logstash-bin

maintainer VVL · 2 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The source is a prebuilt binary from Elastic's official artifact host (artifacts.elastic.co), which is the project's legitimate distribution infrastructure; downloading and installing official vendor binaries is standard for AUR packages and poses no additional supply-chain risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt binary from Elastic's official artifact host (artifacts.elastic.co), which is the project's legitimate distribution infrastructure; downloading and installing official vendor binaries is standard for AUR packages and poses no additional supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("$pkgname-$pkgver.tar.gz::https://artifacts.elastic.co/downloads/logstash/logstash-${pkgver}-linux-x86_64.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Vladislav Minakov <v@minakov.pro>
    
      2
    
      3pkgname=logstash-bin
    
      4pkgver=9.5.1
    
      5pkgrel=1
    
      6pkgdesc="Transport and process your logs, events, or other data"
    
      7arch=("x86_64")
    
      8url="https://github.com/elastic/logstash"
    
      9license=("Apache-2.0 OR Elastic-2.0")
    
      10depends=("java-runtime" "ruby" "ruby-bundler" "coreutils" "awk")
    
      11optdepends=("elasticsearch")
    
      12backup=("etc/logstash/jvm.options"
    
      13        "etc/logstash/log4j2.properties"
    
      14        "etc/logstash/logstash.yml"
    
      15        "etc/logstash/pipelines.yml")
    
      16options=("!debug")
    
      17source=("$pkgname-$pkgver.tar.gz::https://artifacts.elastic.co/downloads/logstash/logstash-${pkgver}-linux-x86_64.tar.gz"
    
      18        "logstash.service"
    
      19        "logstash.sysusers"
    
      20        "logstash.tmpfiles")
    
      21sha512sums=('07289ec224bc6b0510893eea5bf3a625c82d76ccf2eeda86944781e1a278e7e0f05373b6d32030374cdeecb7ee264d9032221e0a46b7c766f059cf60287d0c8b'
    
      22            '5a50aacd9e1186c4535726d5baf7481133c348286dde83f9c9e9bfab7c3db960a1009165203a5eefd557c83a988571ffbf4e6c8758cbc8c4034c8cb419d04026'
    
      23            '5835c9d9f45a194566d8f3eaef679cd103403ccc4e415412bcef869d06d555a299ba3a94d726bc268b92e2cd4ad05977033f0458ebc8371d7c554a89b8559442'
    
      24            'ddaa8d5ef02e365af166dad023788fc48b01c0c45511314451c4c57a09dd92c03c99df4c3aabcf484e1b6b55268861c9e9a569635df0056e285bbcc5a399b856')
    
      25
    
      26package() {
    
      27  cd logstash-${pkgver}
    
      28  install -dm 755 "${pkgdir}/usr/share/logstash" "${pkgdir}/etc/logstash"
    
      29  mv config/* "${pkgdir}/etc/logstash/"
    
      30  cp -a * "${pkgdir}/usr/share/logstash"
    
      31  chmod -R 755 "${pkgdir}/usr/share/logstash" "${pkgdir}/etc/logstash/"
    
      32  install -Dm 644 "${srcdir}/logstash.service" "${pkgdir}/usr/lib/systemd/system/logstash.service"
    
      33  install -Dm 644 "${srcdir}/logstash.sysusers" "${pkgdir}/usr/lib/sysusers.d/logstash.conf"
    
      34  install -Dm 644 "${srcdir}/logstash.tmpfiles" "${pkgdir}/usr/lib/tmpfiles.d/logstash.conf"
    
      35  install -Dm644 LICENSE.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      36}
    
      37

Changes since previous scan

--- PKGBUILD @ 2026-07-08 00:26
+++ PKGBUILD @ 2026-08-18 00:03
@@ -1,7 +1,7 @@
 # Maintainer: Vladislav Minakov <v@minakov.pro>
 
 pkgname=logstash-bin
-pkgver=9.4.3
+pkgver=9.5.1
 pkgrel=1
 pkgdesc="Transport and process your logs, events, or other data"
 arch=("x86_64")
@@ -18,7 +18,7 @@
         "logstash.service"
         "logstash.sysusers"
         "logstash.tmpfiles")
-sha512sums=('d949a5ec1a3f3bd97cde1f5528cb3ebc606eac3d43ebfed35a3d9bfc4c0f6f8f485a9ff8a66e7c3111263491b3b06d8631fe053bdb6edaaaef23628f91c336b8'
+sha512sums=('07289ec224bc6b0510893eea5bf3a625c82d76ccf2eeda86944781e1a278e7e0f05373b6d32030374cdeecb7ee264d9032221e0a46b7c766f059cf60287d0c8b'
             '5a50aacd9e1186c4535726d5baf7481133c348286dde83f9c9e9bfab7c3db960a1009165203a5eefd557c83a988571ffbf4e6c8758cbc8c4034c8cb419d04026'
             '5835c9d9f45a194566d8f3eaef679cd103403ccc4e415412bcef869d06d555a299ba3a94d726bc268b92e2cd4ad05977033f0458ebc8371d7c554a89b8559442'
             'ddaa8d5ef02e365af166dad023788fc48b01c0c45511314451c4c57a09dd92c03c99df4c3aabcf484e1b6b55268861c9e9a569635df0056e285bbcc5a399b856')

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 17:29:23	MEDIUM	1
2026-07-08 00:26:52	CLEAN	2
2026-07-07 21:26:03	MEDIUM	1
2026-06-19 19:07:35	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1