etlegacy32-bin

LOW
maintainer Gr3q 3 votes scanned 2026-11-01 00:21:48.120785
View on AUR
Why flagged

The package downloads a binary release from the project's official domain (etlegacy.com), which is a non-whitelisted but legitimate host for the project; the source is not executed in a dangerous way and the build uses official project-provided assets.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The package downloads a binary release from the project's official domain (etlegacy.com), which is a non-whitelisted but legitimate host for the project; the source is not executed in a dangerous way and the build uses official project-provided assets.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:30 "https://www.etlegacy.com/download/file/787"

PKGBUILD

1 offending line(s) highlighted
1_pkgbase=etlegacy
2pkgname=etlegacy32-bin
3pkgdesc="Wolfenstein: Enemy Territory 2.60b compatible client/server (etlegacy engine, 32 bit), binary release"
4pkgver=2.86.2
5pkgrel=1
6arch=('i686' 'x86_64')
7url="http://www.etlegacy.com/"
8provides=('etlegacy')
9conflicts=('etlegacy' 'etlegacy32-mod')
10backup=('etc/xdg/etlegacy/etmain/etl_server.cfg'
11 'etc/xdg/etlegacy/etmain/legacy.cfg'
12 'etc/xdg/etlegacy/etmain/campaigncycle.cfg'
13 'etc/xdg/etlegacy/etmain/lmscycle.cfg'
14 'etc/xdg/etlegacy/etmain/mapvotecycle.cfg'
15 'etc/xdg/etlegacy/etmain/objectivecycle.cfg'
16 'etc/xdg/etlegacy/etlegacy.conf')
17install=etlegacy.install
18depends=(
19 "enemy-territory-data"
20 "lib32-mesa"
21 "lib32-gcc-libs"
22 "lib32-glibc"
23 "lib32-glew"
24)
25makedepends=("imagemagick" "librsvg")
26license=('GPL3')
27source=(
28 "etl_start.sh"
29 "etlded_start.sh"
30 "https://www.etlegacy.com/download/file/787"
31 "https://github.com/etlegacy/etlegacy/archive/refs/tags/v$pkgver.tar.gz")
32md5sums=(
33 '101f6755a6792825b5cd1982fd2ed890'
34 '76d91573489900d41823a30b0920c784'
35 'f9670bd3defd48a8455fbbe7a6a1f018'
36 'c63191bb0e48309140ca896595acbc32'
37)
38
39package() {
40 cd "$_pkgbase-v$pkgver-i386"
41 install -dm 755 "${pkgdir}"/usr/{bin,lib/${_pkgbase}/,share/{applications,icons,licenses/${_pkgbase},/doc/${_pkgbase}}}
42 cp -dr --no-preserve='ownership' ./ "${pkgdir}"/usr/lib/${_pkgbase}/
43 # Executables
44 install -Dm 755 "${srcdir}"/etl_start.sh "${pkgdir}"/usr/bin/etl.i386
45 install -Dm 755 "${srcdir}"/etlded_start.sh "${pkgdir}"/usr/bin/etlded.i386
46 # Incorrect permissions on install, fix
47 chmod 755 -R "${pkgdir}"/usr/lib/"${_pkgbase}"/legacy/omni-bot
48 # assets
49 ln -s /usr/share/enemy-territory/etmain/{pak0,pak1,pak2}.pk3 $pkgdir/usr/lib/$_pkgbase/etmain/
50
51 for i in 16 22 24 32 48 64 128 256 512 1024; do
52 magick -background none ./icons/hicolor/scalable/apps/etl.svg -resize ${i}x${i} -colors 256 ./icons/etl.png
53 install -Dvm644 ./icons/etl.png \
54 "$pkgdir/usr/share/icons/hicolor/${i}x${i}/apps/etl.png"
55 done
56
57 install -Dvm644 ./icons/hicolor/scalable/apps/etl.svg \
58 "$pkgdir/usr/share/icons/hicolor/scalable/apps/etl.svg"
59
60 # manpages
61 cp -dr --no-preserve='ownership' "./man" "${pkgdir}"/usr/share/
62
63 # applications
64 cp -dr --no-preserve='ownership' "./applications" "${pkgdir}"/usr/share/
65
66 #licenses
67 cp -dr --no-preserve='ownership' "./licenses" "${pkgdir}"/usr/share/
68
69 # doc
70 mkdir -p $pkgdir/usr/share/doc/$_pkgbase
71 install -m 644 "${srcdir}"/"$_pkgbase-$pkgver"/docs/game/anticheat.html $pkgdir/usr/share/doc/$_pkgbase/
72
73 # systemd
74 mkdir -p $pkgdir/etc/xdg/$_pkgbase/etmain
75 mkdir -p $pkgdir/usr/lib/systemd/system
76 install -m 644 "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.conf $pkgdir/etc/xdg/$_pkgbase/
77 sed -i 's/@BIN_DESCRIBE@/(32 bit)/g' "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.service.in
78 sed -i 's/@BIN_SUFFIX@/.i386/g' "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.service.in
79 install -m 644 "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.service.in $pkgdir/usr/lib/systemd/system/etlegacy-x86.service
80
81 # config
82 mv $pkgdir/usr/lib/$_pkgbase/etmain/*.cfg $pkgdir/etc/xdg/$_pkgbase/etmain/
83 ln -s /etc/xdg/$_pkgbase/etmain/{etl_server,legacy,{campaign,lms,mapvote,objective}cycle}.cfg $pkgdir/usr/lib/$_pkgbase/etmain/
84
85 # server
86 mkdir -p $pkgdir/var/lib/$_pkgbase-server
87 ln -s /etc/xdg/$_pkgbase/etmain $pkgdir/var/lib/$_pkgbase-server/
88}
89

Changes since previous scan

--- PKGBUILD @ 2026-10-28 00:06
+++ PKGBUILD @ 2026-11-01 00:21
@@ -1,7 +1,7 @@
_pkgbase=etlegacy
pkgname=etlegacy32-bin
pkgdesc="Wolfenstein: Enemy Territory 2.60b compatible client/server (etlegacy engine, 32 bit), binary release"
-pkgver=2.85.0
+pkgver=2.86.2
pkgrel=1
arch=('i686' 'x86_64')
url="http://www.etlegacy.com/"
@@ -27,13 +27,13 @@
source=(
"etl_start.sh"
"etlded_start.sh"
- "https://www.etlegacy.com/download/file/730"
+ "https://www.etlegacy.com/download/file/787"
"https://github.com/etlegacy/etlegacy/archive/refs/tags/v$pkgver.tar.gz")
md5sums=(
'101f6755a6792825b5cd1982fd2ed890'
'76d91573489900d41823a30b0920c784'
- '8de93ee4fb13e81cfa761af7407370f5'
- '84ceb797a74f8384061db043f5db0942'
+ 'f9670bd3defd48a8455fbbe7a6a1f018'
+ 'c63191bb0e48309140ca896595acbc32'
)
package() {

Scan history

Scanned at (UTC)SeverityRules
2026-11-01 00:21:48 Low 2
2026-10-31 00:07:41 Low 2
2026-10-30 00:29:30 Low 2
2026-10-29 00:13:55 Low 2
2026-10-28 19:50:31 Medium 1
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 00:13:10 Low 2
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion