asterisk
LOW
maintainer nkukard
113 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from the official project's download host (downloads.asterisk.org), which is not on the whitelist but is plausibly legitimate; building from official project sources is normal for AUR packages and poses low risk.
Triggered rules
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The source is a tarball from the official project's download host (downloads.asterisk.org), which is not on the whitelist but is plausibly legitimate; building from official project sources is normal for AUR packages and poses low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:145
source=("https://downloads.asterisk.org/pub/telephony/$pkgname/releases/$_archive.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Nigel Kukard <nkukard@lbsd.net>
2
# Maintainer: Caleb Maclennan <caleb@alerque.com>
3
# Contributor: Maxim Kurnosenko <asusx2@mail.ru>
4
# Contributor: Xavier Devlamynck <magicrhesus@ouranos.be>
5
# Contributor: Alessio Biancalana <dottorblaster@gmail.com>
6
# Contributor: Maik Broemme <mbroemme@libmpq.org>
7
# Contributor: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
8
9
pkgname=asterisk
10
pkgver=23.5.0
11
pkgrel=2
12
pkgdesc='A complete PBX solution'
13
arch=(x86_64 i686 aarch64 armv7h)
14
url=https://www.asterisk.org
15
license=("GPL-2.0-only")
16
depends=(alsa-lib
17
curl
18
jansson
19
libedit
20
libsrtp
21
libvorbis
22
libxml2
23
libxslt
24
opus
25
popt
26
speex)
27
makedepends=(gsm
28
sqlite3)
29
optdepends=(dahdi
30
gsm
31
libpri
32
libss7
33
lua51
34
openr2
35
postgresql
36
unixodbc)
37
_confs=(acl.conf
38
adsi.conf
39
aeap.conf
40
agents.conf
41
alarmreceiver.conf
42
amd.conf
43
app_skel.conf
44
ari.conf
45
ast_debug_tools.conf
46
asterisk.adsi
47
asterisk.conf
48
calendar.conf
49
ccss.conf
50
cdr.conf
51
cdr_adaptive_odbc.conf
52
cdr_beanstalkd.conf
53
cdr_custom.conf
54
cdr_manager.conf
55
cdr_odbc.conf
56
cdr_pgsql.conf
57
cdr_sqlite3_custom.conf
58
cdr_tds.conf
59
cel.conf
60
cel_beanstalkd.conf
61
cel_custom.conf
62
cel_odbc.conf
63
cel_pgsql.conf
64
cel_sqlite3_custom.conf
65
cel_tds.conf
66
chan_dahdi.conf
67
chan_mobile.conf
68
chan_websocket.conf
69
cli.conf
70
cli_aliases.conf
71
cli_permissions.conf
72
codecs.conf
73
confbridge.conf
74
config_test.conf
75
console.conf
76
dbsep.conf
77
dnsmgr.conf
78
dsp.conf
79
dundi.conf
80
enum.conf
81
extconfig.conf
82
extensions.ael
83
extensions.conf
84
extensions.lua
85
extensions_minivm.conf
86
features.conf
87
festival.conf
88
followme.conf
89
func_odbc.conf
90
geolocation.conf
91
hep.conf
92
http.conf
93
iax.conf
94
iaxprov.conf
95
indications.conf
96
logger.conf
97
manager.conf
98
meetme.conf
99
minivm.conf
100
modules.conf
101
motif.conf
102
musiconhold.conf
103
ooh323.conf
104
phoneprov.conf
105
phoneprov_users.conf
106
pjproject.conf
107
pjsip.conf
108
pjsip_notify.conf
109
pjsip_wizard.conf
110
prometheus.conf
111
queuerules.conf
112
queues.conf
113
res_config_mysql.conf
114
res_config_sqlite3.conf
115
res_config_odbc.conf
116
res_corosync.conf
117
res_curl.conf
118
res_fax.conf
119
res_http_media_cache.conf
120
res_ldap.conf
121
res_odbc.conf
122
res_parking.conf
123
res_pgsql.conf
124
res_snmp.conf
125
res_stun_monitor.conf
126
resolver_unbound.conf
127
rtp.conf
128
say.conf
129
sla.conf
130
smdi.conf
131
sorcery.conf
132
ss7.timers
133
stasis.conf
134
statsd.conf
135
stir_shaken.conf
136
telcordia-1.adsi
137
test_sorcery.conf
138
udptl.conf
139
unistim.conf
140
voicemail.conf
141
websocket_client.conf
142
xmpp.conf)
143
backup=("${_confs[@]/#/etc/$pkgname/}")
144
_archive="$pkgname-$pkgver"
145
source=("https://downloads.asterisk.org/pub/telephony/$pkgname/releases/$_archive.tar.gz"
146
"$pkgname.sysusers"
147
"$pkgname.logrotated"
148
"$pkgname.tmpfiles"
149
"fix-upnp.patch")
150
sha256sums=('8ed3a237e6d8dff94a09527a83143530b5afcc1aee73fa7b85c069bda507adac'
151
'38a53911647fb2308482179cba605ebf12345df37eed23eb4ea67bf0bf041486'
152
'b97dc10a262621c95e4b75e024834712efd58561267b59b9171c959ecd9f7164'
153
'1b6b489d4f71015bfc56ce739d92df7e9abdb349aed6f5a47dd9c18d84546c1b'
154
'55798baa02698de3d81c4b6e11097b3dee73b20e9dfa1e08091a7037830ad6d8')
155
156
prepare() {
157
cd "$_archive"
158
159
local filename
160
for filename in "${source[@]}"; do
161
if [[ "$filename" =~ \.patch$ ]]; then
162
echo "Applying patch ${filename##*/}"
163
patch -p1 -N -i "$srcdir/${filename##*/}"
164
fi
165
done
166
}
167
168
build() {
169
cd "$_archive"
170
171
./configure \
172
--prefix=/usr \
173
--sysconfdir=/etc \
174
--localstatedir=/var \
175
--sbindir=/usr/bin
176
177
make MENUSELECT_CFLAGS= OPTIMIZE= DEBUG= ASTVARRUNDIR="/run/$pkgname" NOISY_BUILD=1
178
}
179
180
_cmp() {
181
cmp -s \
182
<(IFS=$'\n'; echo "${_confs[*]}" | sort) \
183
<(IFS=$'\n'; echo "${_backs[*]}" | sort)
184
}
185
186
_comm() {
187
comm -3 --nocheck-order \
188
<(IFS=$'\n'; echo "${_confs[*]}" | sort) \
189
<(IFS=$'\n'; echo "${_backs[*]}" | sort)
190
}
191
192
package(){
193
cd "$_archive"
194
195
make DESTDIR="$pkgdir" install
196
make DESTDIR="$pkgdir" install-headers
197
make DESTDIR="$pkgdir" samples
198
199
# Backup file list changes frequently and is hard to keep up to date. Check
200
# that our current meta data matches whatever just got packaged, else flunk
201
# with a helpful output of where the lists differ. We have to compare twice
202
# because cmp has a useful exit code, comm has a useful output, neither both
203
local _backs=($(cd "$pkgdir/etc/$pkgname" && echo *))
204
_cmp || (_comm && exit 1)
205
206
sed -i -e 's,/var/run,/run,' "$pkgdir/etc/$pkgname/asterisk.conf"
207
install -Dm644 -t "$pkgdir/usr/share/doc/$pkgname/examples" "$pkgdir/etc/$pkgname/"*
208
209
mv "$pkgdir/var/run" "$pkgdir"
210
211
pushd contrib/systemd
212
install -Dm644 -t "$pkgdir/usr/lib/systemd/system/" "$pkname"*.{service,socket}
213
214
pushd "$srcdir"
215
install -Dm644 "$pkgname.sysusers" "$pkgdir/usr/lib/sysusers.d/$pkgname.conf"
216
install -Dm644 "$pkgname.logrotated" "$pkgdir/etc/logrotate.d/$pkgname"
217
install -Dm644 "$pkgname.tmpfiles" "$pkgdir/usr/lib/tmpfiles.d/$pkgname.conf"
218
219
chmod 0750 "$pkgdir"/{etc,run,var/{lib,log,spool}}/"$pkgname"
220
}
221
Changes since previous scan
--- PKGBUILD @ 2026-08-31 00:19+++ PKGBUILD @ 2026-09-17 00:27@@ -7,8 +7,8 @@ # Contributor: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org> pkgname=asterisk-pkgver=23.4.1-pkgrel=1+pkgver=23.5.0+pkgrel=2 pkgdesc='A complete PBX solution' arch=(x86_64 i686 aarch64 armv7h) url=https://www.asterisk.org@@ -147,7 +147,7 @@ "$pkgname.logrotated" "$pkgname.tmpfiles" "fix-upnp.patch")-sha256sums=('9d90269af187c8437087ba96f569e656a6a4a9a0a2347489c9e81ff1c37d2c51'+sha256sums=('8ed3a237e6d8dff94a09527a83143530b5afcc1aee73fa7b85c069bda507adac' '38a53911647fb2308482179cba605ebf12345df37eed23eb4ea67bf0bf041486' 'b97dc10a262621c95e4b75e024834712efd58561267b59b9171c959ecd9f7164' '1b6b489d4f71015bfc56ce739d92df7e9abdb349aed6f5a47dd9c18d84546c1b'@@ -177,6 +177,18 @@ make MENUSELECT_CFLAGS= OPTIMIZE= DEBUG= ASTVARRUNDIR="/run/$pkgname" NOISY_BUILD=1 } +_cmp() {+ cmp -s \+ <(IFS=$'\n'; echo "${_confs[*]}" | sort) \+ <(IFS=$'\n'; echo "${_backs[*]}" | sort)+}++_comm() {+ comm -3 --nocheck-order \+ <(IFS=$'\n'; echo "${_confs[*]}" | sort) \+ <(IFS=$'\n'; echo "${_backs[*]}" | sort)+}+ package(){ cd "$_archive" @@ -189,13 +201,7 @@ # with a helpful output of where the lists differ. We have to compare twice # because cmp has a useful exit code, comm has a useful output, neither both local _backs=($(cd "$pkgdir/etc/$pkgname" && echo *))- cmp -s \- <(IFS=$'\n'; echo "${_confs[*]}" | sort) \- <(IFS=$'\n'; echo "${_backs[*]}" | sort) ||- (comm -3 --nocheck-order \- <(IFS=$'\n'; echo "${_confs[*]}" | sort) \- <(IFS=$'\n'; echo "${_backs[*]}" | sort) &&- exit 1)+ _cmp || (_comm && exit 1) sed -i -e 's,/var/run,/run,' "$pkgdir/etc/$pkgname/asterisk.conf" install -Dm644 -t "$pkgdir/usr/share/doc/$pkgname/examples" "$pkgdir/etc/$pkgname/"*Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 07:44:47 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |