plex-media-server-plexpass
LOW
maintainer fryfrog
142 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads official Plex Media Server binaries from plex.tv, the vendor's legitimate domain, which is a standard and safe practice despite not being on a whitelist; no malicious or unverifiable behavior is present.
Triggered rules
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads official Plex Media Server binaries from plex.tv, the vendor's legitimate domain, which is a standard and safe practice despite not being on a whitelist; no malicious or unverifiable behavior is present.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:35
source_aarch64=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/debian/plexmediaserver_${pkgver}-${_pkgsum}_arm64.deb")
PKGBUILD
1 offending line(s) highlighted
1
2
# Maintainer: Donald Webster <fryfrog@gmail.com>
3
# Maintainer: Shaun Bartlett <tixetsal@gmail.com>
4
# Contributor: Mikael Eriksson <mikael_eriksson@miffe.org>
5
# Contributor: Maxime Gauduin <alucryd@archlinux.org>
6
# Contributor: Rob Sletten <rsletten@gmail.com>
7
# Contributor: Tom Moore <t.moore01@gmail.com>
8
# Contributor: monty <linksoft@gmx.de>
9
# Contributor: Jon Wiersma <archaur@jonw.org>
10
# Contributor: Arthur <arthur.darcet@m4x.org>
11
# Contributor: Praekon <praekon@googlemail.com>
12
13
# Based on the plex-media-server package by Maxime Gauduin.
14
15
pkgname=plex-media-server-plexpass
16
pkgver=1.43.3.10896
17
_pkgsum=cb3ebc72d
18
pkgrel=1
19
pkgdesc='The back-end media server component of Plex.'
20
arch=('x86_64' 'i686' 'armv7h' 'aarch64')
21
url='https://plex.tv/'
22
license=('custom')
23
options=('!emptydirs' '!strip' 'staticlibs')
24
provides=('plex-media-server')
25
conflicts=('plex-media-server')
26
backup=('etc/conf.d/plexmediaserver')
27
install='plex-media-server.install'
28
source=('plexmediaserver.conf.d'
29
'plexmediaserver.service'
30
'plexmediaserver.hook'
31
'plex.sysusers'
32
'plex.tmpfiles'
33
'terms.txt')
34
35
source_aarch64=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/debian/plexmediaserver_${pkgver}-${_pkgsum}_arm64.deb")
36
source_armv7h=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/debian/plexmediaserver_${pkgver}-${_pkgsum}_armhf.deb")
37
source_x86_64=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/redhat/plexmediaserver-${pkgver}-${_pkgsum}.x86_64.rpm")
38
source_i686=("https://downloads.plex.tv/plex-media-server-new/${pkgver}-${_pkgsum}/redhat/plexmediaserver-${pkgver}-${_pkgsum}.i686.rpm")
39
40
sha256sums=('b7f2fb1cbedde54a79a1794ec9f35f8bdeb033a4c5453ec77944ca7fe77cd9b7'
41
'525b4b3b7db69c4abf696116c9f41d7a3cb3b572186200d0720bb96ec155fbd4'
42
'a94c798e3a1b5614020e3dd6ec80d378c0401fa08f411769527ad87a6898e80c'
43
'c597bee0bcbb59ed791651555a904e5f7e9d2e82f6c6986b6352e5fc38e5b557'
44
'b7ff6525a3c7a8be885edc85bb523095f8e25ddb38873127e2a4e97b28f2c7ad'
45
'7bb97271eb2dc5d1dcb95f9763f505970d234df17f1b8d79b467b9020257915a')
46
sha256sums_x86_64=('ea678ff32fc7d42f9105d28ada1495f00ef5139c05550f37a68bacfefe1f4c31')
47
sha256sums_i686=('565394c842ca75c171e89ed753d1fb15db5855e60d6bd467afd5ae6561e0e361')
48
sha256sums_armv7h=('59a8f5ee5bcb64b8827e1d759855d5eca35b2f76eb8055df75cbbc3d01f09567')
49
sha256sums_aarch64=('2a7ad1306795d391551d778eec21e6426fcfefd95f0bb288771611f62d8e7d2d')
50
51
prepare() {
52
if [[ $CARCH = armv7h ]] || [[ $CARCH = aarch64 ]]; then
53
bsdtar -xf data.tar.xz
54
fi
55
}
56
57
package() {
58
install -d -m 755 "${pkgdir}/usr/lib/plexmediaserver"
59
cp -dr --no-preserve='ownership' "${srcdir}/usr/lib/plexmediaserver" "${pkgdir}/usr/lib/"
60
61
install -D -m 644 "${srcdir}/plexmediaserver.conf.d" "${pkgdir}/etc/conf.d/plexmediaserver"
62
install -D -m 644 "${srcdir}/plexmediaserver.service" "${pkgdir}/usr/lib/systemd/system/plexmediaserver.service"
63
install -D -m 644 "${srcdir}/plex.sysusers" "${pkgdir}/usr/lib/sysusers.d/plex.conf"
64
install -D -m 644 "${srcdir}/plex.tmpfiles" "${pkgdir}/usr/lib/tmpfiles.d/plex.conf"
65
66
install -D -m 644 "${srcdir}/terms.txt" "${pkgdir}/usr/share/licenses/${pkgname}/terms.txt"
67
install -D -m 644 "${srcdir}/plexmediaserver.hook" "${pkgdir}/usr/share/doc/${pkgname}/plexmediaserver.hook"
68
}
69
70
# vim: ts=2 sw=2 et:
71
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |