openvpn-auth-ldap

LOW

maintainer k0ste 1 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The source is a tarball from GitHub's official codeload service, which hosts the project's own tagged release; patches are from trusted project and distribution sources; the build process is standard and does not execute untrusted code.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from GitHub's official codeload service, which hosts the project's own tagged release; patches are from trusted project and distribution sources; the build process is standard and does not execute untrusted code.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source=("${pkgname}-${pkgver}.tar.gz::https://codeload.${_uri}/tar.gz/refs/tags/${_name}-${pkgver}"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Shalygin Konstantin <k0ste@k0ste.ru>
    
      2# Contributor: Shalygin Konstantin <k0ste@k0ste.ru>
    
      3
    
      4pkgname='openvpn-auth-ldap'
    
      5_name='auth-ldap'
    
      6pkgver='2.0.4'
    
      7pkgrel='6'
    
      8pkgdesc='OpenVPN Auth via LDAP/AD plugin. RFC2307 support'
    
      9arch=('x86_64' 'aarch64')
    
      10_uri="github.com/threerings/${pkgname}"
    
      11url="https://${_uri}"
    
      12license=('BSD')
    
      13depends=('openvpn' 'libldap' 'libsasl' 'openssl')
    
      14source=("${pkgname}-${pkgver}.tar.gz::https://codeload.${_uri}/tar.gz/refs/tags/${_name}-${pkgver}"
    
      15	"${url}/pull/73.patch"
    
      16	"${url}/pull/74.patch"
    
      17	"${url}/pull/75.patch"
    
      18	"${url}/pull/77.patch"
    
      19	"${url}/pull/85.patch"
    
      20	"${url}/pull/92.patch"
    
      21	"${url}/pull/96.patch"
    
      22	"https://salsa.debian.org/debian/${pkgname}/-/raw/master/debian/patches/gcc-14.patch")
    
      23makedepends=('gcc-objc' 're2c' 'doxygen')
    
      24sha256sums=('81f600cdc88adb2258f57df1ed2d87f0afa945f66cbf8897ad50e76f42509168'
    
      25            '0d79951a8aaffc1588fdb5717f122dc79bb6ab107986b6d54e8a681754beaea9'
    
      26            '51f9641afd9348eb06dfdae10073d43f2bb63358e4b8570caaf03c8a1b50ed44'
    
      27            '29fe8fdae6d503a28befb4f97086d7779599471101da829d9e177bd75f5f12f9'
    
      28            '003e5acefebc5cdbea5a9513ca8a27f624917a357e72f825dccf4294c375b4f5'
    
      29            '6e076fd2f6b417e7282a5b885330a42b8a41cc4c0622801c75a9fc109b156c1f'
    
      30            'dc6c47c743b8222ac412ee03ebfefa42363cfaade17f0184717347bf9fb61466'
    
      31            'efe1a990a8ce3b11c781d5f54f47ae51a5be1f6840d90b3a4837f0baf701492a'
    
      32            '75f5d5cfcb715acebf17d0a9610aae9920ff9f7e159e4c2dc9139be4351a27e3')
    
      33backup=("etc/openvpn/server/${_name}.conf")
    
      34
    
      35prepare() {
    
      36  cd "${pkgname}-${_name}-${pkgver}"
    
      37  for e in "../"*".patch"
    
      38    do
    
      39    echo "Apply patch: ${e}"
    
      40    patch -p1 -i "../${e}"
    
      41  done
    
      42
    
      43  # Archlinux use gcc
    
      44  sed --in-place \
    
      45    --expression 's|AC_CONFIG_SRCDIR(${srcdir}/src/auth-ldap.m)|AC_CONFIG_SRCDIR(src/auth-ldap.m)|g' \
    
      46    --expression 's|C_PROG_CC(clang gobjc gcc)|C_PROG_CC(gcc)|g' \
    
      47    --expression 's|AC_PROG_OBJC(clang gobjc gcc)|AC_PROG_OBJC(gcc)|g' \
    
      48  "configure.ac"
    
      49
    
      50  autoreconf -fvi
    
      51  autoheader
    
      52
    
      53  CFLAGS="${CFLAGS} -std=gnu99" \
    
      54  ./configure \
    
      55    --prefix="/usr" \
    
      56    --with-openvpn="/usr/include" \
    
      57    --with-openldap="/usr/include" \
    
      58    --with-openssl="/usr/include" \
    
      59    --with-objc-runtime="GNU"
    
      60}
    
      61
    
      62build() {
    
      63  cd "${pkgname}-${_name}-${pkgver}"
    
      64  make
    
      65}
    
      66
    
      67check() {
    
      68  cd "${pkgname}-${_name}-${pkgver}"
    
      69  make test
    
      70}
    
      71
    
      72package() {
    
      73  cd "${pkgname}-${_name}-${pkgver}"
    
      74  install -Dm0775 "src/${pkgname}.so" -t "${pkgdir}/usr/lib/openvpn/plugins"
    
      75  install -Dm0400 "${_name}.conf" -t "${pkgdir}/etc/openvpn/server"
    
      76}
    
      77

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 00:28:03	Low	2
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	2
2026-10-05 00:08:03	Low	2
2026-10-04 00:18:08	Low	2
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2