◎ AURWatch - AUR Security Monitor
scan coverage …
Last scan …
Next scan -

daggerfall-fixes

maintainer skarbricat · 9 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads unofficial fixes and data files for a game from various hosts, including Google Drive and personal servers, but these are non-executable game assets; the worst case of a swapped source is data corruption, not code execution.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads unofficial fixes and data files for a game from various hosts, including Google Drive and personal servers, but these are non-executable game assets; the worst case of a swapped source is data corruption, not code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:13 source=("DFBIOGFIX_v1.1.zip::https://drive.google.com/uc?export=download&id=0B5d8Cfi4rIADR1NHc3hhUlpTbDQ"
  • PKGBUILD:14 "http://images.uesp.net/9/9d/Fixqs001.zip"
  • PKGBUILD:22 "http://slushpool.dfworkshop.net/FILES/magicdef.zip"

PKGBUILD

3 offending line(s) highlighted
1# Maintainer: Andrzej Giniewicz <gginiu@gmail.com>
2pkgname=daggerfall-fixes
3pkgver=20161023
4pkgrel=1
5pkgdesc="The Elder Scrolls II: Daggerfall, unofficial fixes"
6arch=('any')
7url="http://www.uesp.net/wiki/Daggerfall:Files#Unofficial_Patches_and_Fixes"
8license=('custom:daggerfall')
9depends=("daggerfall")
10makedepends=("unzip")
11options=(!emptydirs)
12install="fixes.install"
13source=("DFBIOGFIX_v1.1.zip::https://drive.google.com/uc?export=download&id=0B5d8Cfi4rIADR1NHc3hhUlpTbDQ"
14 "http://images.uesp.net/9/9d/Fixqs001.zip"
15 "http://images.uesp.net/6/6f/SPELLS.zip"
16 "http://images.uesp.net/0/0c/BIOG00T0.zip"
17 "http://images.uesp.net/d/d6/FACTFIX.ZIP"
18 "http://images.uesp.net/e/ed/DF-POLITIC.PAK.zip"
19 "http://images.uesp.net/0/0f/DFQFIX.ZIP"
20 "http://images.uesp.net/9/95/Q0C00Y03.ZIP"
21 "http://images.uesp.net/b/b9/Dark-elves.zip"
22 "http://slushpool.dfworkshop.net/FILES/magicdef.zip"
23 "andyfall-fixes.patch" "magical_effects_fix.patch")
24noextract=(DFBIOGFIX_v1.1.zip Fixqs001.zip SPELLS.zip BIOG00T0.zip FACTFIX.ZIP DF_POLITIC.PAK.zip
25 Dark-elves.zip DFQFIX.ZIP Q0C00Y03.ZIP magicdef.zip)
26md5sums=('a2872769f70dbe8dea475d94524d1740'
27 '4b8d31d14f3ee8c7400bdf8c9768aa1c'
28 '1e7d295e27b3da4be5484ae6e898eaf9'
29 '74a724074bf48b5cc64477d99f88f005'
30 '42f248b13255d905148d448c2372732c'
31 '1696cbc71f33d9d884a4d2d71b53649a'
32 '073bc139dea41cd8b52a425aef97c261'
33 '27d0a087d4972cfdb267e0ada4967862'
34 '6b1bcf37ec70752f2704657e736356e4'
35 '8162c3e6cdc7284b7238155cb5a732e8'
36 'cf8264f3447f7801f40b394c0c91c459'
37 'ed218728235b6e65c0ee896995f27bc5')
38
39package() {
40 cd "$srcdir"
41 _target="${pkgdir}"/usr/share/games/daggerfall
42 install -d -m775 "$_target"
43 _target="$_target"/mods
44 install -d -m775 "$_target"
45
46 cd "$_target"
47 install -d fixqs001-fixes/ARENA2
48 cd fixqs001-fixes/ARENA2
49 unzip "$srcdir"/Fixqs001.zip
50 rm readme.pqs
51 ls | while read file; do mv $file `echo $file | sed 's/.*/\U&/'`; done
52 rm O0B1XY13.QBN
53 rm O0B1XY13.QRC
54 rm O0B2XY14.QBN
55 rm O0B2XY14.QRC
56 rm O0B3XY15.QBN
57 rm O0B3XY15.QRC
58 rm O0B4XY16.QBN
59 rm O0B4XY16.QRC
60 rm O0B50Y17.QBN
61 rm O0B50Y17.QRC
62 chmod -R a-w .
63 cd "$_target"
64 echo "fixqs001-fixes" > fixes.extends
65
66 cd "$_target"
67 install -d jumping_spell_fix/ARENA2
68 cd jumping_spell_fix/ARENA2
69 unzip "$srcdir"/SPELLS.zip
70 cd "$_target"
71 echo "jumping_spell_fix" >> fixes.extends
72
73 cd "$_target"
74 install -d magical_effects_fix/ARENA2
75 cd magical_effects_fix/ARENA2
76 unzip "$srcdir"/magicdef.zip
77 rm README.TXT
78 cd "$_target"
79 cp "$srcdir"/magical_effects_fix.patch .
80 echo "magical_effects_fix" >> fixes.extends
81
82 cd "$_target"
83 install -d mages_biography_fix/ARENA2
84 cd mages_biography_fix/ARENA2
85 unzip "$srcdir"/BIOG00T0.zip
86 cd "$_target"
87 echo "mages_biography_fix" >> fixes.extends
88
89 cd "$_target"
90 install -d biography_fixes/ARENA2
91 cd biography_fixes/ARENA2
92 unzip "$srcdir"/DFBIOGFIX_v1.1.zip
93 rm -r DFBIOGFIX\ v1.1/English/EV_Original
94 mv DFBIOGFIX\ v1.1/English/* .
95 rm -r DFBIOGFIX\ v1.1
96 cd "$_target"
97 echo "mages_biography_fix" > biography_fixes.extends
98 echo "biography_fixes" >> fixes.extends
99
100 cd "$_target"
101 install -d faction_fix/ARENA2
102 cd faction_fix/ARENA2
103 unzip "$srcdir"/FACTFIX.ZIP
104 rm README.TXT
105 cd "$_target"
106 echo "faction_fix" >> fixes.extends
107
108 cd "$_target"
109 install -d wrothgarian_enclave_fix/ARENA2
110 cd wrothgarian_enclave_fix/ARENA2
111 unzip "$srcdir"/DF-POLITIC.PAK.zip
112 cd "$_target"
113 echo "wrothgarian_enclave_fix" >> fixes.extends
114
115 cd "$_target"
116 install -d andyfall-fixes/ARENA2
117 cd andyfall-fixes/ARENA2
118 unzip "$srcdir"/Dark-elves.zip
119 rm README.TXT
120 rm -rf BAK
121 cd "$_target"
122 cp "$srcdir"/andyfall-fixes.patch .
123 echo "andyfall-fixes" >> fixes.extends
124
125 cd "$_target"
126 install -d dfqfix/ARENA2
127 cd dfqfix/ARENA2
128 unzip "$srcdir"/DFQFIX.ZIP
129 rm README.TXT
130 rm STARTFIN.QBN
131 rm STARTFIN.QRC
132 rm STARTFIX.QBN
133 rm STARTFIX.QRC
134 cd "$_target"
135 echo "fixqs001-fixes" > dfqfix.extends
136 echo "dfqfix" >> fixes.extends
137
138 cd "$_target"
139 install -d extra_quests_patch-fixes/ARENA2
140 cd extra_quests_patch-fixes/ARENA2
141 unzip "$srcdir"/Q0C00Y03.ZIP
142 cd "$_target"
143 echo "extra_quests_patch-fixes" >> fixes.extends
144}
145

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion