mysql-proxy

maintainer eworm · 3 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from a non-whitelisted host (cdn.mysql.com), but it is the official MySQL project's own release infrastructure, making it a legitimate and expected source for this package; the build process is standard and does not execute untrusted remote code.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a non-whitelisted host (cdn.mysql.com), but it is the official MySQL project's own release infrastructure, making it a legitimate and expected source for this package; the build process is standard and does not execute untrusted remote code.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=("http://cdn.mysql.com/Downloads/MySQL-Proxy/${pkgname}-${pkgver}.tar.gz"{,.asc}

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Christian Hesse <mail@eworm.de>
    
      2# Contributor: Sebastian Vandekerckhove <sebastianvdk(at)foxatwork(dot)be>
    
      3# Contributor: Ivan Abdulin <elbahek@gmail.com>
    
      4
    
      5pkgname=mysql-proxy
    
      6pkgver=0.8.5
    
      7pkgrel=8
    
      8pkgdesc='Monitors, analyzes and transformations communication between the MySQL client and server'
    
      9arch=('i686' 'x86_64')
    
      10url='http://dev.mysql.com/downloads/mysql-proxy/'
    
      11license=('GPL')
    
      12depends=('lua51' 'glib2' 'libevent')
    
      13makedepends=('mariadb-libs')
    
      14validpgpkeys=('A4A9406876FCBD3C456770C88C718D3B5072E1F5')
    
      15backup=('etc/mysql/proxy.cnf')
    
      16source=("http://cdn.mysql.com/Downloads/MySQL-Proxy/${pkgname}-${pkgver}.tar.gz"{,.asc}
    
      17        '0001-fix-build-with-libevent-2.1.patch'
    
      18        '0002-mariadb.patch'
    
      19	'mysql-proxy.service'
    
      20	'proxy.cnf')
    
      21sha256sums=('e5bac3df8bca2eed41cdbf09439264b34c77339cfe1eda506b0d76eaa2d2b2d5'
    
      22            'SKIP'
    
      23            '6e99e92283bf521ee3b45f14a3469025f608533d00b9d0bc724f78c90cc4a0ee'
    
      24            '097322a02dc1c52bed30813ff93c2b37e164188a31cbf98116a48fb150a42577'
    
      25            '197099f1b064fd36f8051909d3a20684575b2296a9b24886538e5286d9410e4b'
    
      26            '95170a086c5da94c8b1362fd5cd1ad3c9e75abe950faed362d0bd3710894ac94')
    
      27
    
      28prepare() {
    
      29	cd "${srcdir}/${pkgname}-${pkgver}"
    
      30
    
      31	patch -Np1 < "${srcdir}"/0001-fix-build-with-libevent-2.1.patch
    
      32	patch -Np1 < "${srcdir}"/0002-mariadb.patch
    
      33}
    
      34
    
      35build() {
    
      36	cd "${srcdir}/${pkgname}-${pkgver}"
    
      37
    
      38	./configure \
    
      39		--prefix=/usr \
    
      40		--datadir=/usr/share/${pkgname} \
    
      41		--with-lua=lua51
    
      42	make
    
      43}
    
      44
    
      45package() {
    
      46	cd "${srcdir}/${pkgname}-${pkgver}"
    
      47
    
      48	make DESTDIR="${pkgdir}" install
    
      49
    
      50	install -D -m0644 "${srcdir}/mysql-proxy.service" "${pkgdir}/usr/lib/systemd/system/mysql-proxy.service"
    
      51	install -D -m0640 "${srcdir}/proxy.cnf" "${pkgdir}/etc/mysql/proxy.cnf"
    
      52}
    
      53
    
      54

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2