jlink-software-and-documentation

LOW

maintainer AlexisPolti 60 votes scanned 2026-09-25 00:03:36.779685

View on AUR

Why flagged

The package downloads prebuilt binaries from Segger's official domain (segger.com), which is the legitimate vendor; despite the static analyzer flag for a non-standard host, this is a normal and trusted source for the software, and the binaries are installed in a standard way without obfuscation or remote code execution.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt binaries from Segger's official domain (segger.com), which is the legitimate vendor; despite the static analyzer flag for a non-standard host, this is a normal and trusted source for the software, and the binaries are installed in a standard way without obfuscation or remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source_x86_64=("JLink_Linux_${pkgver/./}_x86_64.tgz::https://www.segger.com/downloads/jlink/JLink_Linux_V${pkgver/./}_x86_64.tgz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Alexis Polti <ArchSegger at gmail dot com>
    
      2# Maintainer: pzl <alsoelp at gmail dot com>
    
      3
    
      4pkgname=jlink-software-and-documentation
    
      5pkgver=9.80
    
      6pkgrel=1
    
      7epoch=66
    
      8pkgdesc="Segger JLink software & documentation pack for Linux"
    
      9arch=('i686' 'x86_64' 'armv7h' 'aarch64' )
    
      10license=('custom' 'GPLv2')
    
      11groups=('jlink')
    
      12depends=('glibc' 'libudev0-shim' 'patch')
    
      13source_x86_64=("JLink_Linux_${pkgver/./}_x86_64.tgz::https://www.segger.com/downloads/jlink/JLink_Linux_V${pkgver/./}_x86_64.tgz")
    
      14source_aarch64=("JLink_Linux_${pkgver/./}_arm64.tgz::https://www.segger.com/downloads/jlink/JLink_Linux_V${pkgver/./}_arm64.tgz")
    
      15source=("99-jlink.rules.patch" "99-jlink-cmsis-dap.rules" "JLink.svg")
    
      16desktops=(
    
      17        "JFlashExe.desktop"
    
      18        "JFlashLiteExe.desktop"
    
      19        "JFlashSPI_CL.desktop"
    
      20        "JFlashSPIExe.desktop"
    
      21        "JLinkConfigExe.desktop"
    
      22        "JLinkExe.desktop"
    
      23        "JLinkGDBServer.desktop"
    
      24        "JLinkGUIServerExe.desktop"
    
      25        "JLinkLicenseManager.desktop"
    
      26        "JLinkRegistration.desktop"
    
      27        "JLinkRemoteServer.desktop"
    
      28        "JLinkRTTClient.desktop"
    
      29        "JLinkRTTLogger.desktop"
    
      30        "JLinkRTTViewer.desktop"
    
      31        "JLinkSWOViewerExe.desktop"
    
      32        "JMemExe.desktop"
    
      33        "JRunExe.desktop"
    
      34        "JTAGLoadExe.desktop"
    
      35)
    
      36source+=(${desktops[@]})
    
      37
    
      38md5sums_x86_64=('d5ba4cce13f90d0807e392c9c5e6ec98')
    
      39md5sums_aarch64=('6f660e3c73d9e3f353d316bd6bd0d65c')
    
      40
    
      41md5sums=("a57d93b791581c1f36e4c672303bb85d"
    
      42         "02c4941650a2bd345b03dd958313d4c5"
    
      43         "83a136d31b296dd8f0e23bc21f9d8e19"
    
      44         "7b0897db15242f4130f4d38ffe17a329"
    
      45         "79491f5eaac8d23cc604e727b6c33878"
    
      46         "4c6417b588f48f5440df3d3e7e1c68de"
    
      47         "0cecd43927dd99917e8fae37f6d87790"
    
      48         "a8e55eb7a5e8a8f1d353ae32a6e9be9c"
    
      49         "9b084afb6622c02eda631100cf52804a"
    
      50         "18436972bebea03c220e36f38911c128"
    
      51         "658d2e7a802e6fa567d505cbdb580ded"
    
      52         "8bd71c09443983b64e4e1c019f515f39"
    
      53         "a234fc1f9b2c1936f02c28b5aea9db3f"
    
      54         "1f6325c794a7965b10b392b84d5d4e62"
    
      55         "3699ccea9d54cdaf42736447a77597e5"
    
      56         "e87c6d996d3b688ee1152cb82f95b4de"
    
      57         "413a5481a768a5791b8b1babdc7a367d"
    
      58         "82c05490cff9899f637b9e6c95d86e47"
    
      59         "78a5e5dc623aa9e9c1ffe3974b084dfb"
    
      60         "6661cbd2790e4168cd835e50a2fb4e1d"
    
      61         "e1d104e5ee6fada9b673707b8b3e6616"
    
      62        )
    
      63
    
      64install=$pkgname.install
    
      65url="https://www.segger.com/jlink-software.html"
    
      66conflicts=("j-link-software-and-documentation")
    
      67replaces=("j-link-software-and-documentation")
    
      68DLAGENTS=("https::/usr/bin/env curl -o %o -d accept_license_agreement=accepted -d non_emb_ctr=confirmed")
    
      69options=(!strip)
    
      70
    
      71prepare() {
    
      72    # Change src path name
    
      73    if [ ${CARCH} = "x86_64" ]; then
    
      74        mv JLink_Linux_V${pkgver/./}_x86_64 JLink
    
      75    fi
    
      76    if [ ${CARCH} = "aarch64" ]; then
    
      77       mv JLink_Linux_V${pkgver/./}_arm64 JLink
    
      78    fi
    
      79}
    
      80
    
      81package(){
    
      82    # Match package placement from their .deb, in /opt
    
      83    install -dm755 "${pkgdir}/opt/SEGGER/JLink" \
    
      84            "${pkgdir}/usr/share/licenses/${pkgname}" \
    
      85            "${pkgdir}/usr/lib/" \
    
      86            "${pkgdir}/usr/bin/" \
    
      87            "${pkgdir}/etc/" \
    
      88            "${pkgdir}/usr/lib/udev/rules.d/" \
    
      89            "${pkgdir}/usr/share/doc/${pkgname}/" \
    
      90            "${pkgdir}/usr/share/pixmaps" \
    
      91            "${pkgdir}/usr/share/applications"
    
      92
    
      93    # Install desktop entry
    
      94    for i in "${desktops[@]}"
    
      95    do
    
      96        install -Dm644 "${i}" "${pkgdir}/usr/share/applications/"
    
      97    done
    
      98    install -Dm644 "JLink.svg" "${pkgdir}/usr/share/pixmaps/JLink.svg"
    
      99
    
      100    cd "${srcdir}/JLink"
    
      101
    
      102    # Bulk copy everything
    
      103    cp --preserve=mode -r J* Doc DDC* DevProExe Script Samples ETC README.txt Firmwares GDBServer lib* "${pkgdir}/opt/SEGGER/JLink"
    
      104    if [ ${CARCH} = "x86_64" ]; then
    
      105        cp --preserve=mode -r x86 "${pkgdir}/opt/SEGGER/JLink"
    
      106    fi
    
      107
    
      108    # Copy ETC/JFlash at the right place
    
      109    rm -f ${pkgdir}/etc/JFlash
    
      110    cp --preserve=mode -r ETC/JFlash "${pkgdir}/etc/"
    
      111
    
      112    # Create links where needed
    
      113    ln -s /opt/SEGGER/JLink/Doc/LicenseIncGUI.txt "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      114    sed -i 's/0x//g' 99-jlink.rules
    
      115    patch -i "${srcdir}/99-jlink.rules.patch" 99-jlink.rules
    
      116    install -Dm644 99-jlink.rules -t "${pkgdir}/usr/lib/udev/rules.d/"
    
      117    install -Dm644 "${srcdir}/99-jlink-cmsis-dap.rules" -t "${pkgdir}/usr/lib/udev/rules.d/"
    
      118    rm -f "${pkgdir}/etc/udev/rules.d/99-jlink.rules"
    
      119
    
      120    for f in J*; do
    
      121        ln -s /opt/SEGGER/JLink/"$f" "${pkgdir}/usr/bin"
    
      122    done
    
      123
    
      124    ln -s /opt/SEGGER/JLink/DevProExe "${pkgdir}/usr/bin"
    
      125
    
      126    for f in Doc/*; do
    
      127        ln -s /opt/SEGGER/JLink/"$f" "${pkgdir}/usr/share/doc/${pkgname}"
    
      128    done
    
      129}
    
      130

Changes since previous scan

--- PKGBUILD @ 2026-09-17 00:27
+++ PKGBUILD @ 2026-09-25 00:03
@@ -2,7 +2,7 @@
 # Maintainer: pzl <alsoelp at gmail dot com>
 
 pkgname=jlink-software-and-documentation
-pkgver=9.76a
+pkgver=9.80
 pkgrel=1
 epoch=66
 pkgdesc="Segger JLink software & documentation pack for Linux"
@@ -35,8 +35,8 @@
 )
 source+=(${desktops[@]})
 
-md5sums_x86_64=('95ec96d1265cb23134dd28d9f027f0b9')
-md5sums_aarch64=('fde2a69b1985deb3b0eb046894f1ca02')
+md5sums_x86_64=('d5ba4cce13f90d0807e392c9c5e6ec98')
+md5sums_aarch64=('6f660e3c73d9e3f353d316bd6bd0d65c')
 
 md5sums=("a57d93b791581c1f36e4c672303bb85d"
          "02c4941650a2bd345b03dd958313d4c5"

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-25 00:03:36	Low	2
2026-09-24 15:43:55	Medium	1
2026-09-17 00:27:14	Clean	2
2026-09-16 17:23:26	Medium	1
2026-09-16 01:20:46	Medium	1
2026-09-11 00:19:22	Clean	2
2026-09-10 17:21:08	Medium	1
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 03:15:31	Medium	1
2026-08-20 00:05:13	Clean	2
2026-08-19 13:41:59	Medium	1
2026-08-19 00:15:45	Low	2
2026-08-18 00:03:42	Low	2
2026-08-17 00:18:29	Low	2
2026-08-16 00:03:42	Low	2
2026-08-15 00:26:13	Low	2
2026-08-14 00:03:41	Low	2
2026-08-13 00:17:07	Low	2
2026-08-12 17:24:46	Medium	1