dotnet-targeting-pack-8.0-bin

maintainer Gr3q · 5 votes · base dotnet-core-8.0-bin · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source URLs point to Microsoft's official build domain for .NET SDK downloads, which is a legitimate and expected source for this package; the non-whitelisted host is plausibly part of Microsoft's infrastructure, and the downloaded tarballs are standard prebuilt binaries intended for distribution, not malicious payloads.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URLs point to Microsoft's official build domain for .NET SDK downloads, which is a legitimate and expected source for this package; the non-whitelisted host is plausibly part of Microsoft's infrastructure, and the downloaded tarballs are standard prebuilt binaries intended for distribution, not malicious payloads.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 source_armv7h=("https://builds.dotnet.microsoft.com/dotnet/Sdk/${_sdkver}/dotnet-sdk-${_sdkver}-linux-arm.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Attila Greguss <floyd0122[at]gmail[dot]com>
    
      2# armv7h and aarch64 Comaintainers needed
    
      3
    
      4pkgbase=dotnet-core-8.0-bin
    
      5pkgname=(
    
      6  'aspnet-runtime-8.0-bin'
    
      7  'dotnet-runtime-8.0-bin'
    
      8  'dotnet-sdk-8.0-bin'
    
      9  'dotnet-targeting-pack-8.0-bin'
    
      10  'aspnet-targeting-pack-8.0-bin'
    
      11 )
    
      12pkgver=8.0.29.sdk423
    
      13_runtimever=8.0.29
    
      14_sdkver=8.0.423
    
      15pkgrel=1
    
      16arch=('x86_64' 'armv7h' 'aarch64')
    
      17url='https://www.microsoft.com/net/core'
    
      18license=('MIT')
    
      19options=('staticlibs')
    
      20source_armv7h=("https://builds.dotnet.microsoft.com/dotnet/Sdk/${_sdkver}/dotnet-sdk-${_sdkver}-linux-arm.tar.gz")
    
      21source_aarch64=("https://builds.dotnet.microsoft.com/dotnet/Sdk/${_sdkver}/dotnet-sdk-${_sdkver}-linux-arm64.tar.gz")
    
      22source_x86_64=("https://builds.dotnet.microsoft.com/dotnet/Sdk/${_sdkver}/dotnet-sdk-${_sdkver}-linux-x64.tar.gz")
    
      23sha512sums_armv7h=('d8e499a1521d0a91450f56b7b193e3a9de735775950fab6aedf5018c9dd78f0f8b0207bec43ba55f9e77e287dd097526d5d88de4701ba8c964db32d27bcb670f')
    
      24sha512sums_aarch64=('8c6dd335a8fa63849af551fe6f10ca8e92db0b1aaa761727e3d997d7ebfebe68d9fdccdd241a1804f6812055770b00a40648f32e69f1606ecf864440902c67a1')
    
      25sha512sums_x86_64=('e94513dfe42271a85f01e87bd4272aa80b4ec13556f4531754802542225667775242c5e281a94837dae6cc65f7bcc457d2f663f240c0e2b7573fd909e786b1a5')
    
      26
    
      27package_dotnet-runtime-8.0-bin() {
    
      28  pkgdesc='The .NET Core runtime (binary)'
    
      29  depends=(
    
      30  	"dotnet-host>=${_runtimever}"
    
      31    'libgcc'
    
      32    'libstdc++'
    
      33    'glibc'
    
      34    'icu'
    
      35    'libunwind'
    
      36    'zlib'
    
      37    'openssl'
    
      38  )
    
      39  optdepends=('lttng-ust: CoreCLR tracing')
    
      40  provides=("dotnet-runtime-8.0")
    
      41  conflicts=("dotnet-runtime-8.0")
    
      42
    
      43  install -dm 755 "${pkgdir}"/usr/share/{dotnet/shared,licenses}
    
      44  cp -dr --no-preserve='ownership' shared/Microsoft.NETCore.App "${pkgdir}"/usr/share/dotnet/shared/
    
      45  ln -s dotnet-host-bin "${pkgdir}"/usr/share/licenses/dotnet-runtime-8.0-bin
    
      46}
    
      47
    
      48package_aspnet-runtime-8.0-bin() {
    
      49  pkgdesc='The ASP.NET Core runtime (binary)'
    
      50  depends=('dotnet-runtime-8.0-bin')
    
      51  provides=("aspnet-runtime-8.0")
    
      52  conflicts=( "aspnet-runtime-8.0")
    
      53
    
      54  install -dm 755 "${pkgdir}"/usr/share/{dotnet/shared,licenses}
    
      55  cp -dr --no-preserve='ownership' shared/Microsoft.AspNetCore.App "${pkgdir}"/usr/share/dotnet/shared/
    
      56  ln -s dotnet-host-bin "${pkgdir}"/usr/share/licenses/aspnet-runtime-8.0-bin
    
      57}
    
      58
    
      59package_dotnet-sdk-8.0-bin() {
    
      60  pkgdesc='The .NET Core SDK (binary)'
    
      61  depends=(
    
      62    'glibc'
    
      63    'libgcc'
    
      64    'libstdc++'
    
      65    'dotnet-runtime-8.0-bin'
    
      66    'dotnet-targeting-pack-8.0-bin'
    
      67    'netstandard-targeting-pack')
    
      68  optdepends=('aspnet-targeting-pack-bin: Build ASP.NET Core applications')
    
      69  provides=("dotnet-sdk-8.0")
    
      70  conflicts=("dotnet-sdk-8.0")
    
      71
    
      72  install -dm 755 "${pkgdir}"/usr/share/{dotnet,licenses}
    
      73  cp -dr --no-preserve='ownership' sdk sdk-manifests templates "${pkgdir}"/usr/share/dotnet/
    
      74  ln -s dotnet-host-bin "${pkgdir}"/usr/share/licenses/dotnet-sdk-8.0-bin
    
      75}
    
      76
    
      77package_dotnet-targeting-pack-8.0-bin() {
    
      78  pkgdesc='The .NET Core targeting pack (binary)'
    
      79  depends=(
    
      80    'netstandard-targeting-pack'
    
      81  )
    
      82  provides=(dotnet-targeting-pack-8.0)
    
      83  conflicts=(dotnet-targeting-pack-8.0)
    
      84
    
      85  if [ $CARCH = 'x86_64' ]; then msarch=x64;
    
      86  elif [ $CARCH = 'armv7h' ]; then msarch=arm;
    
      87  elif [ $CARCH = 'aarch64' ]; then msarch=arm64; fi
    
      88
    
      89  install -dm 755 "${pkgdir}"/usr/share/{dotnet,dotnet/packs,licenses}
    
      90  cp -dr --no-preserve='ownership' packs/Microsoft.NETCore.App.{Host.linux-${msarch},Ref} "${pkgdir}"/usr/share/dotnet/packs/
    
      91  ln -s dotnet-host-bin "${pkgdir}"/usr/share/licenses/dotnet-targeting-pack-8.0-bin
    
      92}
    
      93
    
      94package_aspnet-targeting-pack-8.0-bin() {
    
      95  pkgdesc='The ASP.NET Core targeting pack (binary)'
    
      96  depends=(
    
      97    'dotnet-targeting-pack-8.0-bin'
    
      98  )
    
      99  provides=(aspnet-targeting-pack-8.0)
    
      100  conflicts=(aspnet-targeting-pack-8.0)
    
      101
    
      102  install -dm 755 "${pkgdir}"/usr/share/{dotnet,dotnet/packs,licenses}
    
      103  cp -dr --no-preserve='ownership' packs/Microsoft.AspNetCore.App.Ref "${pkgdir}"/usr/share/dotnet/packs/
    
      104  ln -s dotnet-host-bin "${pkgdir}"/usr/share/licenses/aspnet-targeting-pack-8.0-bin
    
      105}
    
      106

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:18
+++ PKGBUILD @ 2026-08-03 00:08
@@ -9,9 +9,9 @@
   'dotnet-targeting-pack-8.0-bin'
   'aspnet-targeting-pack-8.0-bin'
  )
-pkgver=8.0.28.sdk422
-_runtimever=8.0.28
-_sdkver=8.0.422
+pkgver=8.0.29.sdk423
+_runtimever=8.0.29
+_sdkver=8.0.423
 pkgrel=1
 arch=('x86_64' 'armv7h' 'aarch64')
 url='https://www.microsoft.com/net/core'
@@ -20,15 +20,16 @@
 source_armv7h=("https://builds.dotnet.microsoft.com/dotnet/Sdk/${_sdkver}/dotnet-sdk-${_sdkver}-linux-arm.tar.gz")
 source_aarch64=("https://builds.dotnet.microsoft.com/dotnet/Sdk/${_sdkver}/dotnet-sdk-${_sdkver}-linux-arm64.tar.gz")
 source_x86_64=("https://builds.dotnet.microsoft.com/dotnet/Sdk/${_sdkver}/dotnet-sdk-${_sdkver}-linux-x64.tar.gz")
-sha512sums_armv7h=('b044d78a3c2f5c03db5beaebe45cd304d80499103a3c6b298dfc0e66394164fdcac6eded81004585059b5bd788b83964802a776373ff04327a7697b86042c8ce')
-sha512sums_aarch64=('e40062e386d2cbab967d6e796a82872d7a4f89f610618239b115d339d082559f6d548ef90ac139710b817e6890cb868c86ef526915afdf2c0e812fde36e41cb0')
-sha512sums_x86_64=('5cde8b72ad98b910856207a19f6ffb0977f1f3b9ac76bbd03ed9e2f155370e2b7a950e589d38f55b3fd7799a2abc9ccbe4a3b180f1f628fe625634888449e07c')
+sha512sums_armv7h=('d8e499a1521d0a91450f56b7b193e3a9de735775950fab6aedf5018c9dd78f0f8b0207bec43ba55f9e77e287dd097526d5d88de4701ba8c964db32d27bcb670f')
+sha512sums_aarch64=('8c6dd335a8fa63849af551fe6f10ca8e92db0b1aaa761727e3d997d7ebfebe68d9fdccdd241a1804f6812055770b00a40648f32e69f1606ecf864440902c67a1')
+sha512sums_x86_64=('e94513dfe42271a85f01e87bd4272aa80b4ec13556f4531754802542225667775242c5e281a94837dae6cc65f7bcc457d2f663f240c0e2b7573fd909e786b1a5')
 
 package_dotnet-runtime-8.0-bin() {
   pkgdesc='The .NET Core runtime (binary)'
   depends=(
   	"dotnet-host>=${_runtimever}"
-    'gcc-libs'
+    'libgcc'
+    'libstdc++'
     'glibc'
     'icu'
     'libunwind'
@@ -59,7 +60,8 @@
   pkgdesc='The .NET Core SDK (binary)'
   depends=(
     'glibc'
-    'gcc-libs'
+    'libgcc'
+    'libstdc++'
     'dotnet-runtime-8.0-bin'
     'dotnet-targeting-pack-8.0-bin'
     'netstandard-targeting-pack')

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 09:20:02	MEDIUM	1
2026-06-20 00:18:46	MEDIUM	1
2026-06-19 23:51:18	CLEAN	2
2026-06-19 19:07:35	LOW	2
2026-06-18 18:04:49	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1