simtrace2 (MEDIUM)

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("https://downloads.osmocom.org/releases/${pkgname}/${pkgname}-host-${pkgver}.tar.bz2"

PKGBUILD

1 offending line(s) highlighted

      1# Copyright (C) 2025 Vadim Yanitskiy <fixeria@osmocom.org>
    
      2# Copyright (C) 2020 Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
    
      3# This program is free software: you can redistribute it and/or modify
    
      4# it under the terms of the GNU General Public License as published by
    
      5# the Free Software Foundation, either version 3 of the License, or
    
      6# (at your option) any later version.
    
      7pkgname=simtrace2
    
      8pkgver=0.9.1
    
      9pkgrel=1
    
      10pkgdesc="Traces the communication between phones and SIM cards with second generation simtrace hardware."
    
      11arch=('armv7h' 'i686' 'x86_64')
    
      12url="https://osmocom.org/projects/simtrace2"
    
      13license=('GPL-2.0-only') # GPLv2-only according to the source files headers
    
      14conflicts=("${pkgname}-git")
    
      15provides=('libosmo-simtrace2.so=1-64')
    
      16depends=('libosmocore' 'libusb' 'talloc')
    
      17source=("https://downloads.osmocom.org/releases/${pkgname}/${pkgname}-host-${pkgver}.tar.bz2"
    
      18        'version.h.tpl')
    
      19sha256sums=('829ec475828f120bfae894519a6ca9a48acc8ddf2b049942590bf03298dc2ac8'
    
      20            'ed8973c80cc85d48895f6cdd93d2401e321a61eac1d80536e9219d4540b6ff2f')
    
      21
    
      22prepare() {
    
      23  cd "${srcdir}/${pkgname}-${pkgver}"
    
      24  # XXX: version.h.tpl is missing in the release tarball
    
      25  # see https://gerrit.osmocom.org/c/simtrace2/+/43529
    
      26  cp -p "${srcdir}/version.h.tpl" include/osmocom/simtrace2/
    
      27}
    
      28
    
      29build() {
    
      30  cd "${srcdir}/${pkgname}-${pkgver}"
    
      31  ./configure --prefix=/usr
    
      32  make
    
      33}
    
      34
    
      35package() {
    
      36  cd "${srcdir}/${pkgname}-${pkgver}"
    
      37  make DESTDIR=$pkgdir install
    
      38  # install udev rules
    
      39  install -Dm 644 contrib/99-simtrace2.rules \
    
      40                  "${pkgdir}/usr/lib/udev/rules.d/99-simtrace2.rules"
    
      41}
    
      42
    
      43# vim:set ts=2 sw=2 et:
    
      44

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-07 13:14
@@ -5,8 +5,8 @@
 # the Free Software Foundation, either version 3 of the License, or
 # (at your option) any later version.
 pkgname=simtrace2
-pkgver=0.9.0
-pkgrel=3
+pkgver=0.9.1
+pkgrel=1
 pkgdesc="Traces the communication between phones and SIM cards with second generation simtrace hardware."
 arch=('armv7h' 'i686' 'x86_64')
 url="https://osmocom.org/projects/simtrace2"
@@ -14,8 +14,17 @@
 conflicts=("${pkgname}-git")
 provides=('libosmo-simtrace2.so=1-64')
 depends=('libosmocore' 'libusb' 'talloc')
-source=("https://downloads.osmocom.org/releases/${pkgname}/${pkgname}-host-${pkgver}.tar.bz2")
-sha256sums=('67912bb23d8c370e051c718f33d231d4811b9c938794fa23ddbc1aab075fa577')
+source=("https://downloads.osmocom.org/releases/${pkgname}/${pkgname}-host-${pkgver}.tar.bz2"
+        'version.h.tpl')
+sha256sums=('829ec475828f120bfae894519a6ca9a48acc8ddf2b049942590bf03298dc2ac8'
+            'ed8973c80cc85d48895f6cdd93d2401e321a61eac1d80536e9219d4540b6ff2f')
+
+prepare() {
+  cd "${srcdir}/${pkgname}-${pkgver}"
+  # XXX: version.h.tpl is missing in the release tarball
+  # see https://gerrit.osmocom.org/c/simtrace2/+/43529
+  cp -p "${srcdir}/version.h.tpl" include/osmocom/simtrace2/
+}
 
 build() {
   cd "${srcdir}/${pkgname}-${pkgver}"
@@ -28,7 +37,7 @@
   make DESTDIR=$pkgdir install
   # install udev rules
   install -Dm 644 contrib/99-simtrace2.rules \
-                  "${pkgdir}/etc/udev/rules.d/99-simtrace2.rules"
+                  "${pkgdir}/usr/lib/udev/rules.d/99-simtrace2.rules"
 }
 
 # vim:set ts=2 sw=2 et:

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-07 13:14:41	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1