-host')
    
      35  depends=(
    
      36    'libgcc'
    
      37    'libstdc++'
    
      38    'glibc'
    
      39  )
    
      40
    
      41  install -dm 755 "${pkgdir}"/usr/{bin,lib,share/{dotnet,dnx,licenses/dotnet-host}}
    
      42  cp -dr --no-preserve='ownership' dotnet host dnx "${pkgdir}"/usr/share/dotnet/
    
      43  cp -dr --no-preserve='ownership' LICENSE.txt ThirdPartyNotices.txt "${pkgdir}"/usr/share/licenses/dotnet-host
    
      44  ln -sf /usr/share/dotnet/dotnet "${pkgdir}"/usr/bin/dotnet
    
      45  ln -sf /usr/share/dotnet/dnx "${pkgdir}"/usr/bin/dnx
    
      46  ln -sf /usr/share/dotnet/host/fxr/"${_runtimever}"/libhostfxr.so "${pkgdir}"/usr/lib/libhostfxr.so
    
      47  install -Dm 644 "${srcdir}"/dotnet.sh -t "${pkgdir}"/etc/profile.d/
    
      48}
    
      49
    
      50package_dotnet-runtime-bin() {
    
      51  pkgdesc='The .NET Core runtime (binary)'
    
      52  depends=(
    
      53  	"dotnet-host>=${_runtimever}"
    
      54    'libgcc'
    
      55    'libstdc++'
    
      56    'glibc'
    
      57    'icu'
    
      58    'libunwind'
    
      59    'zlib'
    
      60    'openssl'
    
      61  )
    
      62  optdepends=('lttng-ust2.12: CoreCLR tracing')
    
      63  provides=("dotnet-runtime=${_runtimever}" "dotnet-runtime-${_short_ver}")
    
      64  conflicts=("dotnet-runtime=${_runtimever}" "dotnet-runtime-${_short_ver}")
    
      65
    
      66  install -dm 755 "${pkgdir}"/usr/share/{dotnet/shared,licenses}
    
      67  cp -dr --no-preserve='ownership' shared/Microsoft.NETCore.App "${pkgdir}"/usr/share/dotnet/shared/
    
      68  ln -s dotnet-host-bin "${pkgdir}"/usr/share/licenses/dotnet-runtime-bin
    
      69}
    
      70
    
      71package_aspnet-runtime-bin() {
    
      72  pkgdesc='The ASP.NET Core runtime (binary)'
    
      73  depends=('dotnet-runtime-bin')
    
      74  provides=("aspnet-runtime=${_runtimever}" "aspnet-runtime-${_short_ver}")
    
      75  conflicts=("aspnet-runtime=${_runtimever}" "aspnet-runtime-${_short_ver}")
    
      76
    
      77  install -dm 755 "${pkgdir}"/usr/share/{dotnet/shared,licenses}
    
      78  cp -dr --no-preserve='ownership' shared/Microsoft.AspNetCore.App "${pkgdir}"/usr/share/dotnet/shared/
    
      79  ln -s dotnet-host-bin "${pkgdir}"/usr/share/licenses/aspnet-runtime-bin
    
      80}
    
      81
    
      82package_dotnet-sdk-bin() {
    
      83  pkgdesc='The .NET Core SDK (binary)'
    
      84  depends=(
    
      85    'glibc'
    
      86    'libgcc'
    
      87    'libstdc++'
    
      88    'dotnet-runtime-bin'
    
      89    'dotnet-targeting-pack-bin'
    
      90    'aspnet-runtime-bin'
    
      91    'aspnet-targeting-pack-bin'
    
      92  )
    
      93  provides=("dotnet-sdk-bin" "dotnet-sdk=${pkgver}" "dotnet-sdk-${_short_ver}=${pkgver}")
    
      94  conflicts=("dotnet-sdk-bin" "dotnet-sdk=${pkgver}" "dotnet-sdk-${_short_ver}")
    
      95
    
      96  install -dm 755 "${pkgdir}"/usr/share/{dotnet,licenses}
    
      97  cp -dr --no-preserve='ownership' sdk sdk-manifests templates "${pkgdir}"/usr/share/dotnet/
    
      98  ln -s dotnet-host-bin "${pkgdir}"/usr/share/licenses/dotnet-sdk-bin
    
      99}
    
      100
    
      101package_dotnet-targeting-pack-bin() {
    
      102  pkgdesc='The .NET Core targeting pack (binary)'
    
      103  provides=(dotnet-targeting-pack=${_runtimever} dotnet-targeting-pack-${_short_ver})
    
      104  conflicts=(dotnet-targeting-pack=${_runtimever} dotnet-targeting-pack-${_short_ver})
    
      105
    
      106  if [ $CARCH = 'x86_64' ]; then msarch=x64;
    
      107  elif [ $CARCH = 'armv7h' ]; then msarch=arm;
    
      108  elif [ $CARCH = 'aarch64' ]; then msarch=arm64; fi
    
      109
    
      110  install -dm 755 "${pkgdir}"/usr/share/{dotnet,dotnet/packs,licenses}
    
      111  cp -dr --no-preserve='ownership' packs/Microsoft.NETCore.App.{Host.linux-${msarch},Ref} "${pkgdir}"/usr/share/dotnet/packs/
    
      112  ln -s dotnet-host-bin "${pkgdir}"/usr/share/licenses/dotnet-targeting-pack-bin
    
      113}
    
      114
    
      115package_aspnet-targeting-pack-bin() {
    
      116  pkgdesc='The ASP.NET Core targeting pack (binary)'
    
      117  depends=(dotnet-targeting-pack-bin)
    
      118  provides=(aspnet-targeting-pack=${_runtimever} aspnet-targeting-pack-${_short_ver})
    
      119  conflicts=(aspnet-targeting-pack=${_runtimever} aspnet-targeting-pack-${_short_ver})
    
      120
    
      121  install -dm 755 "${pkgdir}"/usr/share/{dotnet,dotnet/packs,licenses}
    
      122  cp -dr --no-preserve='ownership' packs/Microsoft.AspNetCore.App.Ref "${pkgdir}"/usr/share/dotnet/packs/
    
      123  ln -s dotnet-host-bin "${pkgdir}"/usr/share/licenses/aspnet-targeting-pack-bin
    
      124}

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:18
+++ PKGBUILD @ 2026-08-03 00:08
@@ -10,9 +10,9 @@
   'dotnet-targeting-pack-bin'
   'aspnet-targeting-pack-bin'
  )
-pkgver=10.0.9.sdk301
-_runtimever=10.0.9
-_sdkver=10.0.301
+pkgver=10.0.10.sdk302
+_runtimever=10.0.10
+_sdkver=10.0.302
 _short_ver=10.0
 pkgrel=1
 arch=('x86_64' 'armv7h' 'aarch64')
@@ -24,16 +24,17 @@
 source_aarch64=("https://builds.dotnet.microsoft.com/dotnet/Sdk/${_sdkver}/dotnet-sdk-${_sdkver}-linux-arm64.tar.gz")
 source_x86_64=("https://builds.dotnet.microsoft.com/dotnet/Sdk/${_sdkver}/dotnet-sdk-${_sdkver}-linux-x64.tar.gz")
 sha512sums=('768151c7179fb6a126b3de9cae01e363e8894f6fab384b1e2c5066c2adca4578638983b1b62aea10dd18045e6d6e8f8ea13280481134de94f004a118919b2c06')
-sha512sums_armv7h=('0f7542b0c780a93f7dc6d03c1a09f1cc358781c9ab78d736751a8e6e62e39037e6fa06fe9533b09fd8cb21b756b60a80fd88072017125144860768f0d2df6d4b')
-sha512sums_aarch64=('4ee438b363cb8468930d50b6bdc738a375e2f33b25bfd0c8dcb55853dda7f0fb187693e0f49dfc31556e68320b961a50dcf3b74c1f25abe3a5bd916db607db99')
-sha512sums_x86_64=('cfbeec3a3a1d3ad3e168e37a77c4cc26c23125acd84a86d014047da3ecffce4c368a9acac4d7c950a047fa3d98989ce8aea69f8e5842cb6d330e8911e1c335a7')
+sha512sums_armv7h=('ae19c6d6ed848f2a60222d7da714aefdbe28c0eb1d7e1bdf207a5e106d8408458d31f1b415b73ff57ea3c56bab0f8668f7afa2f527f369b130d0a0366bc4c857')
+sha512sums_aarch64=('9e409c14e00686d661c78fa4dd9ad0e4dcf695c328bd5ff777d05b4a9c34b42cf89b12573b92e9fb2f565dbe12016b4835f77c7d9a42b55a7494df21634cd5d6')
+sha512sums_x86_64=('10069bec8783596484a610332f090d562802a41b9b40e3327a5a5688b572e10c296ae300f940d40461f23c157ed1b0843c2f8e6b3f20d8d8d9d83432d8143bac')
 
 package_dotnet-host-bin() {
   pkgdesc='A generic driver for the .NET Core Command Line Interface (binary)'
   provides=("dotnet-host" "dotnet-host=${_runtimever}")
   conflicts=('dotnet-host')
   depends=(
-    'gcc-libs'
+    'libgcc'
+    'libstdc++'
     'glibc'
   )
 
@@ -50,7 +51,8 @@
   pkgdesc='The .NET Core runtime (binary)'
   depends=(
   	"dotnet-host>=${_runtimever}"
-    'gcc-libs'
+    'libgcc'
+    'libstdc++'
     'glibc'
     'icu'
     'libunwind'
@@ -81,7 +83,8 @@
   pkgdesc='The .NET Core SDK (binary)'
   depends=(
     'glibc'
-    'gcc-libs'
+    'libgcc'
+    'libstdc++'
     'dotnet-runtime-bin'
     'dotnet-targeting-pack-bin'
     'aspnet-runtime-bin'

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 09:20:02	MEDIUM	1
2026-06-20 00:18:46	MEDIUM	1
2026-06-19 23:51:18	CLEAN	2
2026-06-19 19:07:35	LOW	2
2026-06-18 18:04:49	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1