unrealtournament4

maintainer gloriouseggroll · 14 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt client from Epic Games' S3 bucket, which is an official but non-whitelisted host; the content is a large game distribution, not executable code injected at build time, and the source is verifiable via checksum.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt client from Epic Games' S3 bucket, which is an official but non-whitelisted host; the content is a large game distribution, not executable code injected at build time, and the source is verifiable via checksum.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:22 "https://s3.amazonaws.com/unrealtournament/ShippedBuilds/%2B%2BUT%2BRelease-Next-CL-${pkgver}/UnrealTournament-Client-XAN-${pkgver}-Linux.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Thomas Crider <gloriouseggroll@protonmail.com>
    
      2
    
      3# This package is the pre-compiled alpha release version of Unreal Tournament on Unreal Engine 4 posted regularly on the Unreal Tournament forums.
    
      4# The newest release is always at the top of the announcements section, which can be found here:
    
      5# https://www.epicgames.com/unrealtournament/forums/forumdisplay.php?55-Announcements
    
      6# It is advised to download a snapshot of this package and use makepkg and pacman -U PACKAGENAME.pkg.tar.xz, as the package is larger than the default /tmp size
    
      7# Please also note that extracting the zip and compressing the package can take quite a long time, as the zip file is over 10GB.
    
      8# The source code can be found here on their github:
    
      9# https://github.com/EpicGames/UnrealTournament/tree/release
    
      10# Please note in order to view the Epic Games github you must register at unrealengine.com and link your github account to access this private repo.
    
      11# @see https://wiki.archlinux.org/index.php/Unreal_Engine_4
    
      12
    
      13pkgname='unrealtournament4'
    
      14pkgver=3525360
    
      15pkgrel=1
    
      16pkgdesc='A first-person shooter by Epic Games based on Unreal Engine 4.'
    
      17arch=('x86_64')
    
      18url='https://www.epicgames.com/unrealtournament/'
    
      19depends=('icu' 'xdg-user-dirs' 'sdl2' 'qt4' 'python')
    
      20license=('custom:UnrealTournament')
    
      21source=(
    
      22  "https://s3.amazonaws.com/unrealtournament/ShippedBuilds/%2B%2BUT%2BRelease-Next-CL-${pkgver}/UnrealTournament-Client-XAN-${pkgver}-Linux.zip"
    
      23  'UnrealTournament4.desktop'
    
      24  'LICENSE.pdf'
    
      25  'ut4'
    
      26)
    
      27noextract=("UnrealTournament-Client-XAN-${pkgver}-Linux.zip")
    
      28sha512sums=(
    
      29  'ad721074726bb108719b9a2ff1060f2f1b6fbe5eb27b5d95488505848aeb497c33db32e0e2dfbf9ab22ef3d1e06a7e3f9e156873025e6e21942154f3fcaed542'
    
      30  '135f8635aec1a1c1edb6183c362233aef337e5a8a73911835344abcacf57b0e8d86966334999e2882e5c6c4bef2842d5fa70a010384e5d1473375cc9d6bd4d4b'
    
      31  '0182493a86ee18274c77a4d89776425e1a1e0d0b40c2a797f0fee75bdaad8d9c4511ccab7ad2dd39fbd2fb1aa811d7706677b08a09c553b1348822c1265aa846'
    
      32  '44088e2eb5231d509fe943bd72afad80df7ae63200df190097e78a02c6e0412f61fdea465ebf1a6a29025a1b7e65fbb6bab06ca83f43543d273246bfe736858d'
    
      33)
    
      34options=(!strip staticlibs)
    
      35
    
      36package() {
    
      37    # First create directories for bsdtar, the game icon, and the Saved folder
    
      38    install -d "$pkgdir"{/opt/$pkgname/LinuxNoEditor/UnrealTournament/Saved/,/usr/share/pixmaps/}
    
      39
    
      40    # Next extract the game files from the zip directly into pkgdir
    
      41    bsdtar -xf "UnrealTournament-Client-XAN-${pkgver}-Linux.zip" -C "${pkgdir}/opt/${pkgname}/"
    
      42
    
      43    # Next install the game shortcuts and license
    
      44    cd ${pkgdir}
    
      45    install -Dm644 "${srcdir}/UnrealTournament4.desktop" -t "usr/share/applications/"
    
      46    install -Dm644 "${srcdir}/ut4" -t "usr/bin/"
    
      47    install -Dm644 "${srcdir}/LICENSE.pdf" -t "usr/share/licenses/$pkgname/"
    
      48    install -Dm644 "opt/${pkgname}/LinuxNoEditor/Engine/Content/Slate/Icons/DefaultAppIcon.png" "usr/share/pixmaps/UnrealTournament.png"
    
      49
    
      50
    
      51    # Set permissions
    
      52    chgrp -R games "opt/${pkgname}"
    
      53    chmod -R a+rw "opt/${pkgname}/LinuxNoEditor/UnrealTournament/Saved"
    
      54    chmod +x "opt/${pkgname}/LinuxNoEditor/Engine/Binaries/Linux/UE4-Linux-Shipping"
    
      55    chmod +x "opt/${pkgname}/LinuxNoEditor/Engine/Binaries/Linux/UE4-Linux-Test"
    
      56    chmod +x "usr/bin/ut4"
    
      57}
    
      58
    
      59# vim:set ts=2 sw=2 et:
    
      60

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2