microchip-mplabxc8-bin

MEDIUM

maintainer rexploits 20 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package installs a setuid binary (xclm) which can elevate privileges, flagged as a potential security risk during installation.

Triggered rules

Medium Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

PKGBUILD:55 chmod u+s "${pkgdir}/${_instdir}/bin/xclm"

Medium AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 95%): The package installs a setuid binary (xclm) which can elevate privileges, flagged as a potential security risk during installation.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Rex McKinnon <0xFF at rexploits dot com>
    
      2# Contributor: xiota
    
      3# Contributor: Grey Christoforo <first name at last name dot net>
    
      4# Contributer: mickael9 <mickael9 at gmail dot com>
    
      5
    
      6_number_of_bits=8
    
      7pkgname=microchip-mplabxc${_number_of_bits}-bin
    
      8pkgver=3.10
    
      9pkgrel=1
    
      10pkgdesc="Microchip's MPLAB XC${_number_of_bits} C compiler toolchain for their PIC10/12/16/18 microcontroller families and their PIC14000 device"
    
      11url="https://www.microchip.com/mplab/compilers"
    
      12license=('LicenseRef-MPLAB-XC-Unified')
    
      13arch=('x86_64')
    
      14
    
      15depends=(gcc-libs)
    
      16makedepends=(bitrock-unpacker tclkit)
    
      17
    
      18conflicts=(lib32-tclkit)
    
      19
    
      20install=$pkgname.install
    
      21
    
      22options=(!strip docs libtool emptydirs !zipman staticlibs)
    
      23
    
      24_dl_url="https://ww1.microchip.com"
    
      25_dl_path="downloads/aemDocuments/documents/DEV/ProductDocuments/SoftwareTools"
    
      26_dl_file="xc${_number_of_bits}-v${pkgver}-full-install-linux-x64-installer.run"
    
      27
    
      28source=("$_dl_file"::"$_dl_url/$_dl_path/$_dl_file")
    
      29sha256sums=('628803b96f468a5981d6bc1d0a5e6c7fa809e4d87e3cca961805e2a857f5846e')
    
      30
    
      31_instdir="opt/microchip/xc${_number_of_bits}/v${pkgver}"
    
      32
    
      33build() {
    
      34  echo "Unpacking files from installer"
    
      35  bitrock-unpacker "./$_dl_file" ./unpacked.vfs
    
      36}
    
      37
    
      38package() {
    
      39  mkdir -p "${pkgdir}/${_instdir}"
    
      40  mkdir -p "${pkgdir}/${_instdir}/etc"
    
      41  mv unpacked.vfs/compiler/programfiles*/* "${pkgdir}/${_instdir}"
    
      42  mv unpacked.vfs/licensecomponent/LinuxLMBin/bin/{roam.lic,xclm} "${pkgdir}/${_instdir}/bin"
    
      43  sed -i "s/<xclm>/<xclm>\n\t<xclm:LicenseDirectory xclm:path=\"\/opt\/microchip\/xclm\/license\/\" \/>/" \
    
      44    unpacked.vfs/licensecomponent/LinuxLMBin/etc/xclm.conf
    
      45  mv unpacked.vfs/licensecomponent/LinuxLMBin/etc/xclm.conf "${pkgdir}/${_instdir}/etc"
    
      46  mv "${pkgdir}/${_instdir}"/*License.txt "${pkgdir}/${_instdir}/docs" 2> /dev/null || true
    
      47
    
      48  mkdir -p "${pkgdir}/etc/profile.d"
    
      49  echo "export PATH=\"\$PATH\":'/${_instdir}/bin'" > "${pkgdir}/etc/profile.d/${pkgname}.sh"
    
      50  echo "export XC${_number_of_bits}_TOOLCHAIN_ROOT='/${_instdir}'" >> "${pkgdir}/etc/profile.d/${pkgname}.sh"
    
      51
    
      52  mkdir -p "${pkgdir}/usr/share/licenses/${pkgname}"
    
      53  ln -s "/${_instdir}/docs/$(basename "${pkgdir}/${_instdir}/docs"/*[Ll]icense.txt)" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      54
    
      55  chmod u+s "${pkgdir}/${_instdir}/bin/xclm"
    
      56  chmod +x "${pkgdir}/${_instdir}/pic/bin/clang"
    
      57}
    
      58

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Medium	2
2026-09-16 00:03:17	Medium	2
2026-09-15 00:25:31	Medium	2
2026-09-14 00:27:57	Medium	2
2026-09-13 00:19:54	Medium	2
2026-09-12 00:25:17	Medium	2
2026-09-11 00:19:22	Medium	2
2026-09-10 00:22:44	Medium	2
2026-09-09 00:04:09	Medium	2
2026-09-08 00:18:08	Medium	2
2026-09-07 00:30:15	Medium	2
2026-09-06 00:17:06	Medium	2
2026-09-05 00:16:27	Medium	2
2026-09-04 00:03:13	Medium	2
2026-09-03 00:15:47	Medium	2
2026-09-02 00:02:31	Medium	2
2026-09-01 00:11:19	Medium	2
2026-08-31 00:19:57	Medium	2
2026-08-30 00:04:14	Medium	2
2026-08-29 00:29:17	Medium	2