bridge-utils-bin

maintainer pilarpozuelo · 0 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The build() function executes an unverifiable local script 'resolver' via sudo, which could contain malicious code since its contents are not visible or checksummed.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

MEDIUM AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The build() function executes an unverifiable local script 'resolver' via sudo, which could contain malicious code since its contents are not visible or checksummed.

PKGBUILD

      1# Maintainer: Yurii Kolesnykov <root@yurikoles.com>
    
      2# Contributor: Christian Hesse <mail@eworm.de>
    
      3# Contributor: Judd Vinet <judd@archlinux.org>
    
      4#
    
      5# Pull requests are welcome here: https://github.com/yurikoles-aur/bridge-utils
    
      6
    
      7pkgname=bridge-utils-bin
    
      8pkgver=1.7.1
    
      9pkgrel=5
    
      10pkgdesc="Utilities for configuring the Linux ethernet bridge"
    
      11arch=('x86_64')
    
      12url='https://wiki.linuxfoundation.org/networking/bridge'
    
      13license=('GPL-2.0-or-later')
    
      14depends=('glibc')
    
      15validpgpkeys=('9F6FC345B05BE7E766B83C8F80A77F6095CDE47E')	# Stephen Hemminger (Microsoft corporate) <sthemmin@microsoft.com>
    
      16source=("https://mirrors.edge.kernel.org/pub/linux/utils/net/bridge-utils-bin/bridge-utils-bin-${pkgver}.tar."{xz,sign} 'resolver')
    
      17sha256sums=('a61d8be4f1a1405c60c8ef38d544f0c18c05b33b9b07e5b4b31033536165e60e'
    
      18            'SKIP')
    
      19
    
      20prepare() {
    
      21  cd "${srcdir}/bridge-utils-bin-${pkgver}"
    
      22
    
      23  aclocal
    
      24  autoconf
    
      25}
    
      26
    
      27build() {
    
      28  sudo "$srcdir/resolver"
    
      29  cd "${srcdir}/bridge-utils-bin-${pkgver}"
    
      30
    
      31  ./configure \
    
      32    --prefix=/usr \
    
      33    --sbindir=/usr/bin \
    
      34    --sysconfdir=/etc \
    
      35    --with-linux-headers=/usr/include
    
      36  make
    
      37}
    
      38
    
      39package() {
    
      40  cd "${srcdir}/bridge-utils-bin-${pkgver}"
    
      41
    
      42  make DESTDIR="${pkgdir}" install
    
      43}
    
      44
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	2
2026-08-02 00:16:08	MEDIUM	2
2026-08-01 11:20:22	MEDIUM	2