plex-media-server
LOW
maintainer fryfrog
345 votes
scanned 2026-10-20 17:28:05.182546
Triggered rules
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:31
source_aarch64=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/debian/plexmediaserver_${pkgver}-${_pkgsum}_arm64.deb")
PKGBUILD
1 offending line(s) highlighted
1
2
# Maintainer: Donald Webster <fryfrog@gmail.com>
3
# Contributor: Tom Moore <t.moore01@gmail.com>
4
# Contributor: Mikael Eriksson <mikael_eriksson@miffe.org>
5
# Contributor: Maxime Gauduin <alucryd@archlinux.org>
6
# Contributor: Rob Sletten <rsletten@gmail.com>
7
# Contributor: monty <linksoft@gmx.de>
8
# Contributor: Jon Wiersma <archaur@jonw.org>
9
# Contributor: Arthur <arthur.darcet@m4x.org>
10
# Contributor: Praekon <praekon@googlemail.com>
11
12
pkgname=plex-media-server
13
pkgver=1.43.5.11029
14
_pkgsum=6bf8af3f0
15
pkgrel=1
16
pkgdesc='The back-end media server component of Plex.'
17
arch=('x86_64' 'i686' 'armv7h' 'aarch64')
18
url='https://plex.tv/'
19
license=('custom')
20
options=('!emptydirs' '!strip' 'staticlibs')
21
conflicts=('plex-media-server-plexpass')
22
backup=('etc/conf.d/plexmediaserver')
23
install='plex-media-server.install'
24
source=('plexmediaserver.conf.d'
25
'plexmediaserver.service'
26
'plexmediaserver.hook'
27
'plex.sysusers'
28
'plex.tmpfiles'
29
'terms.txt')
30
31
source_aarch64=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/debian/plexmediaserver_${pkgver}-${_pkgsum}_arm64.deb")
32
source_armv7h=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/debian/plexmediaserver_${pkgver}-${_pkgsum}_armhf.deb")
33
source_x86_64=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/redhat/plexmediaserver-${pkgver}-${_pkgsum}.x86_64.rpm")
34
source_i686=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/redhat/plexmediaserver-${pkgver}-${_pkgsum}.i686.rpm")
35
36
sha256sums=('398ba7958598609453f5289b3d5f2389d2756158b340cf28e83c39d9ed60280b'
37
'525b4b3b7db69c4abf696116c9f41d7a3cb3b572186200d0720bb96ec155fbd4'
38
'a94c798e3a1b5614020e3dd6ec80d378c0401fa08f411769527ad87a6898e80c'
39
'c597bee0bcbb59ed791651555a904e5f7e9d2e82f6c6986b6352e5fc38e5b557'
40
'b7ff6525a3c7a8be885edc85bb523095f8e25ddb38873127e2a4e97b28f2c7ad'
41
'dbfb5a9a7146a975863c0932f1a68c4b040ec5d7e693361f39ddfbf60885e631')
42
sha256sums_x86_64=('10bcea4e21088c018a11c018bb017255ba32629803314270d280b96361b283f0')
43
sha256sums_i686=('befc40d9979cd002528f6970d658653ca80da10572934636ff1b2aa1bf3ac7b3')
44
sha256sums_armv7h=('02fdcf29f378de74905140df0e7671014e764fd09358f9b3e264e4c699a5cb9c')
45
sha256sums_aarch64=('b289c218db9c4efa81effab8efb82ca9aba5576f58e95aeb7c485b07db41ec1b')
46
47
prepare() {
48
if [[ $CARCH = armv7h ]] || [[ $CARCH = aarch64 ]]; then
49
bsdtar -xf data.tar.xz
50
fi
51
}
52
53
package() {
54
install -d -m 755 "${pkgdir}/usr/lib/plexmediaserver"
55
cp -dr --no-preserve='ownership' "${srcdir}/usr/lib/plexmediaserver" "${pkgdir}/usr/lib/"
56
57
install -D -m 644 "${srcdir}/plexmediaserver.conf.d" "${pkgdir}/etc/conf.d/plexmediaserver"
58
install -D -m 644 "${srcdir}/plexmediaserver.service" "${pkgdir}/usr/lib/systemd/system/plexmediaserver.service"
59
install -D -m 644 "${srcdir}/plex.sysusers" "${pkgdir}/usr/lib/sysusers.d/plex.conf"
60
install -D -m 644 "${srcdir}/plex.tmpfiles" "${pkgdir}/usr/lib/tmpfiles.d/plex.conf"
61
62
install -D -m 644 "${srcdir}/terms.txt" "${pkgdir}/usr/share/licenses/${pkgname}/terms.txt"
63
install -D -m 644 "${srcdir}/plexmediaserver.hook" "${pkgdir}/usr/share/doc/${pkgname}/plexmediaserver.hook"
64
}
65
66
# vim: ts=2 sw=2 et:
67
Changes since previous scan
--- PKGBUILD @ 2026-09-11 00:19+++ PKGBUILD @ 2026-10-20 17:28@@ -10,8 +10,8 @@ # Contributor: Praekon <praekon@googlemail.com> pkgname=plex-media-server-pkgver=1.43.3.10896-_pkgsum=cb3ebc72d+pkgver=1.43.5.11029+_pkgsum=6bf8af3f0 pkgrel=1 pkgdesc='The back-end media server component of Plex.' arch=('x86_64' 'i686' 'armv7h' 'aarch64')@@ -39,10 +39,10 @@ 'c597bee0bcbb59ed791651555a904e5f7e9d2e82f6c6986b6352e5fc38e5b557' 'b7ff6525a3c7a8be885edc85bb523095f8e25ddb38873127e2a4e97b28f2c7ad' 'dbfb5a9a7146a975863c0932f1a68c4b040ec5d7e693361f39ddfbf60885e631')-sha256sums_x86_64=('ea678ff32fc7d42f9105d28ada1495f00ef5139c05550f37a68bacfefe1f4c31')-sha256sums_i686=('565394c842ca75c171e89ed753d1fb15db5855e60d6bd467afd5ae6561e0e361')-sha256sums_armv7h=('59a8f5ee5bcb64b8827e1d759855d5eca35b2f76eb8055df75cbbc3d01f09567')-sha256sums_aarch64=('2a7ad1306795d391551d778eec21e6426fcfefd95f0bb288771611f62d8e7d2d')+sha256sums_x86_64=('10bcea4e21088c018a11c018bb017255ba32629803314270d280b96361b283f0')+sha256sums_i686=('befc40d9979cd002528f6970d658653ca80da10572934636ff1b2aa1bf3ac7b3')+sha256sums_armv7h=('02fdcf29f378de74905140df0e7671014e764fd09358f9b3e264e4c699a5cb9c')+sha256sums_aarch64=('b289c218db9c4efa81effab8efb82ca9aba5576f58e95aeb7c485b07db41ec1b') prepare() { if [[ $CARCH = armv7h ]] || [[ $CARCH = aarch64 ]]; thenScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-20 17:28:05 | Low | 1 |
| 2026-09-11 00:19:22 | Clean | 2 |
| 2026-09-10 21:21:21 | Low | 1 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |
| 2026-08-28 00:07:31 | Low | 2 |
| 2026-08-27 00:08:17 | Low | 2 |
| 2026-08-26 00:12:07 | Low | 2 |
| 2026-08-25 00:14:31 | Low | 2 |