plex-media-server-plexpass
maintainer fryfrog
· 142 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads official Plex Media Server binaries from plex.tv, the vendor's own domain, which is a legitimate source despite not being on a generic whitelist; the binaries are verified with matching sha256sums and are part of normal packaging for this proprietary software.
Triggered rules
LOW
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads official Plex Media Server binaries from plex.tv, the vendor's own domain, which is a legitimate source despite not being on a generic whitelist; the binaries are verified with matching sha256sums and are part of normal packaging for this proprietary software.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:35
source_aarch64=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/debian/plexmediaserver_${pkgver}-${_pkgsum}_arm64.deb")
PKGBUILD
1 offending line(s) highlighted
1
2
# Maintainer: Donald Webster <fryfrog@gmail.com>
3
# Maintainer: Shaun Bartlett <tixetsal@gmail.com>
4
# Contributor: Mikael Eriksson <mikael_eriksson@miffe.org>
5
# Contributor: Maxime Gauduin <alucryd@archlinux.org>
6
# Contributor: Rob Sletten <rsletten@gmail.com>
7
# Contributor: Tom Moore <t.moore01@gmail.com>
8
# Contributor: monty <linksoft@gmx.de>
9
# Contributor: Jon Wiersma <archaur@jonw.org>
10
# Contributor: Arthur <arthur.darcet@m4x.org>
11
# Contributor: Praekon <praekon@googlemail.com>
12
13
# Based on the plex-media-server package by Maxime Gauduin.
14
15
pkgname=plex-media-server-plexpass
16
pkgver=1.43.3.10828
17
_pkgsum=00f62d37d
18
pkgrel=1
19
pkgdesc='The back-end media server component of Plex.'
20
arch=('x86_64' 'i686' 'armv7h' 'aarch64')
21
url='https://plex.tv/'
22
license=('custom')
23
options=('!emptydirs' '!strip' 'staticlibs')
24
provides=('plex-media-server')
25
conflicts=('plex-media-server')
26
backup=('etc/conf.d/plexmediaserver')
27
install='plex-media-server.install'
28
source=('plexmediaserver.conf.d'
29
'plexmediaserver.service'
30
'plexmediaserver.hook'
31
'plex.sysusers'
32
'plex.tmpfiles'
33
'terms.txt')
34
35
source_aarch64=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/debian/plexmediaserver_${pkgver}-${_pkgsum}_arm64.deb")
36
source_armv7h=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/debian/plexmediaserver_${pkgver}-${_pkgsum}_armhf.deb")
37
source_x86_64=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/redhat/plexmediaserver-${pkgver}-${_pkgsum}.x86_64.rpm")
38
source_i686=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/redhat/plexmediaserver-${pkgver}-${_pkgsum}.i686.rpm")
39
40
sha256sums=('b7f2fb1cbedde54a79a1794ec9f35f8bdeb033a4c5453ec77944ca7fe77cd9b7'
41
'525b4b3b7db69c4abf696116c9f41d7a3cb3b572186200d0720bb96ec155fbd4'
42
'a94c798e3a1b5614020e3dd6ec80d378c0401fa08f411769527ad87a6898e80c'
43
'c597bee0bcbb59ed791651555a904e5f7e9d2e82f6c6986b6352e5fc38e5b557'
44
'b7ff6525a3c7a8be885edc85bb523095f8e25ddb38873127e2a4e97b28f2c7ad'
45
'7bb97271eb2dc5d1dcb95f9763f505970d234df17f1b8d79b467b9020257915a')
46
sha256sums_x86_64=('2ff1d3e1ac1052cfadfcaa932c17f6fa775e625859aa93224c85983f00052183')
47
sha256sums_i686=('6ec375fe8d4de3bd5f3734865b6aa4245a791d7029a1216362f0625c5354cf1f')
48
sha256sums_armv7h=('a24a65361bb28ebeecadf82d4c02d023ee9b3a34ee2baa0635bfc51e1d01b1be')
49
sha256sums_aarch64=('f08c0ae850e331fa8204e9aa88226598d8da9181ae91f97fe01f76964ba962a0')
50
51
prepare() {
52
if [[ $CARCH = armv7h ]] || [[ $CARCH = aarch64 ]]; then
53
bsdtar -xf data.tar.xz
54
fi
55
}
56
57
package() {
58
install -d -m 755 "${pkgdir}/usr/lib/plexmediaserver"
59
cp -dr --no-preserve='ownership' "${srcdir}/usr/lib/plexmediaserver" "${pkgdir}/usr/lib/"
60
61
install -D -m 644 "${srcdir}/plexmediaserver.conf.d" "${pkgdir}/etc/conf.d/plexmediaserver"
62
install -D -m 644 "${srcdir}/plexmediaserver.service" "${pkgdir}/usr/lib/systemd/system/plexmediaserver.service"
63
install -D -m 644 "${srcdir}/plex.sysusers" "${pkgdir}/usr/lib/sysusers.d/plex.conf"
64
install -D -m 644 "${srcdir}/plex.tmpfiles" "${pkgdir}/usr/lib/tmpfiles.d/plex.conf"
65
66
install -D -m 644 "${srcdir}/terms.txt" "${pkgdir}/usr/share/licenses/${pkgname}/terms.txt"
67
install -D -m 644 "${srcdir}/plexmediaserver.hook" "${pkgdir}/usr/share/doc/${pkgname}/plexmediaserver.hook"
68
}
69
70
# vim: ts=2 sw=2 et:
71
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |