jellyfin-server-bin

MEDIUM
maintainer notfire 5 votes scanned 2026-09-08 15:17:32.240420
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:21 source_x86_64=("https://repo.jellyfin.org/files/server/debian/latest-stable/amd64/jellyfin-server_${_pkgver}_amd64.deb")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: notfire <notfire@posteo.net>
2# Contributor: Jingbei Li <i@jingbei.li>
3# Contributor: Eric Cheng <ericcheng@hey.com>
4
5pkgname=jellyfin-server-bin
6pkgver=12.0
7_pkgver="${pkgver}+deb12"
8pkgrel=1
9pkgdesc='Jellyfin server backend'
10arch=('x86_64' 'aarch64')
11url='https://jellyfin.org/'
12license=('GPL2')
13provides=('jellyfin-server')
14conflicts=('jellyfin-server' 'jellyfin-server-git')
15depends=('bash' 'sqlite' 'fontconfig' 'jellyfin-ffmpeg')
16optdepends=('jellyfin-web: to run web-app on the same machine')
17source=('jellyfin.conf'
18 'jellyfin.service'
19 'jellyfin.sysusers'
20 'jellyfin.tmpfiles')
21source_x86_64=("https://repo.jellyfin.org/files/server/debian/latest-stable/amd64/jellyfin-server_${_pkgver}_amd64.deb")
22source_aarch64=("https://repo.jellyfin.org/files/server/debian/latest-stable/arm64/jellyfin-server_${_pkgver}_arm64.deb")
23sha256sums=('d28c4219f2ab87ca7b7e9dd53710fb689d604baffd9acb3fef6b663d537944ec'
24 '0f8511673816daf528625366b6c27bc7e6182e4ac789191c87474667398376e2'
25 '9bc1ddb77c73d46cc4078356b5773e5a776ebf8b47a1c820ad5fb17591ad5228'
26 'b7faa4b0c756cdb361ef5b04fddfdc416b00f1246bb3a19a34bf4d185a6a7e5a')
27sha256sums_x86_64=('15d3a51dc2211ad6a9aa90dd2e6ff9083c6b38fc6882c255469895b098bb2e27')
28sha256sums_aarch64=('fe14287ebfd3018c05b575020247de0600895f86d052424554d270f348047d95')
29backup=('etc/conf.d/jellyfin')
30options=('staticlibs')
31
32package() {
33 tar -xf data.tar.xz
34
35 cp -r "$srcdir"/usr "$pkgdir"/usr
36 rm -r "$pkgdir"/usr/share
37
38 install -Dm 644 jellyfin.service -t "$pkgdir"/usr/lib/systemd/system/
39 install -Dm 644 jellyfin.sysusers "$pkgdir"/usr/lib/sysusers.d/jellyfin.conf
40 install -Dm 644 jellyfin.tmpfiles "$pkgdir"/usr/lib/tmpfiles.d/jellyfin.conf
41 install -Dm 644 jellyfin.conf "$pkgdir"/etc/conf.d/jellyfin
42}
43

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-08 15:17
@@ -3,7 +3,7 @@
# Contributor: Eric Cheng <ericcheng@hey.com>
pkgname=jellyfin-server-bin
-pkgver=10.11.11
+pkgver=12.0
_pkgver="${pkgver}+deb12"
pkgrel=1
pkgdesc='Jellyfin server backend'
@@ -24,8 +24,8 @@
'0f8511673816daf528625366b6c27bc7e6182e4ac789191c87474667398376e2'
'9bc1ddb77c73d46cc4078356b5773e5a776ebf8b47a1c820ad5fb17591ad5228'
'b7faa4b0c756cdb361ef5b04fddfdc416b00f1246bb3a19a34bf4d185a6a7e5a')
-sha256sums_x86_64=('d772daa41a0e13cf7765cc7bfdec80fb4f05aee37bd6fcf3943d0a09a56768d4')
-sha256sums_aarch64=('4ceea480e04a3317a1b43434e1b601ba448c1aee952cc30123bfa656da6cd631')
+sha256sums_x86_64=('15d3a51dc2211ad6a9aa90dd2e6ff9083c6b38fc6882c255469895b098bb2e27')
+sha256sums_aarch64=('fe14287ebfd3018c05b575020247de0600895f86d052424554d270f348047d95')
backup=('etc/conf.d/jellyfin')
options=('staticlibs')

Scan history

Scanned at (UTC)SeverityRules
2026-09-08 15:17:32 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 18:55:24 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion