saleae-logic2

LOW
maintainer tugyan 16 votes scanned 2026-10-17 00:21:55.226236
View on AUR
Why flagged

The package downloads a prebuilt AppImage from Saleae's official downloads domain, which is plausibly the project's own release infrastructure; despite the non-whitelisted host, the AppImage is from the official vendor and the worst case of a swapped source would be a compromised official binary, which is a low-severity supply-chain risk for this type of software.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt AppImage from Saleae's official downloads domain, which is plausibly the project's own release infrastructure; despite the non-whitelisted host, the AppImage is from the official vendor and the worst case of a swapped source would be a compromised official binary, which is a low-severity supply-chain risk for this type of software.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 source=("https://downloads2.saleae.com/logic2/Logic-${pkgver}-linux-x64.AppImage")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: tugyan <bilaltasdelen at windowslive dot com>
2# Contributor: jkdhn <aur@jkdhn.me>
3
4pkgname=saleae-logic2
5pkgver=2.4.48
6pkgrel=1
7pkgdesc="Debug hardware like a pro"
8arch=("x86_64")
9url="https://discuss.saleae.com/c/logic-2-0-software/7"
10license=("unknown")
11depends=(
12 "libxcrypt-compat"
13)
14source=("https://downloads2.saleae.com/logic2/Logic-${pkgver}-linux-x64.AppImage")
15conflicts=("saleae-logic" "saleae-logic-beta")
16provides=("saleae-logic" "saleae-logic-beta")
17sha256sums=('dbc2ded63b48d7561d9e2e5c9f1e2bafdc7f5654ee714ad123c69df74863641b')
18
19build() {
20 _file="Logic-${pkgver}-linux-x64.AppImage"
21 chmod u+x "${_file}"
22 "./${_file}" --appimage-extract
23
24 _desktop="${srcdir}/squashfs-root/Logic.desktop"
25 sed -i "/^Exec=/cExec=${pkgname}" "${_desktop}"
26 sed -i "/^X-AppImage/d" "${_desktop}"
27 sed -i "s/^X-AppImage-Version=/Version=/" "${_desktop}"
28}
29
30package() {
31 mkdir "${pkgdir}/opt/"
32 mv "${srcdir}/squashfs-root/usr" "${pkgdir}/usr"
33 mv "${srcdir}/squashfs-root" "${pkgdir}/opt/${pkgname}"
34
35 mkdir -p "${pkgdir}/usr/share/applications"
36 mv "${pkgdir}/opt/${pkgname}/Logic.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
37 rm "${pkgdir}/opt/${pkgname}/AppRun"
38
39 # Use intended program icon
40 mkdir -p "${pkgdir}/usr/share/icons/hicolor/512x512/apps"
41 mv "${pkgdir}/usr/lib/logic/resources/linux-x64/LogicIcon.png" "${pkgdir}/usr/share/icons/hicolor/512x512/apps/Logic.png"
42
43 install -Dm644 "${pkgdir}/usr/lib/logic/resources/udev/99-SaleaeLogic.rules" "${pkgdir}/etc/udev/rules.d/99-SaleaeLogic.rules"
44
45 rm "${pkgdir}/usr/bin/Logic" # remove the symlink
46
47 # Fix permissions (example: 700->755, 640->644)
48 find "${pkgdir}" -perm "/111" -exec chmod 755 \{\} \;
49 find "${pkgdir}" ! -perm "/111" -exec chmod 644 \{\} \;
50 chmod 4755 "${pkgdir}/usr/lib/logic/chrome-sandbox"
51
52 mkdir -p "${pkgdir}/usr/bin/"
53 ln -s "/usr/lib/logic/Logic" "${pkgdir}/usr/bin/${pkgname}"
54
55}
56

Changes since previous scan

--- PKGBUILD @ 2026-08-12 00:27
+++ PKGBUILD @ 2026-10-17 00:21
@@ -2,7 +2,7 @@
# Contributor: jkdhn <aur@jkdhn.me>
pkgname=saleae-logic2
-pkgver=2.4.46
+pkgver=2.4.48
pkgrel=1
pkgdesc="Debug hardware like a pro"
arch=("x86_64")
@@ -14,7 +14,7 @@
source=("https://downloads2.saleae.com/logic2/Logic-${pkgver}-linux-x64.AppImage")
conflicts=("saleae-logic" "saleae-logic-beta")
provides=("saleae-logic" "saleae-logic-beta")
-sha256sums=('82832ed0d3166701d7f4f7df57a620b721a23883e0cfe8f2e8e95a2e6720d6f2')
+sha256sums=('dbc2ded63b48d7561d9e2e5c9f1e2bafdc7f5654ee714ad123c69df74863641b')
build() {
_file="Logic-${pkgver}-linux-x64.AppImage"
@@ -34,25 +34,23 @@
mkdir -p "${pkgdir}/usr/share/applications"
mv "${pkgdir}/opt/${pkgname}/Logic.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
- rm "${pkgdir}/opt/${pkgname}/Logic.png"
- rm "${pkgdir}/opt/${pkgname}/.DirIcon"
rm "${pkgdir}/opt/${pkgname}/AppRun"
- rm "${pkgdir}/opt/${pkgname}/version"
- rm -rf "${pkgdir}/usr/lib/"
# Use intended program icon
- rm -r "${pkgdir}/usr/share/icons"
mkdir -p "${pkgdir}/usr/share/icons/hicolor/512x512/apps"
- mv "${pkgdir}/opt/${pkgname}/resources/linux-x64/LogicIcon.png" "${pkgdir}/usr/share/icons/hicolor/512x512/apps/Logic.png"
+ mv "${pkgdir}/usr/lib/logic/resources/linux-x64/LogicIcon.png" "${pkgdir}/usr/share/icons/hicolor/512x512/apps/Logic.png"
- install -Dm644 "${pkgdir}/opt/${pkgname}/resources/linux-x64/99-SaleaeLogic.rules" "${pkgdir}/etc/udev/rules.d/99-SaleaeLogic.rules"
+ install -Dm644 "${pkgdir}/usr/lib/logic/resources/udev/99-SaleaeLogic.rules" "${pkgdir}/etc/udev/rules.d/99-SaleaeLogic.rules"
- # Fix permissions (example: 700->755, 640->644)
+ rm "${pkgdir}/usr/bin/Logic" # remove the symlink
+
+ # Fix permissions (example: 700->755, 640->644)
find "${pkgdir}" -perm "/111" -exec chmod 755 \{\} \;
find "${pkgdir}" ! -perm "/111" -exec chmod 644 \{\} \;
- chmod 4755 "${pkgdir}/opt/${pkgname}/chrome-sandbox"
+ chmod 4755 "${pkgdir}/usr/lib/logic/chrome-sandbox"
mkdir -p "${pkgdir}/usr/bin/"
- ln -s "/opt/${pkgname}/Logic" "${pkgdir}/usr/bin/${pkgname}"
+ ln -s "/usr/lib/logic/Logic" "${pkgdir}/usr/bin/${pkgname}"
+
}

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 23:13:54 Medium 1
2026-08-12 00:27:08 Clean 2
2026-08-11 17:21:34 Medium 1
2026-08-11 15:21:23 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion