ipmiview

LOW

maintainer zhimsel 44 votes scanned 2026-10-20 00:10:31.152894

View on AUR

Why flagged

The source is downloaded from Supermicro's official domain via a parameterized URL, which is normal for vendor download portals; the package builds from official vendor-provided source, and no untrusted or obfuscated code execution occurs.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is downloaded from Supermicro's official domain via a parameterized URL, which is normal for vendor download portals; the package builds from official vendor-provided source, and no untrusted or obfuscated code execution occurs.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:23 "IPMIView_${pkgver}-${_pkgdate}.tar.gz::https://www.supermicro.com/support/resources/getfile.php?SoftwareItemID=${_downloadID}&type=serversoftwarefile"

PKGBUILD

1 offending line(s) highlighted

      1pkgname=ipmiview
    
      2pkgver=2.25.0
    
      3pkgrel=1
    
      4_pkgdate=260812
    
      5_downloadID=1176
    
      6pkgdesc="Supermicro IPMI tool"
    
      7makedepends=('tar')
    
      8depends=("glibc" "java-runtime")
    
      9arch=('x86_64')
    
      10license=('custom:"Super Micro Computer"')
    
      11url="https://www.supermicro.com/en/support/resources/downloadcenter/smsdownload"
    
      12
    
      13backup=(
    
      14    "opt/${pkgname}/account.properties"
    
      15    "opt/${pkgname}/email.properties"
    
      16    "opt/${pkgname}/iKVM.properties"
    
      17    "opt/${pkgname}/IPMIView.properties"
    
      18    "opt/${pkgname}/stunnel.properties"
    
      19    "opt/${pkgname}/timeout.properties"
    
      20    )
    
      21
    
      22source=(
    
      23    "IPMIView_${pkgver}-${_pkgdate}.tar.gz::https://www.supermicro.com/support/resources/getfile.php?SoftwareItemID=${_downloadID}&type=serversoftwarefile"
    
      24    'ipmiview.desktop'
    
      25    'ipmiview.png'
    
      26    )
    
      27
    
      28sha512sums=('6e35f13173fc11ac0e415aaf754c99ccb6559a6fe2ac1702b8ccec1b6c2b622b2ed161259b48af364e14bea818c3a838544a841d6593fd879a548c365459a778'
    
      29            '82f6d4a9f6ff031f0c7e7ab78a550ea76b8e297df62aaa9837a37fe4f0b4a8b4dfa4aae59c0edc9ee2f0b7e249548ba4f5f50a44e0682a7f7b6f098163a17879'
    
      30            'd1fb8e68ca057e3b2bc1c6e51cda226443c729db5166363d637a536afc07aab285ba46f9da5f656837e2423685a0ae421789a4768acee5ac8185ecb04318fc81')
    
      31
    
      32package() {
    
      33  mkdir -p ${pkgdir}/opt/${pkgname}
    
      34  mkdir -p ${pkgdir}/usr/bin
    
      35  mkdir -p ${pkgdir}/usr/share/applications
    
      36
    
      37  pushd ${srcdir}/IPMIView_${pkgver}_build.${_pkgdate}_bundleJRE_Linux_x64
    
      38  rm -rf jre/ # Remove bundled jre
    
      39  cp -rf . ${pkgdir}/opt/${pkgname}
    
      40  popd
    
      41
    
      42  touch ${pkgdir}/opt/${pkgname}/account.properties
    
      43  chmod a+rw ${pkgdir}/opt/${pkgname}/account.properties
    
      44
    
      45  touch ${pkgdir}/opt/${pkgname}/email.properties
    
      46  chmod a+rw ${pkgdir}/opt/${pkgname}/email.properties
    
      47
    
      48  touch ${pkgdir}/opt/${pkgname}/iKVM.properties
    
      49  chmod a+rw ${pkgdir}/opt/${pkgname}/iKVM.properties
    
      50
    
      51  touch ${pkgdir}/opt/${pkgname}/IPMIView.properties
    
      52  chmod a+rw ${pkgdir}/opt/${pkgname}/IPMIView.properties
    
      53
    
      54  touch ${pkgdir}/opt/${pkgname}/stunnel.properties
    
      55  chmod a+rw ${pkgdir}/opt/${pkgname}/stunnel.properties
    
      56
    
      57  touch ${pkgdir}/opt/${pkgname}/timeout.properties
    
      58  chmod a+rw ${pkgdir}/opt/${pkgname}/timeout.properties
    
      59
    
      60  ln -s /opt/${pkgname}/IPMIView20 ${pkgdir}/usr/bin/${pkgname}
    
      61  install -m 0644 "${srcdir}/${pkgname}.desktop" "${pkgdir}/usr/share/applications/"
    
      62  install -m 0644 "${srcdir}/${pkgname}.png" "${pkgdir}/opt/${pkgname}/"
    
      63}
    
      64

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 00:28:03	Low	2
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	2
2026-10-05 00:08:03	Low	2
2026-10-04 00:18:08	Low	2
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2