unifi

maintainer freswa · 73 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package downloads a source archive from the vendor's official domain (dl.ui.com) which is plausibly the project's own release infrastructure; this is a normal AUR packaging practice for software not natively distributed in Arch repositories, and the downloaded content is verified via b2sum.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source archive from the vendor's official domain (dl.ui.com) which is plausibly the project's own release infrastructure; this is a normal AUR packaging practice for software not natively distributed in Arch repositories, and the downloaded content is verified via b2sum.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 source=("UniFi-${pkgver}.zip::https://dl.ui.com/unifi/${pkgver}/UniFi.unix.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Frederik Schwan <freswa at archlinux dot org>
    
      2# Contributor: Sébastien "Seblu" Luttringer <seblu@archlinux.org>
    
      3
    
      4pkgname=unifi
    
      5pkgver=10.5.67
    
      6pkgrel=1
    
      7pkgdesc='Centralized management system for Ubiquiti UniFi AP'
    
      8arch=('x86_64' 'armv7h' 'aarch64')
    
      9url='https://unifi-network.ui.com'
    
      10# We are allowed to ship the software in our repository
    
      11# https://mailman.archlinux.org/mailman/private/arch-dev/2014-August/015690.html
    
      12license=('custom')
    
      13depends=(
    
      14  'fontconfig'
    
      15  'java-runtime-headless=25'
    
      16  'mongodb'
    
      17)
    
      18conflicts=('tomcat-native')
    
      19source=("UniFi-${pkgver}.zip::https://dl.ui.com/unifi/${pkgver}/UniFi.unix.zip"
    
      20        mongod
    
      21        unifi.service
    
      22        unifi.sysusers
    
      23        unifi.tmpfiles
    
      24        LICENSE)
    
      25b2sums=('c483e6e40afc2cd565b6d268c5a4b210da0dd4a8518449dedd7dd399acfae3e353de1f68db2cdfc91390f39262906ff44eecedc4035d664c1321d0c13c119f27'
    
      26        '2c8d535aabe8e738a9ba375fc4ab7aaa1713c9aefffc3e652fd49bc6288d0b7d24cae64d04ded5d5052486a377edca190818874a80bafb33cf2ac94742540106'
    
      27        '753d4f24793ca65c9f554bedfbc22d6507474d835986cdba435538ec6518bd14769a64485a5f4bab1fc879378ff4c4b64ec323fa362dac32f739ed119cb2647c'
    
      28        '5474a726a8a222f463f47cdca44988889406e2bee7b3c7875d45b20dc283d1d9737772d8cb63cd35c75517f3606feaadcf02c00b73e5bbab40f459d78d066c3e'
    
      29        'bd254ddbd4b52acca50b41dffe7ae1e2e5250f15574fc371d36dc133215f3a268623b0b5b12e73932c856bf90a69a178ba91530ffa8b08c0da51f51911b2ef92'
    
      30        '84f2a201143b3e44ba09d1009818db507d8f261d495a86ce239bcbacee059aad5c63af1b43638b126be743ff7c660f0871eb2b4efe2031e2f64bc23f172052e0')
    
      31
    
      32package() {
    
      33  # lib
    
      34  install -dm755 "${pkgdir}"/usr/lib/unifi
    
      35  cp -r UniFi/{bin,dl,lib,webapps} "${pkgdir}"/usr/lib/unifi
    
      36  case ${CARCH} in
    
      37  x86_64)
    
      38      rm -r "${pkgdir}"/usr/lib/unifi/lib/native/Linux/aarch64
    
      39      ;;
    
      40  aarch64)
    
      41      rm -r "${pkgdir}"/usr/lib/unifi/lib/native/Linux/x86_64
    
      42      ;;
    
      43  *)
    
      44      rm -r "${pkgdir}"/usr/lib/unifi/lib/native/Linux
    
      45      ;;
    
      46  esac
    
      47
    
      48  # fix incompatibility with mongodb >= 3.6
    
      49  rm "${pkgdir}"/usr/lib/unifi/bin/mongod
    
      50  install -Dm755 "${srcdir}"/mongod "${pkgdir}"/usr/lib/unifi/bin/mongod
    
      51
    
      52  # data
    
      53  install -dm750 "${pkgdir}"/var/lib/unifi
    
      54  for _d in {data,run,work}; do
    
      55      ln -s ../../../var/lib/unifi/${_d} "${pkgdir}"/usr/lib/unifi/${_d}
    
      56  done
    
      57
    
      58  # log
    
      59  ln -s ../../../var/log/unifi "${pkgdir}"/usr/lib/unifi/logs
    
      60
    
      61  # readme
    
      62  install -Dm644 UniFi/readme.txt "${pkgdir}"/usr/share/doc/${pkgname}/README
    
      63
    
      64  # license
    
      65  install -Dm644 LICENSE "${pkgdir}"/usr/share/licenses/${pkgname}/LICENSE
    
      66
    
      67  # systemd
    
      68  install -Dm644 ${pkgname}.service "${pkgdir}"/usr/lib/systemd/system/${pkgname}.service
    
      69  install -Dm644 ${pkgname}.tmpfiles "${pkgdir}"/usr/lib/tmpfiles.d/${pkgname}.conf
    
      70  install -Dm644 ${pkgname}.sysusers "${pkgdir}"/usr/lib/sysusers.d/${pkgname}.conf
    
      71}
    
      72

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-08-18 00:03
@@ -2,7 +2,7 @@
 # Contributor: Sébastien "Seblu" Luttringer <seblu@archlinux.org>
 
 pkgname=unifi
-pkgver=10.4.57
+pkgver=10.5.67
 pkgrel=1
 pkgdesc='Centralized management system for Ubiquiti UniFi AP'
 arch=('x86_64' 'armv7h' 'aarch64')
@@ -22,7 +22,7 @@
         unifi.sysusers
         unifi.tmpfiles
         LICENSE)
-b2sums=('6da6aa08412d8cc3ec43e700cfebf28bc7493fefc7c3eb41b90ee8e688eb4c1c23b803597c70b8e07b08f60853aa0af18507caf26941569a0ed4a585591ec8d5'
+b2sums=('c483e6e40afc2cd565b6d268c5a4b210da0dd4a8518449dedd7dd399acfae3e353de1f68db2cdfc91390f39262906ff44eecedc4035d664c1321d0c13c119f27'
         '2c8d535aabe8e738a9ba375fc4ab7aaa1713c9aefffc3e652fd49bc6288d0b7d24cae64d04ded5d5052486a377edca190818874a80bafb33cf2ac94742540106'
         '753d4f24793ca65c9f554bedfbc22d6507474d835986cdba435538ec6518bd14769a64485a5f4bab1fc879378ff4c4b64ec323fa362dac32f739ed119cb2647c'
         '5474a726a8a222f463f47cdca44988889406e2bee7b3c7875d45b20dc283d1d9737772d8cb63cd35c75517f3606feaadcf02c00b73e5bbab40f459d78d066c3e'

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 00:03:42	LOW	2
2026-08-15 00:26:13	LOW	2
2026-08-14 00:03:41	LOW	2
2026-08-13 00:17:07	LOW	2
2026-08-12 00:27:08	LOW	2
2026-08-11 15:21:23	MEDIUM	1
2026-06-19 19:07:35	CLEAN	2
2026-06-18 18:55:24	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1