ivideon-server-headless
LOW
maintainer k0ste
4 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads official .deb files from the vendor's own domain (ivideon.com) to extract and repackage binaries; this is a normal source for the software, and the checksums are verified, making it low risk despite the non-whitelisted host.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official .deb files from the vendor's own domain (ivideon.com) to extract and repackage binaries; this is a normal source for the software, and the checksums are verified, making it low risk despite the non-whitelisted host.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source=("https://packages.ivideon.com/ubuntu/pool/non-free/i/${pkgname}/${pkgname}_${pkgver}-${pkgrel}~${_rel}_amd64.deb"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Shalygin Konstantin <k0ste@k0ste.ru>
2
# Contributor: Shalygin Konstantin <k0ste@k0ste.ru>
3
4
pkgname='ivideon-server-headless'
5
pkgver='3.14.0'
6
pkgrel='11543'
7
_rel='d694e54'
8
pkgdesc='Ivideon-server daemon'
9
arch=('x86_64')
10
url='https://ivideon.com'
11
license=('freeware')
12
depends=('portaudio' 'ffmpeg' 'gst-plugins-good' 'gst-plugins-base')
13
makedepends=('libarchive')
14
conflicts=('ivideon-video-server-nogui')
15
source=("https://packages.ivideon.com/ubuntu/pool/non-free/i/${pkgname}/${pkgname}_${pkgver}-${pkgrel}~${_rel}_amd64.deb"
16
"https://packages.ivideon.com/ubuntu/pool/non-free/i/ivideon-server-dahua-bin-module/ivideon-server-dahua-bin-module_${pkgver}-${pkgrel}~${_rel}_amd64.deb"
17
"https://packages.ivideon.com/ubuntu/pool/non-free/libd/libdahuasdk/libdahuasdk_1.0.2_amd64.deb"
18
"videoserverd.service"
19
"videoserverd.conf"
20
"sysusers.conf"
21
"videoservertmp.conf")
22
noextract=("${source[@]%%::*}")
23
sha256sums=('310741022f4d0a54099d0da4bbcf157415aa5398abf37cb31897f8ddfa3b167b'
24
'6fb3230a8e8cdc0bceeb6d2900b0f54248f3fab6c7fc73a5e98faba5502c2971'
25
'7da74ca97c53669f95efea718bbf05ddd7b0d5b0b97dc93d2777ed8c64388254'
26
'4b0fcdf8cc77eb8748041fbc78d2d7b3e75ced0d1b96b6ce38c17241441bc022'
27
'f0010bc64cd7c1b5aefcc7241f0e0074528aec1a4b51dd08bd429e95acd26012'
28
'91c4b133ad4d1fda72679ab393b647ac24a56e3c0d46cd2a908a47ed8524ec81'
29
'ad8029bf201260608daf7ed4d109731bbf247e8597e36cc1dea915fceae51b56')
30
backup=("etc/videoserverd.conf")
31
32
prepare() {
33
bsdtar xf "${srcdir}/${pkgname}_${pkgver}-${pkgrel}~${_rel}_amd64.deb"
34
bsdtar xf "data.tar.gz"
35
sed -i 's|$(dirname "$(readlink /etc/init.d/videoserver)")|/opt/ivideon/ivideon-server|g' "opt/ivideon/ivideon-server/serverctl.sh"
36
37
mkdir "${srcdir}/ivideon-server-dahua-bin-module"
38
cd "${srcdir}/ivideon-server-dahua-bin-module"
39
bsdtar xf "${srcdir}/ivideon-server-dahua-bin-module_${pkgver}-${pkgrel}~${_rel}_amd64.deb"
40
bsdtar xf "data.tar.gz"
41
42
mkdir "${srcdir}/libdahuasdk"
43
cd "${srcdir}/libdahuasdk"
44
bsdtar xf "${srcdir}/libdahuasdk_1.0.2_amd64.deb"
45
bsdtar xf "data.tar.xz"
46
}
47
48
build() {
49
rm "opt/ivideon/ivideon-server/ivideon-server.service"
50
rm "opt/ivideon/ivideon-server/remote-svc.service"
51
rm "opt/ivideon/ivideon-server/remote_service"
52
rm "opt/ivideon/ivideon-server/serverctl.sh"
53
}
54
55
package() {
56
cp -ax "opt" "${pkgdir}"
57
cp -ax "${srcdir}/ivideon-server-dahua-bin-module/opt" "${pkgdir}"
58
cp -ax "${srcdir}/libdahuasdk/opt" "${pkgdir}"
59
install -Dm0644 "videoserverd.service" "${pkgdir}/usr/lib/systemd/system/videoserverd.service"
60
install -Dm0644 "videoserverd.conf" "${pkgdir}/etc/videoserverd.conf"
61
install -Dm0644 "sysusers.conf" "${pkgdir}/usr/lib/sysusers.d/videoserverd.conf"
62
install -Dm0644 "videoservertmp.conf" "${pkgdir}/usr/lib/tmpfiles.d/videoserverd.conf"
63
install -dm0755 -o 176 -g 176 "${pkgdir}/run/videoserverd"
64
install -dm0775 -o 176 -g 176 "${pkgdir}/var/log/videoserverd"
65
}
66
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |