omada-controller
MEDIUM
maintainer Inxsible
8 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt tarball from a non-standard host (static.tp-link.com) which is not on the analyzer's whitelist, and the source is a proprietary controller application that could be tampered with if the host were compromised, though it is plausibly an official vendor domain.
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:20
"https://static.tp-link.com/${_basepkgpath}/${_basepkgname}_v${pkgver}_${_baseos}${_suffix}.tar.gz"
Medium
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt tarball from a non-standard host (static.tp-link.com) which is not on the analyzer's whitelist, and the source is a proprietary controller application that could be tampered with if the host were compromised, though it is plausibly an official vendor domain.
PKGBUILD
1 offending line(s) highlighted
1
# Contributor & Maintainer: Murtuza Akhtari <murtuza dot akhtari at gmail dot com>
2
# Contributor: Richard Neumann aka. schard <mail at richard dash neumann period de>
3
4
pkgname='omada-controller'
5
pkgver=6.2.14.11
6
pkgrel=1
7
pkgdesc='Omada Network Application (SDN Controller)'
8
_basepkgname='Omada_SDN_Controller'
9
_basepkgpath='upload/software/2026/202607/20260717'
10
_baseos='linux_x64'
11
_suffix=''
12
arch=('x86_64')
13
url='https://support.omadanetworks.com/us/download/software/omada-controller'
14
license=('custom')
15
depends=('java-runtime=17' 'java-jsvc' 'curl' 'mongodb>=3' 'mongodb<8')
16
makedepends=('git')
17
#provides=('sdn-controller')
18
conflicts=('omada-sdn-controller')
19
source=(
20
"https://static.tp-link.com/${_basepkgpath}/${_basepkgname}_v${pkgver}_${_baseos}${_suffix}.tar.gz"
21
"git+http://github.com/murtuzaakhtari/omada-controller-scripts.git"
22
)
23
sha256sums=('23427f73dd93051a620b081aab55ffcc4cfb20951a020a1d357c43e82478aa74'
24
'SKIP')
25
26
package() {
27
#cd ${pkgname}
28
#cd ${_basepkgname}_v${pkgver}_${_baseos}
29
cd Omada_Network_Application_v${pkgver}_${_baseos}
30
31
# Install required source files.
32
local BASEDIR="${pkgdir}/opt/omada-controller"
33
install -dm 755 "${BASEDIR}"
34
35
# Install JAR libraries.
36
install -dm 755 "${BASEDIR}/lib"
37
38
for file in lib/*; do
39
install -m 644 "${file}" "${BASEDIR}/lib/"
40
done
41
42
# Install binaries.
43
install -dm 755 "${BASEDIR}/bin"
44
45
for file in bin/*; do
46
install -m 755 "${file}" "${BASEDIR}/bin/"
47
done
48
49
# Install keystore. - keystore no longer available since version 5.3.1
50
#install -dm 755 "${BASEDIR}/keystore"
51
52
#for file in keystore/*; do
53
# install -m 644 "${file}" "${BASEDIR}/keystore/"
54
#done
55
56
# Install *.properties config files.
57
install -dm 755 "${BASEDIR}/properties"
58
59
for file in properties/*; do
60
install -m 644 "${file}" "${BASEDIR}/properties/"
61
done
62
63
chown -R omada:omada ${BASEDIR}/properties/
64
65
ln -sf /usr/bin/mongod "${BASEDIR}/bin/mongod"
66
67
### Install scripts ####
68
69
# Install systemd units.
70
cd "${srcdir}/omada-controller-scripts"
71
install -dm 755 "${pkgdir}/usr/lib/systemd/system"
72
install -m 644 "omada-controller.service" "${pkgdir}/usr/lib/systemd/system/"
73
74
# Install sysusers configuration.
75
install -dm 755 "${pkgdir}/usr/lib/sysusers.d"
76
install -m 644 "omada-controller.conf" "${pkgdir}/usr/lib/sysusers.d/"
77
78
# Install ALPM hook and script.
79
install -dm 755 "${pkgdir}/usr/share/libalpm/hooks"
80
install -m 644 omada-init-user-dirs.hook "${pkgdir}/usr/share/libalpm/hooks/"
81
install -dm 755 "${pkgdir}/usr/share/libalpm/scripts"
82
install -m 755 omada-init-user-dirs.sh "${pkgdir}/usr/share/libalpm/scripts/omada-init-user-dirs"
83
}
84
Changes since previous scan
--- PKGBUILD @ 2026-09-10 00:22+++ PKGBUILD @ 2026-09-17 00:27@@ -2,13 +2,13 @@ # Contributor: Richard Neumann aka. schard <mail at richard dash neumann period de> pkgname='omada-controller'-pkgver=6.2.10.17+pkgver=6.2.14.11 pkgrel=1 pkgdesc='Omada Network Application (SDN Controller)'-_basepkgname='Omada_Network_Application'-_basepkgpath='upload/software/2026/202604/20260429'+_basepkgname='Omada_SDN_Controller'+_basepkgpath='upload/software/2026/202607/20260717' _baseos='linux_x64'-_suffix='_20260428102037'+_suffix='' arch=('x86_64') url='https://support.omadanetworks.com/us/download/software/omada-controller' license=('custom')@@ -20,13 +20,13 @@ "https://static.tp-link.com/${_basepkgpath}/${_basepkgname}_v${pkgver}_${_baseos}${_suffix}.tar.gz" "git+http://github.com/murtuzaakhtari/omada-controller-scripts.git" )--sha256sums=('d5eb94f235b6ef8ee42d0521498e84a299ded44f8e67ae6fbb74c52bd4822425'+sha256sums=('23427f73dd93051a620b081aab55ffcc4cfb20951a020a1d357c43e82478aa74' 'SKIP') package() { #cd ${pkgname}- cd ${_basepkgname}_v${pkgver}_${_baseos} + #cd ${_basepkgname}_v${pkgver}_${_baseos} + cd Omada_Network_Application_v${pkgver}_${_baseos} # Install required source files. local BASEDIR="${pkgdir}/opt/omada-controller"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Medium | 2 |
| 2026-09-16 00:03:17 | Medium | 2 |
| 2026-09-15 00:25:31 | Medium | 2 |
| 2026-09-14 00:27:57 | Medium | 2 |
| 2026-09-13 00:19:54 | Medium | 2 |
| 2026-09-12 00:25:17 | Medium | 2 |
| 2026-09-11 00:19:22 | Medium | 2 |
| 2026-09-10 17:21:08 | Medium | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |