ntpdate

maintainer Muflone · 168 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a legitimate NTP project tarball from a university host (udel.edu), which is the official upstream for NTP; building from this source is normal and expected, despite the non-whitelisted domain.

Triggered rules

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is LOW (confidence 95%): The source is a legitimate NTP project tarball from a university host (udel.edu), which is the official upstream for NTP; building from this source is normal and expected, despite the non-whitelisted domain.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=("https://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-${pkgver%*.*.*}/${_pkgname}-${_pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Muflone http://www.muflone.com/contacts/english/
    
      2# Contributor: Sébastien Luttringer <seblu@aur.archlinux.org>
    
      3
    
      4pkgname=ntpdate
    
      5_pkgname=ntp
    
      6_pkgver=4.2.8p18
    
      7pkgver=${_pkgver/p/.p}
    
      8pkgrel=1
    
      9pkgdesc='Client for the Network Time Protocol (NTP)'
    
      10url='http://www.ntp.org/'
    
      11license=('LicenseRef-custom')
    
      12arch=('i686' 'x86_64')
    
      13depends=('openssl')
    
      14conflicts=('ntp' 'ntpdate-dev')
    
      15backup=('etc/conf.d/ntpdate.conf')
    
      16source=("https://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-${pkgver%*.*.*}/${_pkgname}-${_pkgver}.tar.gz"
    
      17        "bug_3926_pthread_detach.patch"::"https://gitlab.archlinux.org/archlinux/packaging/packages/ntp/-/raw/4ab37fa86a6e3ffb1e53a2f415098ff934640b26/ntp-4.2.8.p18-fix-build.patch?inline=false"
    
      18        "${pkgname}.conf"
    
      19        "${pkgname}.service")
    
      20sha256sums=('cf84c5f3fb1a295284942624d823fffa634144e096cfc4f9969ac98ef5f468e5'
    
      21            '9c4afa0daed5fd3cc9544ec808b2bb1dd959e5d40c4cae307b7025b16885903c'
    
      22            '1ddbf0f51e030c6ec48d50e1b0eb6682f2d51567fbbb8fdd695a0e38a6036fd7'
    
      23            '2267e19120de4a73703ed0d83a4a0088309600ce3fed88c3c17a950fa0c1aa85')
    
      24
    
      25prepare() {
    
      26  cd "${srcdir}/${_pkgname}-${_pkgver}"
    
      27  # https://bugs.ntp.org/show_bug.cgi?id=3926
    
      28  # https://gitlab.archlinux.org/archlinux/packaging/packages/ntp/-/issues/3
    
      29  patch -N -p1 -i "${srcdir}/bug_3926_pthread_detach.patch"
    
      30  autoreconf -fiv
    
      31}
    
      32
    
      33build() {
    
      34  cd "${srcdir}/${_pkgname}-${_pkgver}"
    
      35  ./configure --prefix=/usr --libexecdir=/usr/lib
    
      36  make
    
      37}
    
      38
    
      39package() {
    
      40  install -m 755 -d "${pkgdir}/etc/conf.d"
    
      41  install -m 644 -t "${pkgdir}/etc/conf.d" "${pkgname}.conf"
    
      42  install -m 755 -d "${pkgdir}/usr/lib/systemd/system"
    
      43  install -m 644 -t "${pkgdir}/usr/lib/systemd/system" "${pkgname}.service"
    
      44
    
      45  cd "${srcdir}/${_pkgname}-${_pkgver}"
    
      46  install -m 755 -d "${pkgdir}/usr/bin"
    
      47  install -m 755 -t "${pkgdir}/usr/bin" "${pkgname}/${pkgname}"
    
      48  install -m 755 -d "${pkgdir}/usr/share/licenses/${pkgname}"
    
      49  install -m 644 -t "${pkgdir}/usr/share/licenses/${pkgname}" "COPYRIGHT"
    
      50}
    
      51
    
      52

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2