linux-fsync-nobara-bin
LOW
maintainer figue
9 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads prebuilt kernel RPMs from Fedora COPR, a known and plausible build infrastructure for community projects; while not on a standard whitelist, COPR is a legitimate Fedora service, and the downloads are verified via PGP keys and checksums, reducing risk to low.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt kernel RPMs from Fedora COPR, a known and plausible build infrastructure for community projects; while not on a standard whitelist, COPR is a legitimate Fedora service, and the downloads are verified via PGP keys and checksums, reducing risk to low.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
source=("https://download.copr.fedorainfracloud.org/results/gloriouseggroll/linux-nobara-mainline/fedora-${fedora}-x86_64/${l_build_id}-kernel/kernel-core-${pkgver}-${extras}.x86_64.rpm"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Joan Figueras <ffigue at gmail dot com>
2
# Contributor: Torge Matthies <openglfreak at googlemail dot com>
3
# Contributor: Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>
4
5
pkgbase=linux-fsync-nobara-bin
6
pkgname=${pkgbase}
7
pkgver=7.2.4
8
pkgrel=3
9
build_id=10992484
10
fedora=44
11
extras=202.nobara.fc${fedora}
12
printf -v l_build_id %08d%s ${build_id}
13
pkgdesc='The Linux kernel and modules of Nobara Project - Prebuilt version'
14
url="https://nobaraproject.org"
15
arch=(x86_64)
16
license=(GPL2)
17
options=('!strip')
18
depends=(coreutils kmod initramfs)
19
optdepends=('crda: to set the correct wireless channels of your country'
20
'linux-firmware: firmware images needed for some devices')
21
provides=(VIRTUALBOX-GUEST-MODULES
22
WIREGUARD-MODULE
23
KSMBD-MODULE
24
NTFS3-MODULE)
25
source=("https://download.copr.fedorainfracloud.org/results/gloriouseggroll/linux-nobara-mainline/fedora-${fedora}-x86_64/${l_build_id}-kernel/kernel-core-${pkgver}-${extras}.x86_64.rpm"
26
"https://download.copr.fedorainfracloud.org/results/gloriouseggroll/linux-nobara-mainline/fedora-${fedora}-x86_64/${l_build_id}-kernel/kernel-modules-${pkgver}-${extras}.x86_64.rpm"
27
"https://download.copr.fedorainfracloud.org/results/gloriouseggroll/linux-nobara-mainline/fedora-${fedora}-x86_64/${l_build_id}-kernel/kernel-devel-${pkgver}-${extras}.x86_64.rpm")
28
validpgpkeys=(
29
'ABAF11C65A2970B130ABE3C479BE3E4300411886' # Linux Torvalds
30
'647F28654894E3BD457199BE38DBBDC86092693E' # Greg Kroah-Hartman
31
)
32
33
sha256sums=('acad9a44d6e1f676e00112bf7fc438a000b77f82bfb777ff6104e62cbe930134'
34
'a157d5f003f0d9cc4609212649ad44632f826ce304651441acfcd507a3c77017'
35
'7f19df3d7e7e658a1f2a344025f4356ba7249af7ed0101cf4bb4c7e45157ef88')
36
37
package() {
38
39
local srcmodulesdir=$(ls -d ${srcdir}/lib/modules/${pkgver}*)
40
local kernver="${srcmodulesdir#${srcdir}/lib/modules/}"
41
local modulesdir="${pkgdir}/usr/lib/modules/${kernver}"
42
mkdir -p "${modulesdir}"
43
44
msg2 "Installing modules..."
45
cp -r ${srcmodulesdir} "${pkgdir}/usr/lib/modules"
46
cp -r "${srcdir}/usr" "${pkgdir}/"
47
48
#msg2 "Installing boot image..."
49
#install -Dm644 "$modulesdir/vmlinuz" "boot/vmlinuz-${pkgver}-fsync-nobara"
50
51
# Used by dmks
52
rm -fv "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64/build
53
mv -v "${pkgdir}"/usr/src/kernels/${pkgver}-${extras}.x86_64 "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64/build
54
rmdir -v "${pkgdir}"/usr/src/kernels
55
cd "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64
56
ln -sr "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64/build "$pkgdir/usr/src/$pkgbase"
57
58
# Perms
59
chmod 644 "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64/vmlinuz
60
61
# Used by mkinitcpio to name the kernel
62
echo "${pkgname}" | install -Dm644 /dev/stdin "${modulesdir}/pkgbase"
63
64
}
65
66
# vim:set ts=8 sts=2 sw=2 et:
67
Changes since previous scan
--- PKGBUILD @ 2026-09-16 00:03+++ PKGBUILD @ 2026-09-17 00:27@@ -5,10 +5,10 @@ pkgbase=linux-fsync-nobara-bin pkgname=${pkgbase} pkgver=7.2.4-pkgrel=1-build_id=10961912+pkgrel=3+build_id=10992484 fedora=44-extras=200.nobara.fc${fedora}+extras=202.nobara.fc${fedora} printf -v l_build_id %08d%s ${build_id} pkgdesc='The Linux kernel and modules of Nobara Project - Prebuilt version' url="https://nobaraproject.org"@@ -30,9 +30,9 @@ '647F28654894E3BD457199BE38DBBDC86092693E' # Greg Kroah-Hartman ) -sha256sums=('685514690dd0cbbd4eb5a3d9562fe3755d64794bc9f98d247055d0716c9b8114'- '619acb4e0c23555ade94db5fbaff4af3b72263e38225750d9252f5a48907db91'- 'ca1ace860e4a72b086a40b177d41ffcb48adce6bc1996c89667e99f8a94062cf')+sha256sums=('acad9a44d6e1f676e00112bf7fc438a000b77f82bfb777ff6104e62cbe930134'+ 'a157d5f003f0d9cc4609212649ad44632f826ce304651441acfcd507a3c77017'+ '7f19df3d7e7e658a1f2a344025f4356ba7249af7ed0101cf4bb4c7e45157ef88') package() { Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 23:24:19 | Medium | 1 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 19:20:04 | Medium | 1 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 23:18:28 | Medium | 1 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 19:54:21 | Medium | 1 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |