mysql-proxy

LOW

maintainer eworm 3 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a tarball from a non-whitelisted host (cdn.mysql.com), but it is the official MySQL project's own release infrastructure, making it a legitimate and expected source for this package; the build process is standard and does not execute untrusted remote code.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a non-whitelisted host (cdn.mysql.com), but it is the official MySQL project's own release infrastructure, making it a legitimate and expected source for this package; the build process is standard and does not execute untrusted remote code.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=("http://cdn.mysql.com/Downloads/MySQL-Proxy/${pkgname}-${pkgver}.tar.gz"{,.asc}

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Christian Hesse <mail@eworm.de>
    
      2# Contributor: Sebastian Vandekerckhove <sebastianvdk(at)foxatwork(dot)be>
    
      3# Contributor: Ivan Abdulin <elbahek@gmail.com>
    
      4
    
      5pkgname=mysql-proxy
    
      6pkgver=0.8.5
    
      7pkgrel=8
    
      8pkgdesc='Monitors, analyzes and transformations communication between the MySQL client and server'
    
      9arch=('i686' 'x86_64')
    
      10url='http://dev.mysql.com/downloads/mysql-proxy/'
    
      11license=('GPL')
    
      12depends=('lua51' 'glib2' 'libevent')
    
      13makedepends=('mariadb-libs')
    
      14validpgpkeys=('A4A9406876FCBD3C456770C88C718D3B5072E1F5')
    
      15backup=('etc/mysql/proxy.cnf')
    
      16source=("http://cdn.mysql.com/Downloads/MySQL-Proxy/${pkgname}-${pkgver}.tar.gz"{,.asc}
    
      17        '0001-fix-build-with-libevent-2.1.patch'
    
      18        '0002-mariadb.patch'
    
      19	'mysql-proxy.service'
    
      20	'proxy.cnf')
    
      21sha256sums=('e5bac3df8bca2eed41cdbf09439264b34c77339cfe1eda506b0d76eaa2d2b2d5'
    
      22            'SKIP'
    
      23            '6e99e92283bf521ee3b45f14a3469025f608533d00b9d0bc724f78c90cc4a0ee'
    
      24            '097322a02dc1c52bed30813ff93c2b37e164188a31cbf98116a48fb150a42577'
    
      25            '197099f1b064fd36f8051909d3a20684575b2296a9b24886538e5286d9410e4b'
    
      26            '95170a086c5da94c8b1362fd5cd1ad3c9e75abe950faed362d0bd3710894ac94')
    
      27
    
      28prepare() {
    
      29	cd "${srcdir}/${pkgname}-${pkgver}"
    
      30
    
      31	patch -Np1 < "${srcdir}"/0001-fix-build-with-libevent-2.1.patch
    
      32	patch -Np1 < "${srcdir}"/0002-mariadb.patch
    
      33}
    
      34
    
      35build() {
    
      36	cd "${srcdir}/${pkgname}-${pkgver}"
    
      37
    
      38	./configure \
    
      39		--prefix=/usr \
    
      40		--datadir=/usr/share/${pkgname} \
    
      41		--with-lua=lua51
    
      42	make
    
      43}
    
      44
    
      45package() {
    
      46	cd "${srcdir}/${pkgname}-${pkgver}"
    
      47
    
      48	make DESTDIR="${pkgdir}" install
    
      49
    
      50	install -D -m0644 "${srcdir}/mysql-proxy.service" "${pkgdir}/usr/lib/systemd/system/mysql-proxy.service"
    
      51	install -D -m0640 "${srcdir}/proxy.cnf" "${pkgdir}/etc/mysql/proxy.cnf"
    
      52}
    
      53
    
      54

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2