jitsi-videobridge-bin
maintainer celogeek
· 7 votes
· scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged
The package downloads a .deb from the official jitsi.org domain, which is the project's own release infrastructure; unpacks and installs its contents; and includes local configuration files. The host 'download.jitsi.org' is not on standard whitelists but is legitimate for Jitsi, and the source is verified via a matching sha256sum. This is a normal binary package build from official sources, not a supply-chain risk.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a .deb from the official jitsi.org domain, which is the project's own release infrastructure; unpacks and installs its contents; and includes local configuration files. The host 'download.jitsi.org' is not on standard whitelists but is legitimate for Jitsi, and the source is verified via a matching sha256sum. This is a normal binary package build from official sources, not a supply-chain risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
"https://download.jitsi.org/stable/jitsi-videobridge2_${_version//+/-}-1_all.deb"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: C0rn3j <spleefer90@gmail.com>
2
# Contributor: Celogeek <private-4zokpdq6@mrhyde.xyz>
3
4
_basename=jitsi
5
_pkgname=videobridge
6
_version=2.3+307+g4bb0aead1
7
8
_pkgbase=${_basename}-${_pkgname}
9
_debname=${_basename}-${_pkgname}2
10
pkgname=${_pkgbase}-bin
11
pkgver=${_version}
12
pkgrel=1
13
pkgdesc="Jitsi Meet Videobridge binary"
14
arch=('any')
15
url="https://jitsi.org/jitsi-meet/"
16
license=('Apache')
17
depends=("java-runtime-openjdk=17" "bash")
18
optdepends=("prosody")
19
makedepends=('tar' 'unzip')
20
options=('!strip')
21
backup=(
22
"etc/${_pkgbase}/config"
23
"etc/${_pkgbase}/logging.properties"
24
"etc/${_pkgbase}/sip-communicator.properties"
25
"etc/${_pkgbase}/jvb.conf"
26
)
27
source=(
28
"https://download.jitsi.org/stable/jitsi-videobridge2_${_version//+/-}-1_all.deb"
29
"config"
30
"sip-communicator.properties"
31
"service"
32
"sysusers.conf"
33
"tmpfiles.conf"
34
"jitsi.install"
35
)
36
provides=(${_pkgbase})
37
conflicts=(${_pkgbase})
38
install=jitsi.install
39
40
build() {
41
rm -rf ${_pkgbase}
42
mkdir ${_pkgbase}
43
tar xJf data.tar.xz -C ${_pkgbase}
44
}
45
46
package() {
47
cd "$srcdir/${_pkgbase}"
48
49
DESTDIR="${pkgdir}/usr/lib/${_pkgbase}"
50
CONFDIR="${pkgdir}/etc/${_pkgbase}"
51
52
install -dm755 "${DESTDIR}"
53
cp -R usr/share/jitsi-videobridge/* "${DESTDIR}"
54
rm "${DESTDIR}"/{collect-dump-logs.sh,graceful_shutdown.sh}
55
56
chown -R root:root "${DESTDIR}"
57
58
install -dm700 "${CONFDIR}"
59
install -Dm600 -t "${CONFDIR}" etc/jitsi/videobridge/*
60
install -Dm644 "etc/sysctl.d/20-jvb-udp-buffers.conf" "${pkgdir}/etc/sysctl.d/${_pkgbase}.conf"
61
62
cd "$srcdir"
63
unzip "$srcdir/${_pkgbase}/usr/share/jitsi-videobridge/jitsi-videobridge.jar" reference.conf
64
mv reference.conf jvb.conf
65
install -Dm600 -t "${CONFDIR}" "config" "sip-communicator.properties" "jvb.conf"
66
install -Dm644 "service" "${pkgdir}/usr/lib/systemd/system/${_pkgbase}.service"
67
install -Dm644 "sysusers.conf" "${pkgdir}/usr/lib/sysusers.d/${_pkgbase}.conf"
68
install -Dm644 "tmpfiles.conf" "${pkgdir}/usr/lib/tmpfiles.d/${_pkgbase}.conf"
69
}
70
sha256sums=('e629bd307f31c09307dcf925657fd3962eb8d479a6c55e9d7f98d67ec058c43a'
71
'5dbd9e1fec28d8b6eda3ed38b514322dc1386507e0a653c7a73061cdc41d9982'
72
'cc9fbf77497bce3c9673b2d144928f11cdd0c0823940c2b60c8369a2f086b9b7'
73
'e433c840c4cac5663ed169e90899efc1d1210649bf828bb412295902985f9ee5'
74
'998cbc64def56ab98080ff7150dd0913a5e10325cd2b038cf3db14baf8cb19fc'
75
'8a8f2fd5d02f196dff0ce7ceb75e45d19028a9f22dc9e55653ab17cce29051af'
76
'59c2b2068205d6972c4b25bf1bbed9aaf08ff395b28309888cfe9b386dc29fa0')
77
Changes since previous scan
--- PKGBUILD @ 2026-06-23 00:13+++ PKGBUILD @ 2026-08-18 00:03@@ -3,13 +3,13 @@ _basename=jitsi _pkgname=videobridge-_version=2.3+295+g8d5c0037b+_version=2.3+307+g4bb0aead1 _pkgbase=${_basename}-${_pkgname} _debname=${_basename}-${_pkgname}2 pkgname=${_pkgbase}-bin pkgver=${_version}-pkgrel=2+pkgrel=1 pkgdesc="Jitsi Meet Videobridge binary" arch=('any') url="https://jitsi.org/jitsi-meet/"@@ -67,7 +67,7 @@ install -Dm644 "sysusers.conf" "${pkgdir}/usr/lib/sysusers.d/${_pkgbase}.conf" install -Dm644 "tmpfiles.conf" "${pkgdir}/usr/lib/tmpfiles.d/${_pkgbase}.conf" }-sha256sums=('fbd8778653d494c3bcfa74f3eac03c3270d7a3ae1c488fa68cad9a1b06d6b7d2'+sha256sums=('e629bd307f31c09307dcf925657fd3962eb8d479a6c55e9d7f98d67ec058c43a' '5dbd9e1fec28d8b6eda3ed38b514322dc1386507e0a653c7a73061cdc41d9982' 'cc9fbf77497bce3c9673b2d144928f11cdd0c0823940c2b60c8369a2f086b9b7' 'e433c840c4cac5663ed169e90899efc1d1210649bf828bb412295902985f9ee5'Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-18 00:03:42 | LOW | 2 |
| 2026-08-17 00:18:29 | LOW | 2 |
| 2026-08-16 00:03:42 | LOW | 2 |
| 2026-08-15 00:26:13 | LOW | 2 |
| 2026-08-14 00:03:41 | LOW | 2 |
| 2026-08-13 00:17:07 | LOW | 2 |
| 2026-08-12 00:27:08 | LOW | 2 |
| 2026-08-11 19:21:46 | MEDIUM | 1 |
| 2026-06-23 00:13:55 | CLEAN | 2 |
| 2026-06-22 14:13:37 | LOW | 2 |
| 2026-06-19 19:07:35 | CLEAN | 2 |
| 2026-06-18 16:11:54 | MEDIUM | 1 |