tcos-pkcs11

MEDIUM

maintainer ChrisTX 0 votes scanned 2026-08-23 03:20:44.711208

View on AUR

Why flagged

Installs a prebuilt proprietary .so binary (PKCS#11 driver) downloaded directly from telesec.de; while this is the vendor's own official domain, it is a closed-source binary with a non-standard EULA, no source code, and checksums that cannot be independently verified against a public release manifest — a swapped or updated binary would silently gain access to smartcard credentials at the PKCS#11 layer.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=("https://www.telesec.de/assets/downloads/SecureElements-Smartcards/PKCS11-SDK/libpkcs11tcos_Linux_PCSC_${pkgver//./-}_x86x64.zip"

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): Installs a prebuilt proprietary .so binary (PKCS#11 driver) downloaded directly from telesec.de; while this is the vendor's own official domain, it is a closed-source binary with a non-standard EULA, no source code, and checksums that cannot be independently verified against a public release manifest — a swapped or updated binary would silently gain access to smartcard credentials at the PKCS#11 layer.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Christian Pfeiffer <cpfeiffer at rev-crew.info>
    
      2# shellcheck disable=SC2034,SC2154
    
      3# shellcheck shell=bash
    
      4pkgname=tcos-pkcs11
    
      5pkgver=1.20.1
    
      6pkgrel=1
    
      7pkgdesc="PKCS#11 driver for TeleSec TCOS smartcards"
    
      8arch=('x86_64')
    
      9url="https://www.telesec.de/de/service/downloads/produkte-und-loesungen"
    
      10license=('LicenseRef-EULA')
    
      11install=$pkgname.install
    
      12depends=('glibc' 'libgcc' 'libstdc++' 'pcsclite')
    
      13source=("https://www.telesec.de/assets/downloads/SecureElements-Smartcards/PKCS11-SDK/libpkcs11tcos_Linux_PCSC_${pkgver//./-}_x86x64.zip"
    
      14  "https://www.telesec.de/assets/downloads/SecureElements-Smartcards/Nutzungsbedingungen-TCOS-Treiber-und-Managementsoftware.pdf"
    
      15  "p11tcos-netkey.module")
    
      16sha512sums=('ef796366a05008fbf78113b72a150994b7933f86b3564f62a11135fb1c8ae55ce36f7d132e2ff93426e5dfb4bea6cf0be8c8e3a707be66ff177cf0d2bfe13dc2'
    
      17  'fcdaee3d596501fff5b8cb554b2c2ac06ff96d056f5d78a6e6a303d76d914c947c361ffa61629a5dce8027e9a84e85f6b2a814bd3d04ad098302b32f77c1820e'
    
      18  '3c694e596c4d4782522d5e553b6eea561a06c4128216379e285a281986aaa568451990242205ad37209086add357d3f2a9cdc1ceb6a434276596bb9ba9bf2563')
    
      19b2sums=('f0bcd6cfbef0258a72b234aae19bd962123a4d076115a20f97f157443f75ae765ff4275c76a90fb1d74d3efcfaca2b9785778ef78096765d29045ed2af3b9f84'
    
      20  '14581e087f579c0d10e57cfc242798c46e2a57b77c35c5d04760adaefd0c498d9775a77896b8a1c87047ca322963fb34bbcfb7c1e962a1c2ce191b06a1947650'
    
      21  'f0ba50cf134d9be16cee0262a641bc4b644be4c1b81ab574e0bae64d85e6cb39f91ac6cb80c3e5cb8ff1e15ed4bbfed67f489818e2e3219fd25ce5804c335396')
    
      22
    
      23package() {
    
      24  install -Dm644 "Nutzungsbedingungen-TCOS-Treiber-und-Managementsoftware.pdf" \
    
      25    -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      26  install -Dm644 "p11tcos-netkey.module" -t "${pkgdir}/usr/share/p11-kit/modules/"
    
      27  cd "libpkcs11tcos_Linux_PCSC_${pkgver//./-}_x86x64" || exit
    
      28  install -Dm755 ./*.so -t "${pkgdir}/usr/lib/pkcs11/"
    
      29  install -Dm644 "ReleaseNotesLinux ${pkgver//./-}.txt" -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      30}
    
      31

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-23 03:20:44	Medium	3
2026-08-23 03:19:42	Medium	2