linphone-desktop
The source is a Git repository from the project's official GitLab instance and a PNG icon from the same trusted source; both are from the legitimate project host, so the non-whitelisted host is a false concern.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Git repository from the project's official GitLab instance and a PNG icon from the same trusted source; both are from the legitimate project host, so the non-whitelisted host is a false concern.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:13
"git+https://gitlab.linphone.org/BC/public/linphone-desktop.git#tag=${pkgver}"
PKGBUILD
1 offending line(s) highlighted# Maintainer: Nathan Chere <aur@nathanchere.com.au>
pkgname=linphone-desktop
pkgver=6.2.3
pkgrel=1
pkgdesc='A free VoIP and video softphone based on the SIP protocol'
arch=(x86_64)
url='http://linphone.org'
license=('GPL-3.0-only')
depends=('qt6-base' 'qt6-declarative' 'qt6-networkauth' 'qt6-svg' 'qt6-multimedia' 'qt6-speech' 'qt6-tools' 'libpulse' 'libxcrypt-compat' 'v4l-utils' 'glew')
makedepends=('coreutils' 'git' 'gendesk' 'cmake' 'meson' 'ninja' 'yasm' 'nasm' 'doxygen' 'perl' 'python-pystache' 'python-six')
source=(
"git+https://gitlab.linphone.org/BC/public/linphone-desktop.git#tag=${pkgver}"
"linphone.png::https://gitlab.linphone.org/BC/public/linphone-desktop/-/raw/8dfd384e3df08b200c8eb382b740da6839961bf0/linphone-app/assets/icons/hicolor/128x128/apps/icon.png"
)
sha512sums=('3ad59435c3dfa3cdc30cd1596827c65006eac850ffeb091ac42714054cba414a65db9050a726dcda0b1719912796e800f67fdb064422abd5d51fd40756dbc2cc'
'3a5431033d40cff112d8db4c3bb9d43d41e5ae20c1c18d4c0ddc207b21f19853951298b23fc656bb464980a3c178717aabf379778c191ab53fcb9d99f2f577fd')
options=()
provides=(linphone=${pkgver})
prepare() {
cd "$srcdir/linphone-desktop"
git submodule update --init --recursive
}
build() {
cd "$srcdir/linphone-desktop"
mkdir -p build && cd build
cmake .. -DCMAKE_BUILD_PARALLEL_LEVEL=$(nproc) -DCMAKE_BUILD_TYPE=RelWithDebInfo
cmake --build . --target install --parallel $(nproc) --config RelWithDebInfo
cd "$srcdir"
gendesk -f -n \
--pkgname="$pkgname" \
--pkgdesc="$pkgdesc" \
--name="Linphone Desktop 6" \
--genericname="VoIP Client" \
--categories=Network \
--icon=linphone.png \
--exec=/opt/linphone/linphone-launcher \
--terminal=false \
--startupnotify=true \
--comment "Linphone"
}
package() {
mkdir -p "$pkgdir/opt/linphone/"
cp -r "$srcdir/linphone-desktop/build/OUTPUT/." "$pkgdir/opt/linphone/"
mkdir -p "$pkgdir/usr/share/applications/"
install -Dm644 "$srcdir/linphone-desktop.desktop" "$pkgdir/usr/share/applications/"
mkdir -p "$pkgdir/usr/share/pixmaps/"
install -Dm644 "$srcdir/linphone.png" "$pkgdir/usr/share/pixmaps/"
echo "#!/bin/bash" > "$pkgdir/opt/linphone/linphone-launcher"
echo 'export LD_LIBRARY_PATH="/opt/linphone/lib${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}"' >> "$pkgdir/opt/linphone/linphone-launcher"
echo 'exec /opt/linphone/bin/linphone "$@"' >> "$pkgdir/opt/linphone/linphone-launcher"
chmod +x "$pkgdir/opt/linphone/linphone-launcher"
mkdir -p "$pkgdir/usr/bin/"
ln -s /opt/linphone/linphone-launcher "$pkgdir/usr/bin/linphone"
}
Changes since previous scan
--- PKGBUILD @ 2026-10-14 00:06+++ PKGBUILD @ 2026-11-01 00:21@@ -1,28 +1,25 @@ # Maintainer: Nathan Chere <aur@nathanchere.com.au> pkgname=linphone-desktop-pkgver=5.3.1-pkgrel=2+pkgver=6.2.3+pkgrel=1 pkgdesc='A free VoIP and video softphone based on the SIP protocol' arch=(x86_64) url='http://linphone.org' license=('GPL-3.0-only') depends=('qt6-base' 'qt6-declarative' 'qt6-networkauth' 'qt6-svg' 'qt6-multimedia' 'qt6-speech' 'qt6-tools' 'libpulse' 'libxcrypt-compat' 'v4l-utils' 'glew')-makedepends=('coreutils' 'git' 'gendesk' 'cmake' 'yasm' 'nasm' 'doxygen' 'perl' 'python-pystache' 'python-six')+makedepends=('coreutils' 'git' 'gendesk' 'cmake' 'meson' 'ninja' 'yasm' 'nasm' 'doxygen' 'perl' 'python-pystache' 'python-six') source=( "git+https://gitlab.linphone.org/BC/public/linphone-desktop.git#tag=${pkgver}" "linphone.png::https://gitlab.linphone.org/BC/public/linphone-desktop/-/raw/8dfd384e3df08b200c8eb382b740da6839961bf0/linphone-app/assets/icons/hicolor/128x128/apps/icon.png"- "linphone_package-cmake.patch" )-sha512sums=('a7adeec5b8e116ad8504e443429fc8607cc4001f6eeb0a4b2c9eb8f81d1768a8ddec3104649d74a1683e0b934975d27cfd323fcac8ee357df6ae5853ce54a3a5'- 'd6495cdc022b1e4c92b3641cb70347e7e6b6ef47599004de729e908b4876a12540713ab54b588611c99c8025fb9b33e3392573c85c13f72cdaee8bcf7a73d65d'- '7bc4c74555e7ef3bf65daa136e015e7f338ed63dc65989852754256d813cc859c78174480ee524a5efafc61e9414db76c5ca6abf13d654db696de34c068ed460')+sha512sums=('3ad59435c3dfa3cdc30cd1596827c65006eac850ffeb091ac42714054cba414a65db9050a726dcda0b1719912796e800f67fdb064422abd5d51fd40756dbc2cc'+ '3a5431033d40cff112d8db4c3bb9d43d41e5ae20c1c18d4c0ddc207b21f19853951298b23fc656bb464980a3c178717aabf379778c191ab53fcb9d99f2f577fd') options=() provides=(linphone=${pkgver}) prepare() { cd "$srcdir/linphone-desktop"- patch -p1 < "$srcdir/linphone_package-cmake.patch" git submodule update --init --recursive } @@ -38,7 +35,7 @@ gendesk -f -n \ --pkgname="$pkgname" \ --pkgdesc="$pkgdesc" \- --name="Linphone Desktop 5" \+ --name="Linphone Desktop 6" \ --genericname="VoIP Client" \ --categories=Network \ --icon=linphone.png \@@ -59,7 +56,8 @@ install -Dm644 "$srcdir/linphone.png" "$pkgdir/usr/share/pixmaps/" echo "#!/bin/bash" > "$pkgdir/opt/linphone/linphone-launcher"- echo 'LD_LIBRARY_PATH="/opt/linphone/lib:$LD_LIBRARY_PATH" /opt/linphone/bin/linphone "$@"' >> "$pkgdir/opt/linphone/linphone-launcher"+ echo 'export LD_LIBRARY_PATH="/opt/linphone/lib${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}"' >> "$pkgdir/opt/linphone/linphone-launcher"+ echo 'exec /opt/linphone/bin/linphone "$@"' >> "$pkgdir/opt/linphone/linphone-launcher" chmod +x "$pkgdir/opt/linphone/linphone-launcher" mkdir -p "$pkgdir/usr/bin/"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 01:18:27 | Medium | 1 |
| 2026-10-14 00:06:47 | Low | 2 |