jdownloader2-bin
maintainer jayvandenhenst
· 10 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package installs only local bundled scripts and assets (all with sha256 checksums), creates a dedicated system user/group for JDownloader, and sets a setgid directory with ACLs — standard practice for a service-account-based install; the 'privileged install' flag refers to normal useradd/groupadd/chown in the .install hook, not sudoers or setuid binaries, and no remote code is fetched or executed at build/install time.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 75%): The package installs only local bundled scripts and assets (all with sha256 checksums), creates a dedicated system user/group for JDownloader, and sets a setgid directory with ACLs — standard practice for a service-account-based install; the 'privileged install' flag refers to normal useradd/groupadd/chown in the .install hook, not sudoers or setuid binaries, and no remote code is fetched or executed at build/install time.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
Privileged / out-of-pacman install (sudoers, setuid, or self-update)
privileged_install
The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.
-
PKGBUILD:90
install -d -m2775 "${pkgdir}/opt/JDownloader" -
.install:7
chmod g+s "/opt/JDownloader"
PKGBUILD
1 offending line(s) highlighted
1
source=( 'preprocessor' )
2
# Maintainer: Martin Rys <https://rys.rs/contact>
3
# Contributor: Derson5
4
5
pkgname=jdownloader2-bin
6
pkgver=latest
7
pkgrel=22
8
pkgdesc='Download manager, written in Java, for one-click hosting sites like Rapidshare and MEGA. Uses its own updater'
9
arch=('any')
10
url='https://jdownloader.org/'
11
# https://board.jdownloader.org/showthread.php?p=517795#post517795
12
license=('LicenseRef-GPL-3.0+proprietary')
13
depends=(
14
'hicolor-icon-theme'
15
'java-runtime'
16
'libarchive'
17
'libxi'
18
'libxtst'
19
'ttf-font')
20
optdepends=('phantomjs: needed for some remote capture solving')
21
install='jdownloader.install'
22
source=(
23
'JDownloader'
24
'JDownloaderHeadless'
25
'JDownloaderHeadlessCtl'
26
'functions.sh'
27
'JDownloaderHeadlessCleanLogin'
28
'jdownloader.xml'
29
'jdownloader.desktop'
30
'jd-containers.desktop'
31
'jd-container16.png'
32
'jd-container22.png'
33
'jd-container24.png'
34
'jd-container32.png'
35
'jd-container48.png'
36
'jd-container256.png'
37
'jdownloader16.png'
38
'jdownloader22.png'
39
'jdownloader24.png'
40
'jdownloader32.png'
41
'jdownloader48.png'
42
'jdownloader256.png'
43
'jdownloader.service')
44
sha256sums=('cab5904f226028fdc9384f407ceca34b4305885176fad29b08a2e8b83653a345'
45
'd555c78d8110e536aee67de765ee5134d872fbb48354050f7b2f14ff5499120a'
46
'dca392fad29c70eff609ec25abaefd33343c8a6c98088e0719c6746759ed0aa5'
47
'ddea1dc41023cfdae4db91a23a86ebf8a6be294ee8ba59307f68f97c839d5f31'
48
'1c9949bfeaf3595783eec9501e600cb8c4443e04f72d57c095560fb66dcd53d1'
49
'c4301592694b3273ed44814debcc03bf1e4fc85882954f5c03e55508c53c4491'
50
'44a499df472328f9034f9972aad02df0fc27a45ef1bb3e9314576d2fa9fdfcbe'
51
'92cfbe543ee1f9e094347dbd9c0c6a59bd52974145f00dbece8ed0da9a828bfa'
52
'16d70dfefe6d4d655313ff2784d2d259287d09634236e17a8c0ba00eac136274'
53
'69d99b5d27c847eb7d99ea4e49adba2a5ac1cb12ce10eb03d38e524d6f12e234'
54
'7d6073a968ff0d33a259a622ed34d8a58beb9cbdf715a8279b384546b1b4df38'
55
'69ad34361769c576422bc245b910c4e0e8ed89e75435ac0a3aced9911872aaca'
56
'271b10840c2d9df2c94deb28ac1477c3f3424a7cd0033e41f09615dddefa0947'
57
'896eb67760bf0f3b2527b1f0cebee6cb0d16499af8961cb38bb5dca3e6d27d07'
58
'b7cad9813e641eddf82571609346bb3a9cdb75e57ffa0a43fbc75721af2bc99c'
59
'02ecfb160b7973f5739357e4676556a0f9e01df5b655eab40fe89f463514259a'
60
'a10a45298541c025f28e9a084a87ab89a53428a00a50a9944ed3bac7978340fd'
61
'cb63ab195ff1b876b668dbe518f4572971e5e0fe239a627ef67486933fcaed07'
62
'b5540647f8120f723fb14747473a96e3ee031ffbc0f097e66c6cfd3431bf4e56'
63
'6c7a28ec72c8627e9bf06a58d7f6bfed075632a6743e1c8087dc0fa065261504'
64
'8d170fd301b37302a4f64cec759bdb5c879cb30c8b8e94120f3f985df1d31b7f')
65
66
package() {
67
install -d -m755 "${pkgdir}/opt/JDownloaderScripts"
68
install -D -m755 "${srcdir}/JDownloader" "${pkgdir}/opt/JDownloaderScripts/JDownloader"
69
install -D -m755 "${srcdir}/JDownloaderHeadless" "${pkgdir}/opt/JDownloaderScripts/JDownloaderHeadless"
70
install -D -m755 "${srcdir}/JDownloaderHeadlessCtl" "${pkgdir}/opt/JDownloaderScripts/JDownloaderHeadlessCtl"
71
install -D -m755 "${srcdir}/functions.sh" "${pkgdir}/opt/JDownloaderScripts/functions.sh"
72
install -D -m755 "${srcdir}/JDownloaderHeadlessCleanLogin" "${pkgdir}/opt/JDownloaderScripts/JDownloaderHeadlessCleanLogin"
73
74
install -D -m644 "${srcdir}/jdownloader.xml" "${pkgdir}/usr/share/mime/packages/jdownloader.xml"
75
install -D -m644 "${srcdir}/jdownloader.desktop" "${pkgdir}/usr/share/applications/jdownloader.desktop"
76
install -D -m644 "${srcdir}/jd-containers.desktop" "${pkgdir}/usr/share/applications/jd-containers.desktop"
77
install -D -m644 "${srcdir}/jd-container16.png" "${pkgdir}/usr/share/icons/hicolor/16x16/mimetypes/jd-container.png"
78
install -D -m644 "${srcdir}/jd-container22.png" "${pkgdir}/usr/share/icons/hicolor/22x22/mimetypes/jd-container.png"
79
install -D -m644 "${srcdir}/jd-container24.png" "${pkgdir}/usr/share/icons/hicolor/24x24/mimetypes/jd-container.png"
80
install -D -m644 "${srcdir}/jd-container32.png" "${pkgdir}/usr/share/icons/hicolor/32x32/mimetypes/jd-container.png"
81
install -D -m644 "${srcdir}/jd-container48.png" "${pkgdir}/usr/share/icons/hicolor/48x48/mimetypes/jd-container.png"
82
install -D -m644 "${srcdir}/jd-container256.png" "${pkgdir}/usr/share/icons/hicolor/256x256/mimetypes/jd-container.png"
83
install -D -m644 "${srcdir}/jdownloader16.png" "${pkgdir}/usr/share/icons/hicolor/16x16/apps/jdownloader.png"
84
install -D -m644 "${srcdir}/jdownloader22.png" "${pkgdir}/usr/share/icons/hicolor/22x22/apps/jdownloader.png"
85
install -D -m644 "${srcdir}/jdownloader24.png" "${pkgdir}/usr/share/icons/hicolor/24x24/apps/jdownloader.png"
86
install -D -m644 "${srcdir}/jdownloader32.png" "${pkgdir}/usr/share/icons/hicolor/32x32/apps/jdownloader.png"
87
install -D -m644 "${srcdir}/jdownloader48.png" "${pkgdir}/usr/share/icons/hicolor/48x48/apps/jdownloader.png"
88
install -D -m644 "${srcdir}/jdownloader256.png" "${pkgdir}/usr/share/icons/hicolor/256x256/apps/jdownloader.png"
89
install -D -m644 "${srcdir}/jdownloader.service" "${pkgdir}/usr/lib/systemd/system/jdownloader.service"
90
install -d -m2775 "${pkgdir}/opt/JDownloader"
91
mkdir -p "${pkgdir}/usr/bin"
92
93
ln -s "/opt/JDownloaderScripts/JDownloader" "${pkgdir}/usr/bin/JDownloader"
94
ln -s "/opt/JDownloaderScripts/JDownloader" "${pkgdir}/usr/bin/jdownloader"
95
ln -s "/opt/JDownloaderScripts/JDownloaderHeadless" "${pkgdir}/usr/bin/JDownloaderHeadless"
96
ln -s "/opt/JDownloaderScripts/JDownloaderHeadlessCtl" "${pkgdir}/usr/bin/JDownloaderHeadlessCtl"
97
ln -s "/opt/JDownloaderScripts/JDownloaderHeadlessCleanLogin" "${pkgdir}/usr/bin/JDownloaderHeadlessCleanLogin"
98
}
99
100
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 11:24:03 | LOW | 3 |
| 2026-08-01 11:20:22 | MEDIUM | 2 |