libwrap

maintainer solsticedhiver · 9 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from source tarballs hosted on official project and Debian servers; the non-whitelisted hosts are legitimate project-related domains, and the sources are verified with matching checksums, posing no real risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source tarballs hosted on official project and Debian servers; the non-whitelisted hosts are legitimate project-related domains, and the sources are verified with matching checksums, posing no real risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 http://ftp.porcupine.org/pub/security/tcp_wrappers_${pkgver%.*}.tar.gz
PKGBUILD:20 http://http.debian.net/debian/pool/main/t/tcp-wrappers/tcp-wrappers_${pkgver%.*}.q-${pkgver##*.}.debian.tar.xz

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: solsTiCe d'Hiver <solstice.dhiver@gmail.com>
    
      2# Contributor: Maxime Gauduin <alucryd@archlinux.org>
    
      3# Contributor: Manuel Hüsers <manuel.huesers@uni-ol.de>
    
      4# Contributor: vigo <vigo.the.unholy.carpathian@gmail.com>
    
      5# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
    
      6# Contributor: judd <jvinet@zeroflux.org>
    
      7
    
      8pkgname=libwrap
    
      9pkgver=7.6.37
    
      10pkgrel=1
    
      11pkgdesc='Monitors and Controls incoming TCP connections'
    
      12arch=(x86_64)
    
      13url="http://ftp.porcupine.org/pub/security/index.html"
    
      14license=('TCP-wrappers')
    
      15depends=( glibc libnsl)
    
      16provides=(tcp_wrappers-libs)
    
      17conflicts=(tcp_wrappers-libs)
    
      18source=(
    
      19  http://ftp.porcupine.org/pub/security/tcp_wrappers_${pkgver%.*}.tar.gz
    
      20  http://http.debian.net/debian/pool/main/t/tcp-wrappers/tcp-wrappers_${pkgver%.*}.q-${pkgver##*.}.debian.tar.xz
    
      21  tcp-wrappers-redhat-bug11881.patch
    
      22  hosts.allow
    
      23  hosts.deny
    
      24)
    
      25
    
      26sha256sums=('9543d7adedf78a6de0b221ccbbd1952e08b5138717f4ade814039bb489a4315d'
    
      27            'd34f7e3ec681375d116621911a62db777b84edc2bc6a590fa344eba029ff12b8'
    
      28            '2e527e54c1ea208de10a206c667f751e54651eb77c973271d213e3459d690403'
    
      29            'c1b19035a14ba552e8795ec3d7171e688592c9317f2eb14373320315435565e3'
    
      30            '969414f0a161e95fbe4cfe32df7c657a2793734d09416c00fa1116c5c0a9924f')
    
      31
    
      32prepare() {
    
      33  cd tcp_wrappers_${pkgver%.*}
    
      34  find $srcdir -type f -exec chmod +w {} \;
    
      35
    
      36  for patch in $(cat ../debian/patches/series); do
    
      37    patch -Np1 -i ../debian/patches/${patch}
    
      38  done
    
      39  patch -Np1 -i ../tcp-wrappers-redhat-bug11881.patch
    
      40
    
      41  sed -i '/^config-check/ i\
    
      42cflags: config-check\
    
      43' Makefile
    
      44}
    
      45
    
      46build() {
    
      47  cd tcp_wrappers_${pkgver%.*}
    
      48
    
      49  # first run of make fails but second succeeds!???
    
      50  # if you read this, please help me find a better fix than to run twice make
    
      51  make \
    
      52    COPTS="$CFLAGS" \
    
      53    LDOPTS="$LDFLAGS" \
    
      54    REAL_DAEMON_DIR=/usr/bin \
    
      55    STYLE='-DPROCESS_OPTIONS' \
    
      56    linux || make \
    
      57    COPTS="$CFLAGS" \
    
      58    LDOPTS="$LDFLAGS" \
    
      59    REAL_DAEMON_DIR=/usr/bin \
    
      60    STYLE='-DPROCESS_OPTIONS' \
    
      61    linux
    
      62}
    
      63
    
      64package() {
    
      65
    
      66  cd tcp_wrappers_${pkgver%.*}
    
      67
    
      68  install -Dm 644 tcpd.h -t "${pkgdir}"/usr/include/
    
      69  install -Dm 644 shared/libwrap.so.0.${pkgver%.*} -t "${pkgdir}"/usr/lib/
    
      70  ln -s libwrap.so.0.${pkgver%.*} "${pkgdir}"/usr/lib/libwrap.so.0
    
      71  ln -s libwrap.so.0 "${pkgdir}"/usr/lib/libwrap.so
    
      72
    
      73  install -Dm 644 DISCLAIMER -T "${pkgdir}"/usr/share/licenses/libwrap/LICENSE
    
      74}
    
      75
    
      76
    
      77# vim: ts=2 sw=2 et:
    
      78

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 09:51:03	MEDIUM	1
2026-07-16 00:05:41	LOW	2