lsi-openpegasus

maintainer sl1pkn07 · 2 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from a plausible project-hosted URL (opengroup.org) related to OpenPegasus, a legitimate project; the build uses standard patches and compiles from source, posing no clear supply-chain risk despite the non-whitelisted host.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a plausible project-hosted URL (opengroup.org) related to OpenPegasus, a legitimate project; the build uses standard patches and compiles from source, posing no clear supply-chain risk despite the non-whitelisted host.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:39 source=('https://collaboration.opengroup.org/pegasus/documents/32572/pegasus-2.14.1.tar.gz'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Gustavo Alvarez <sl1pkn07@gmail.com>
    
      2
    
      3pkgname=lsi-openpegasus
    
      4pkgver=2.14.1
    
      5pkgrel=7
    
      6pkgdesc="Openpegasus libs for LSI (Broadcom) Raid products"
    
      7arch=('x86_64')
    
      8url='http://www.avagotech.com/products/server-storage'
    
      9license=('custom:TOG')
    
      10depends=('sqlite'
    
      11         'libssl.so'
    
      12         'libcrypt.so'
    
      13         'libcrypto.so'
    
      14         'libsqlite3.so'
    
      15         )
    
      16makedepends=('icu'
    
      17             'net-snmp'
    
      18             'openslp'
    
      19             'setconf'
    
      20             'libxcrypt'
    
      21             'openssl'
    
      22             )
    
      23provides=('libpegclient.so'
    
      24          'libpegcommon.so'
    
      25          'libpegconfig.so'
    
      26          'libpegexportserver.so'
    
      27          'libpeggeneral.so'
    
      28          'libpeghandler.so'
    
      29          'libpegindicationservice.so'
    
      30          'libpeglistener.so'
    
      31          'libpegprovider.so'
    
      32          'libpegprm.so'
    
      33          'libpegrepository.so'
    
      34          'libpegslp_client.so'
    
      35          'libpegquerycommon.so'
    
      36          'libpegqueryexpression.so'
    
      37          'libpegwql.so'
    
      38          )
    
      39source=('https://collaboration.opengroup.org/pegasus/documents/32572/pegasus-2.14.1.tar.gz'
    
      40        'https://src.fedoraproject.org/rpms/tog-pegasus/raw/main/f/pegasus-2.7.0-PIE.patch'
    
      41        'https://src.fedoraproject.org/rpms/tog-pegasus/raw/main/f/pegasus-2.9.0-no-rpath.patch'
    
      42        'https://src.fedoraproject.org/rpms/tog-pegasus/raw/main/f/pegasus-2.13.0-gcc5-build.patch'
    
      43        'https://src.fedoraproject.org/rpms/tog-pegasus/raw/main/f/pegasus-2.14.1-build-fixes.patch'
    
      44        'https://src.fedoraproject.org/rpms/tog-pegasus/raw/main/f/pegasus-2.14.1-ssl-include.patch'
    
      45        'https://src.fedoraproject.org/rpms/tog-pegasus/raw/main/f/pegasus-2.14.1-openssl-1.1-fix.patch'
    
      46        'https://src.fedoraproject.org/rpms/tog-pegasus/raw/main/f/pegasus-2.14.1-build-fixes-2.patch'
    
      47        'Makefile.minimal'
    
      48        )
    
      49sha256sums=('9f2f13a35da218f3cb6e8478246ff7c4d3010560bb4d5de9cbf4272d48e353fb'
    
      50            'e3924bdb81a4dd2cedfb9c7ba669cb01b32f4c4e16b3af4c06f9a2426a9274d1'
    
      51            '66141323d6de100d9a1805f614a950944e223a36026b62b1a823c8aa148f26df'
    
      52            '8a68ecbd383f9121e54bd32f6094b2793367c15d8960ea5f92691e5b9bbcad99'
    
      53            '5863314f2ff17c32bc340efd5241f809bc1372b8e2fde0b3a2e22c7ab9b64281'
    
      54            '5de02253442ef8cb3b6f744fa4dd3237b66d96911ab8badd63336a7e1d28a429'
    
      55            'deb3e52e5406419cc42d15f1a668ed291ef8337217bb5bc9cefd01ef3b804371'
    
      56            '832be374999213a6d940e84c449a7c3566d9dda2b1c2348d7bc601bc907fc228'
    
      57            'SKIP'
    
      58            )
    
      59options=('debug')
    
      60
    
      61_create_links() {
    
      62  # create soname links
    
      63  find "${pkgdir}" -type f -name '*.so*' -print0 | while read -d $'\0' _lib; do
    
      64    _soname=$(dirname "${_lib}")/$(readelf -d "${_lib}" | grep -Po 'SONAME.*: \[\K[^]]*' || true)
    
      65    _base=$(echo ${_soname} | sed -r 's/(.*)\.so.*/\1.so/')
    
      66    [[ -e "${_soname}" ]] || ln -s $(basename "${_lib}") "${_soname}"
    
      67    [[ -e "${_base}" ]] || ln -s $(basename "${_soname}") "${_base}"
    
      68  done
    
      69}
    
      70
    
      71prepare() {
    
      72  cd pegasus
    
      73
    
      74  # Patch pegasus-toc sources
    
      75  patch -p1 -i "${srcdir}/pegasus-2.7.0-PIE.patch"
    
      76  patch -p1 -i "${srcdir}/pegasus-2.9.0-no-rpath.patch"
    
      77  patch -p1 -i "${srcdir}/pegasus-2.13.0-gcc5-build.patch"
    
      78  patch -p1 -i "${srcdir}/pegasus-2.14.1-build-fixes.patch"
    
      79  patch -p1 -i "${srcdir}/pegasus-2.14.1-ssl-include.patch"
    
      80  patch -p1 -i "${srcdir}/pegasus-2.14.1-openssl-1.1-fix.patch"
    
      81  patch -p1 -i "${srcdir}/pegasus-2.14.1-build-fixes-2.patch"
    
      82
    
      83  # Fix sqlite and snmp detection
    
      84  sed 's|lib64/|\$libbase/|g' -i configure
    
      85
    
      86  # set lib output directory
    
      87  setconf configure libbase lib
    
      88
    
      89  # silence easy deprecation warnings
    
      90  # https://man7.org/linux/man-pages/man3/pthread_yield.3.html
    
      91  sed 's|pthread_yield|sched_yield|g' -i src/Pegasus/Common/Threads.h
    
      92  # https://www.openssl.org/docs/manmaster/man3/ERR_remove_state.html
    
      93  sed 's|ERR_remove_state(0);||g' -i src/Pegasus/Common/SSLContextRep.h
    
      94}
    
      95
    
      96build() {
    
      97  cd pegasus
    
      98
    
      99  export PEGASUS_EXTRA_C_FLAGS="${CFLAGS} -fno-strict-aliasing"
    
      100  export PEGASUS_EXTRA_CXX_FLAGS="${PEGASUS_EXTRA_C_FLAGS} -std=c++14"
    
      101  export PEGASUS_EXTRA_LINK_FLAGS="${LDFLAGS}"
    
      102  export PEGASUS_EXTRA_PROGRAM_LINK_FLAGS="-pie -Wl,-z,relro,-z,now,-z,nodlopen,-z,noexecstack"
    
      103
    
      104  ./configure
    
      105
    
      106  cp "${srcdir}/Makefile.minimal" Makefile.minimal
    
      107  sed 's|Makefile|Makefile.minimal|g' -i GNUmakefile
    
      108
    
      109  make -f GNUmakefile minimal
    
      110}
    
      111
    
      112package() {
    
      113  for i in ${provides[@]}.1; do install -Dm755 "${srcdir}/pegasus/lib/${i}" "${pkgdir}/usr/lib/${i}"; done
    
      114
    
      115  # Create soname links
    
      116  _create_links
    
      117
    
      118  install -Dm644 "${srcdir}/pegasus/OpenPegasusNOTICE.txt" "${pkgdir}/usr/share/licenses/${pkgname}/OpenPegasusNOTICE.txt"
    
      119}
    
      120

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2