libstoragemgmt (MEDIUM)

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("${pkgname}-${pkgver}.tar.gz::https://codeload.${_uri}/tar.gz/refs/tags/${pkgver}")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Shalygin Konstantin <k0ste@k0ste.ru>
    
      2# Contributor: Shalygin Konstantin <k0ste@k0ste.ru>
    
      3
    
      4pkgname='libstoragemgmt'
    
      5pkgver='1.11.0'
    
      6pkgrel='1'
    
      7pkgdesc='A library for storage management'
    
      8arch=('x86_64' 'aarch64')
    
      9_uri="github.com/libstorage/${pkgname}"
    
      10url="https://${_uri}"
    
      11license=('LGPL')
    
      12depends=('sqlite' 'openssl' 'libconfig' 'ledmon' 'sg3_utils' 'systemd')
    
      13makedepends=('chrpath' 'python-pywbem' 'python-six' 'procps-ng')
    
      14checkdepends=('check' 'valgrind')
    
      15optdepends=('arcconf: support for Microsemi (Adaptec) controllers'
    
      16	    'storcli: support for Broadcom (LSI) controllers')
    
      17source=("${pkgname}-${pkgver}.tar.gz::https://codeload.${_uri}/tar.gz/refs/tags/${pkgver}")
    
      18sha256sums=('9abd55b76b99bafac5448eb1b57166d2ec633ff76c929db1473c85efb900dbab')
    
      19
    
      20build() {
    
      21  cd "${pkgname}-${pkgver}"
    
      22  autoreconf -fvi
    
      23  ./configure CFLAGS="${CFLAGS} ${DEBUG_CFLAGS}" \
    
      24    CXXLAGS="${CXXFLAGS} ${DEBUG_CXXFLAGS}" \
    
      25    LDLAGS="${LDFLAGS}" \
    
      26    --prefix="/usr" \
    
      27    --bindir="/usr/bin" \
    
      28    --sbindir="/usr/bin" \
    
      29    --sysconfdir="/etc" \
    
      30    --localstatedir="/var" \
    
      31    --libdir="/usr/lib" \
    
      32    --datarootdir="/usr/share" \
    
      33    --datadir="/usr/share"
    
      34  make
    
      35}
    
      36
    
      37check() {
    
      38  cd "${pkgname}-${pkgver}"
    
      39  make test
    
      40}
    
      41
    
      42package() {
    
      43  cd "${pkgname}-${pkgver}"
    
      44  make DESTDIR="${pkgdir}" install
    
      45}
    
      46

Changes since previous scan

--- PKGBUILD @ 2026-06-18 16:11
+++ PKGBUILD @ 2026-09-18 21:28
@@ -2,24 +2,27 @@
 # Contributor: Shalygin Konstantin <k0ste@k0ste.ru>
 
 pkgname='libstoragemgmt'
-pkgver='1.10.3'
+pkgver='1.11.0'
 pkgrel='1'
 pkgdesc='A library for storage management'
 arch=('x86_64' 'aarch64')
-url="https://github.com/libstorage/${pkgname}"
+_uri="github.com/libstorage/${pkgname}"
+url="https://${_uri}"
 license=('LGPL')
-depends=('libxml2' 'icu' 'sqlite' 'openssl' 'libconfig' 'ledmon' 'systemd')
-makedepends=('check' 'chrpath' 'valgrind' 'python-pywbem' 'procps-ng')
+depends=('sqlite' 'openssl' 'libconfig' 'ledmon' 'sg3_utils' 'systemd')
+makedepends=('chrpath' 'python-pywbem' 'python-six' 'procps-ng')
+checkdepends=('check' 'valgrind')
 optdepends=('arcconf: support for Microsemi (Adaptec) controllers'
 	    'storcli: support for Broadcom (LSI) controllers')
-source=("${url}/releases/download/${pkgver}/${pkgname}-${pkgver}.tar.gz")
-sha256sums=('66ccac385eb2759e47422d35d5325d2d8f077e4693a6663be12d100ebf608a10')
+source=("${pkgname}-${pkgver}.tar.gz::https://codeload.${_uri}/tar.gz/refs/tags/${pkgver}")
+sha256sums=('9abd55b76b99bafac5448eb1b57166d2ec633ff76c929db1473c85efb900dbab')
 
-prepare() {
+build() {
   cd "${pkgname}-${pkgver}"
-
   autoreconf -fvi
-  ./configure \
+  ./configure CFLAGS="${CFLAGS} ${DEBUG_CFLAGS}" \
+    CXXLAGS="${CXXFLAGS} ${DEBUG_CXXFLAGS}" \
+    LDLAGS="${LDFLAGS}" \
     --prefix="/usr" \
     --bindir="/usr/bin" \
     --sbindir="/usr/bin" \
@@ -28,16 +31,12 @@
     --libdir="/usr/lib" \
     --datarootdir="/usr/share" \
     --datadir="/usr/share"
-}
-
-build() {
-  cd "${pkgname}-${pkgver}"
   make
 }
 
 check() {
-  cd "${pkgname}-${pkgver}/test"
-  ./runtests.sh
+  cd "${pkgname}-${pkgver}"
+  make test
 }
 
 package() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-18 21:28:57	Medium	1
2026-06-18 16:11:54	Clean	0