navicat17-premium-cs
MEDIUM
maintainer duanluan
1 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads a prebuilt AppImage from a non-standard host (dn.navicat.com), which is an unverifiable executable binary; if the source were swapped, it could lead to arbitrary code execution.
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:11
source_x86_64=("navicat17-premium-cs-x86_64-${pkgver}.AppImage::https://dn.navicat.com/download/navicat17-premium-cs-x86_64.AppImage")
Medium
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 95%): The package downloads a prebuilt AppImage from a non-standard host (dn.navicat.com), which is an unverifiable executable binary; if the source were swapped, it could lead to arbitrary code execution.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: duanluan <duanluan@outlook.com>
2
3
pkgname=navicat17-premium-cs
4
pkgver=18.0.2
5
pkgrel=1
6
pkgdesc='Navicat Premium is a multi-connection database development tool. (Chinese Simplified)'
7
arch=('x86_64' 'aarch64')
8
url='https://www.navicat.com.cn/products/navicat-premium'
9
license=('NOASSERTION')
10
options=('!strip')
11
source_x86_64=("navicat17-premium-cs-x86_64-${pkgver}.AppImage::https://dn.navicat.com/download/navicat17-premium-cs-x86_64.AppImage")
12
source_aarch64=("navicat17-premium-cs-aarch64-${pkgver}.AppImage::https://dn.navicat.com/download/navicat17-premium-cs-aarch64.AppImage")
13
sha256sums_x86_64=('e9d90e5f25127da984d26d48796b028d560f2559643a6e565f0d2df36cca149c')
14
sha256sums_aarch64=('7023cea7eaa5841f266e1d59fd9e17e6bca3cbd80c51cdd888486c952c04abba')
15
16
package() {
17
cd "${srcdir}"
18
19
chmod +x "${srcdir}/navicat17-premium-cs-${CARCH}-${pkgver}.AppImage"
20
"${srcdir}/navicat17-premium-cs-${CARCH}-${pkgver}.AppImage" --appimage-extract
21
22
install -dm755 "${pkgdir}/opt/${pkgname}"
23
cp -a "${srcdir}/squashfs-root/." "${pkgdir}/opt/${pkgname}/"
24
25
# Prefer Arch's system copies low-level libraries to avoid
26
# symbol-version conflicts with host libmount/libudev users.
27
rm -f \
28
"${pkgdir}/opt/${pkgname}/usr/lib/libsystemd.so"* \
29
"${pkgdir}/opt/${pkgname}/usr/lib/libudev.so"* \
30
"${pkgdir}/opt/${pkgname}/usr/lib/libblkid.so"* \
31
"${pkgdir}/opt/${pkgname}/usr/lib/libselinux.so"*
32
33
install -Dm644 "${srcdir}/squashfs-root/usr/share/applications/navicat.desktop" \
34
"${pkgdir}/usr/share/applications/navicat.desktop"
35
install -Dm644 "${srcdir}/squashfs-root/usr/share/icons/hicolor/256x256/apps/navicat-icon.png" \
36
"${pkgdir}/usr/share/icons/hicolor/256x256/apps/navicat-icon.png"
37
38
install -dm755 "${pkgdir}/usr/bin"
39
ln -s "/opt/${pkgname}/AppRun" "${pkgdir}/usr/bin/navicat"
40
41
sed -i \
42
-e 's|^Exec=.*|Exec=navicat %U|' \
43
-e 's|^Icon=.*|Icon=navicat-icon|' \
44
-e 's|^Categories=.*|Categories=Development;Database;|' \
45
"${pkgdir}/usr/share/applications/navicat.desktop"
46
}
47
Changes since previous scan
--- PKGBUILD @ 2026-10-26 00:12+++ PKGBUILD @ 2026-11-01 00:21@@ -1,7 +1,7 @@ # Maintainer: duanluan <duanluan@outlook.com> pkgname=navicat17-premium-cs-pkgver=18.0.1+pkgver=18.0.2 pkgrel=1 pkgdesc='Navicat Premium is a multi-connection database development tool. (Chinese Simplified)' arch=('x86_64' 'aarch64')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Medium | 2 |
| 2026-10-31 00:07:41 | Medium | 2 |
| 2026-10-30 00:29:30 | Medium | 2 |
| 2026-10-29 00:13:55 | Medium | 2 |
| 2026-10-28 00:06:54 | Medium | 2 |
| 2026-10-27 00:23:28 | Medium | 2 |
| 2026-10-26 09:44:33 | Medium | 2 |
| 2026-10-26 00:12:40 | Medium | 2 |
| 2026-10-25 00:20:48 | Medium | 2 |
| 2026-10-24 00:14:55 | Medium | 2 |
| 2026-10-23 00:02:19 | Medium | 2 |
| 2026-10-22 00:13:10 | Medium | 2 |
| 2026-10-21 00:12:50 | Medium | 2 |
| 2026-10-20 00:10:31 | Medium | 2 |
| 2026-10-19 00:03:55 | Medium | 2 |
| 2026-10-18 00:06:55 | Medium | 2 |
| 2026-10-17 00:21:55 | Medium | 2 |
| 2026-10-16 00:12:47 | Medium | 2 |
| 2026-10-15 00:28:05 | Medium | 2 |
| 2026-10-14 00:06:47 | Medium | 2 |