linux-fsync-nobara-bin
LOW
maintainer figue
9 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads prebuilt kernel RPMs from Fedora COPR, a legitimate build service; while the host is not a standard kernel mirror, it is a trusted project-specific infrastructure, and the files are verified with provided checksums, reducing risk to low.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt kernel RPMs from Fedora COPR, a legitimate build service; while the host is not a standard kernel mirror, it is a trusted project-specific infrastructure, and the files are verified with provided checksums, reducing risk to low.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
source=("https://download.copr.fedorainfracloud.org/results/gloriouseggroll/linux-nobara-mainline/fedora-${fedora}-x86_64/${l_build_id}-kernel/kernel-core-${pkgver}-${extras}.x86_64.rpm"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Joan Figueras <ffigue at gmail dot com>
2
# Contributor: Torge Matthies <openglfreak at googlemail dot com>
3
# Contributor: Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>
4
5
pkgbase=linux-fsync-nobara-bin
6
pkgname=${pkgbase}
7
pkgver=7.3.1
8
pkgrel=1
9
build_id=11234269
10
fedora=44
11
extras=200.nobara.fc${fedora}
12
printf -v l_build_id %08d%s ${build_id}
13
pkgdesc='The Linux kernel and modules of Nobara Project - Prebuilt version'
14
url="https://nobaraproject.org"
15
arch=(x86_64)
16
license=(GPL2)
17
options=('!strip')
18
depends=(coreutils kmod initramfs)
19
optdepends=('crda: to set the correct wireless channels of your country'
20
'linux-firmware: firmware images needed for some devices')
21
provides=(VIRTUALBOX-GUEST-MODULES
22
WIREGUARD-MODULE
23
KSMBD-MODULE
24
NTFS3-MODULE)
25
source=("https://download.copr.fedorainfracloud.org/results/gloriouseggroll/linux-nobara-mainline/fedora-${fedora}-x86_64/${l_build_id}-kernel/kernel-core-${pkgver}-${extras}.x86_64.rpm"
26
"https://download.copr.fedorainfracloud.org/results/gloriouseggroll/linux-nobara-mainline/fedora-${fedora}-x86_64/${l_build_id}-kernel/kernel-modules-${pkgver}-${extras}.x86_64.rpm"
27
"https://download.copr.fedorainfracloud.org/results/gloriouseggroll/linux-nobara-mainline/fedora-${fedora}-x86_64/${l_build_id}-kernel/kernel-devel-${pkgver}-${extras}.x86_64.rpm")
28
validpgpkeys=(
29
'ABAF11C65A2970B130ABE3C479BE3E4300411886' # Linux Torvalds
30
'647F28654894E3BD457199BE38DBBDC86092693E' # Greg Kroah-Hartman
31
)
32
33
sha256sums=('5ccc02b4481449b30533ac774ebebcb5e8d7f2b691de91608db1d077a546e081'
34
'91b77adea3251eca21db36f3741a2f02c0b1ee5df1000b99688a8bb0dee831e5'
35
'b3a8fd9e01d1d4fa4144e1193b25e276bf2c21d285a5ae455ec6b72ad4cff9b5')
36
37
package() {
38
39
local srcmodulesdir=$(ls -d ${srcdir}/lib/modules/${pkgver}*)
40
local kernver="${srcmodulesdir#${srcdir}/lib/modules/}"
41
local modulesdir="${pkgdir}/usr/lib/modules/${kernver}"
42
mkdir -p "${modulesdir}"
43
44
msg2 "Installing modules..."
45
cp -r ${srcmodulesdir} "${pkgdir}/usr/lib/modules"
46
cp -r "${srcdir}/usr" "${pkgdir}/"
47
48
#msg2 "Installing boot image..."
49
#install -Dm644 "$modulesdir/vmlinuz" "boot/vmlinuz-${pkgver}-fsync-nobara"
50
51
# Used by dmks
52
rm -fv "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64/build
53
mv -v "${pkgdir}"/usr/src/kernels/${pkgver}-${extras}.x86_64 "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64/build
54
rmdir -v "${pkgdir}"/usr/src/kernels
55
cd "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64
56
ln -sr "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64/build "$pkgdir/usr/src/$pkgbase"
57
58
# Perms
59
chmod 644 "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64/vmlinuz
60
61
# Used by mkinitcpio to name the kernel
62
echo "${pkgname}" | install -Dm644 /dev/stdin "${modulesdir}/pkgbase"
63
64
}
65
66
# vim:set ts=8 sts=2 sw=2 et:
67
Changes since previous scan
--- PKGBUILD @ 2026-10-31 00:07+++ PKGBUILD @ 2026-11-01 00:21@@ -4,11 +4,11 @@ pkgbase=linux-fsync-nobara-bin pkgname=${pkgbase}-pkgver=7.3.0-pkgrel=2-build_id=11198804+pkgver=7.3.1+pkgrel=1+build_id=11234269 fedora=44-extras=203.nobara.fc${fedora}+extras=200.nobara.fc${fedora} printf -v l_build_id %08d%s ${build_id} pkgdesc='The Linux kernel and modules of Nobara Project - Prebuilt version' url="https://nobaraproject.org"@@ -30,9 +30,9 @@ '647F28654894E3BD457199BE38DBBDC86092693E' # Greg Kroah-Hartman ) -sha256sums=('f27775dba1d83aba18daeef168e6b62fbc878a279d0e9eabc826df3327c6c79b'- '79c63996e752264006c4c82a29474d8a8cdcb82ac8bb61888cd49db9ffd82b33'- '216a2d0943e965e038f6d83618a3671b14d6b0c24de009976ab2618edc78fe8c')+sha256sums=('5ccc02b4481449b30533ac774ebebcb5e8d7f2b691de91608db1d077a546e081'+ '91b77adea3251eca21db36f3741a2f02c0b1ee5df1000b99688a8bb0dee831e5'+ 'b3a8fd9e01d1d4fa4144e1193b25e276bf2c21d285a5ae455ec6b72ad4cff9b5') package() { Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 23:59:16 | Medium | 1 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 23:57:35 | Medium | 1 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 19:38:15 | Medium | 1 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 19:16:12 | Medium | 1 |