jitsi-videobridge-bin
LOW
maintainer celogeek
7 votes
scanned 2026-10-03 00:23:04.761738
Why flagged
The package downloads a prebuilt .deb from the official jitsi.org domain, which is the project's legitimate release infrastructure;虽 non-whitelisted, it is not a swappable host, and the checksums are provided and valid, making this a standard binary package with low risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from the official jitsi.org domain, which is the project's legitimate release infrastructure;虽 non-whitelisted, it is not a swappable host, and the checksums are provided and valid, making this a standard binary package with low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
"https://download.jitsi.org/stable/jitsi-videobridge2_${_version//+/-}-1_all.deb"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: C0rn3j <spleefer90@gmail.com>
2
# Contributor: Celogeek <private-4zokpdq6@mrhyde.xyz>
3
4
_basename=jitsi
5
_pkgname=videobridge
6
_version=2.3+318+gbf271b11f
7
8
_pkgbase=${_basename}-${_pkgname}
9
_debname=${_basename}-${_pkgname}2
10
pkgname=${_pkgbase}-bin
11
pkgver=${_version}
12
pkgrel=1
13
pkgdesc="Jitsi Meet Videobridge binary"
14
arch=('any')
15
url="https://jitsi.org/jitsi-meet/"
16
license=('Apache')
17
depends=("java-runtime-openjdk=17" "bash")
18
optdepends=("prosody")
19
makedepends=('tar' 'unzip')
20
options=('!strip')
21
backup=(
22
"etc/${_pkgbase}/config"
23
"etc/${_pkgbase}/logging.properties"
24
"etc/${_pkgbase}/sip-communicator.properties"
25
"etc/${_pkgbase}/jvb.conf"
26
)
27
source=(
28
"https://download.jitsi.org/stable/jitsi-videobridge2_${_version//+/-}-1_all.deb"
29
"config"
30
"sip-communicator.properties"
31
"service"
32
"sysusers.conf"
33
"tmpfiles.conf"
34
"jitsi.install"
35
)
36
provides=(${_pkgbase})
37
conflicts=(${_pkgbase})
38
install=jitsi.install
39
40
build() {
41
rm -rf ${_pkgbase}
42
mkdir ${_pkgbase}
43
tar xJf data.tar.xz -C ${_pkgbase}
44
}
45
46
package() {
47
cd "$srcdir/${_pkgbase}"
48
49
DESTDIR="${pkgdir}/usr/lib/${_pkgbase}"
50
CONFDIR="${pkgdir}/etc/${_pkgbase}"
51
52
install -dm755 "${DESTDIR}"
53
cp -R usr/share/jitsi-videobridge/* "${DESTDIR}"
54
rm "${DESTDIR}"/{collect-dump-logs.sh,graceful_shutdown.sh}
55
56
chown -R root:root "${DESTDIR}"
57
58
install -dm700 "${CONFDIR}"
59
install -Dm600 -t "${CONFDIR}" etc/jitsi/videobridge/*
60
install -Dm644 "etc/sysctl.d/20-jvb-udp-buffers.conf" "${pkgdir}/etc/sysctl.d/${_pkgbase}.conf"
61
62
cd "$srcdir"
63
unzip "$srcdir/${_pkgbase}/usr/share/jitsi-videobridge/jitsi-videobridge.jar" reference.conf
64
mv reference.conf jvb.conf
65
install -Dm600 -t "${CONFDIR}" "config" "sip-communicator.properties" "jvb.conf"
66
install -Dm644 "service" "${pkgdir}/usr/lib/systemd/system/${_pkgbase}.service"
67
install -Dm644 "sysusers.conf" "${pkgdir}/usr/lib/sysusers.d/${_pkgbase}.conf"
68
install -Dm644 "tmpfiles.conf" "${pkgdir}/usr/lib/tmpfiles.d/${_pkgbase}.conf"
69
}
70
sha256sums=('650a38bd1b1da7585d69f662c2cb17730e3956766e10273ac020b74a22e0253c'
71
'5dbd9e1fec28d8b6eda3ed38b514322dc1386507e0a653c7a73061cdc41d9982'
72
'cc9fbf77497bce3c9673b2d144928f11cdd0c0823940c2b60c8369a2f086b9b7'
73
'e433c840c4cac5663ed169e90899efc1d1210649bf828bb412295902985f9ee5'
74
'998cbc64def56ab98080ff7150dd0913a5e10325cd2b038cf3db14baf8cb19fc'
75
'8a8f2fd5d02f196dff0ce7ceb75e45d19028a9f22dc9e55653ab17cce29051af'
76
'59c2b2068205d6972c4b25bf1bbed9aaf08ff395b28309888cfe9b386dc29fa0')
77
Changes since previous scan
--- PKGBUILD @ 2026-09-23 00:28+++ PKGBUILD @ 2026-10-03 00:23@@ -3,7 +3,7 @@ _basename=jitsi _pkgname=videobridge-_version=2.3+307+g4bb0aead1+_version=2.3+318+gbf271b11f _pkgbase=${_basename}-${_pkgname} _debname=${_basename}-${_pkgname}2@@ -67,7 +67,7 @@ install -Dm644 "sysusers.conf" "${pkgdir}/usr/lib/sysusers.d/${_pkgbase}.conf" install -Dm644 "tmpfiles.conf" "${pkgdir}/usr/lib/tmpfiles.d/${_pkgbase}.conf" }-sha256sums=('e629bd307f31c09307dcf925657fd3962eb8d479a6c55e9d7f98d67ec058c43a'+sha256sums=('650a38bd1b1da7585d69f662c2cb17730e3956766e10273ac020b74a22e0253c' '5dbd9e1fec28d8b6eda3ed38b514322dc1386507e0a653c7a73061cdc41d9982' 'cc9fbf77497bce3c9673b2d144928f11cdd0c0823940c2b60c8369a2f086b9b7' 'e433c840c4cac5663ed169e90899efc1d1210649bf828bb412295902985f9ee5'Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-03 00:23:04 | Low | 2 |
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |
| 2026-09-27 00:07:07 | Low | 2 |
| 2026-09-26 00:12:15 | Low | 2 |
| 2026-09-25 00:03:36 | Low | 2 |
| 2026-09-24 00:24:14 | Low | 2 |
| 2026-09-23 13:40:34 | Medium | 1 |
| 2026-09-23 00:28:13 | Low | 2 |
| 2026-09-22 00:15:14 | Low | 2 |
| 2026-09-21 00:26:32 | Low | 2 |
| 2026-09-20 00:25:31 | Low | 2 |
| 2026-09-19 00:25:36 | Low | 2 |
| 2026-09-18 00:17:11 | Low | 2 |
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |