cisco-secure-client-nus-bin

MEDIUM

maintainer keatonj 0 votes scanned 2026-09-02 11:50:42.784749

View on AUR

Why flagged

The package installs prebuilt binaries from a local source with an unverified checksum (SKIP), posing a supply-chain risk if the bundled tarball was tampered with, though it appears to be repackaging official Cisco binaries.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs prebuilt binaries from a local source with an unverified checksum (SKIP), posing a supply-chain risk if the bundled tarball was tampered with, though it appears to be repackaging official Cisco binaries.

PKGBUILD

      1# Maintainer: keatonj <jiang131072@gmail.com>
    
      2
    
      3pkgname=cisco-secure-client-nus-bin
    
      4pkgver=5.1.8.122
    
      5pkgrel=1
    
      6pkgdesc="Cisco Secure Client (formerly AnyConnect) VPN and DART (NUS predeploy)"
    
      7arch=('x86_64')
    
      8url="https://www.cisco.com/site/us/en/products/security/secure-client/index.html"
    
      9license=('LicenseRef-Cisco')
    
      10
    
      11depends=(
    
      12    'boost-libs'
    
      13    'glib2'
    
      14    'glibc'
    
      15    'gtk3'
    
      16    'libxml2-legacy'
    
      17    'polkit'
    
      18    'webkit2gtk-4.1'
    
      19    'zlib'
    
      20)
    
      21
    
      22provides=(
    
      23    'cisco-secure-client'
    
      24    'cisco-secure-client-vpn'
    
      25    'cisco-secure-client-dart'
    
      26)
    
      27conflicts=(
    
      28    'cisco-secure-client'
    
      29    'cisco-anyconnect-vpn'
    
      30    'cisco-anyconnect-dart'
    
      31)
    
      32
    
      33install="${pkgname}.install"
    
      34options=('!strip')
    
      35source=("file://cisco-secure-client-linux64-${pkgver}-predeploy-deb-k9.tar.gz")
    
      36sha256sums=('SKIP')
    
      37
    
      38prepare() {
    
      39    cd "$srcdir"
    
      40
    
      41    bsdtar -xf "cisco-secure-client-vpn_${pkgver}_amd64.deb" data.tar.xz
    
      42    mv data.tar.xz data-vpn.tar.xz
    
      43
    
      44    bsdtar -xf "cisco-secure-client-dart_${pkgver}_amd64.deb" data.tar.xz
    
      45    mv data.tar.xz data-dart.tar.xz
    
      46}
    
      47
    
      48package() {
    
      49    cd "$srcdir"
    
      50
    
      51    bsdtar -xf data-vpn.tar.xz -C "$pkgdir"
    
      52    bsdtar -xf data-dart.tar.xz -C "$pkgdir"
    
      53
    
      54    mkdir -p "$pkgdir/usr/lib"
    
      55    cp -a "$pkgdir/lib/." "$pkgdir/usr/lib/"
    
      56    rm -rf "$pkgdir/lib"
    
      57
    
      58    sed -i 's|^EnvironmentFile=/etc/environment|EnvironmentFile=-/etc/environment|' \
    
      59        "$pkgdir/usr/lib/systemd/system/vpnagentd.service"
    
      60
    
      61    mkdir -p "$pkgdir/opt/cisco/secureclient/dart"
    
      62    mv "$pkgdir/RequestXMLSchema.xsd" "$pkgdir/opt/cisco/secureclient/dart/"
    
      63
    
      64    install -Dm644 "$pkgdir/opt/cisco/secureclient/OpenSource.html" \
    
      65        "$pkgdir/usr/share/licenses/$pkgname/OpenSource.html"
    
      66
    
      67    chmod -R 755 "$pkgdir/etc" "$pkgdir/usr"
    
      68    chmod -R 775 \
    
      69        "$pkgdir/etc/xdg/menus/applications-merged" \
    
      70        "$pkgdir/usr/share/doc/cisco-secure-client-dart" \
    
      71        "$pkgdir/usr/share/doc/cisco-secure-client-vpn"
    
      72
    
      73    chown -R --no-dereference root:root "$pkgdir"
    
      74}
    
      75

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-02 11:50:42	Medium	2