urbackup2-client

maintainer funilrys · 22 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from the project's official domain (urbackup.org) used for distribution, which is a normal practice; building from own-source is low risk even if the host is not whitelisted.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain (urbackup.org) used for distribution, which is a normal practice; building from own-source is low risk even if the host is not whitelisted.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 "https://hndl.urbackup.org/Client/${pkgver}/urbackup-client-${pkgver}.0.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Nissar Chababy <funilrys at outlook dot com>
    
      2# Ex-Maintainer: K0n24d <konrad AT knauber DOT net>
    
      3pkgname=urbackup2-client
    
      4pkgver=2.5.31
    
      5pkgrel=1
    
      6pkgdesc="Client Server backup system"
    
      7arch=('i686' 'x86_64' 'armv5' 'armv6h' 'armv6' 'armv7h' 'armv7' 'aarch64')
    
      8url="http://www.urbackup.org/"
    
      9license=("GPL")
    
      10makedepends=('gcc-libs' 'gcc' 'make')
    
      11depends=('wxwidgets' 'crypto++' 'zlib')
    
      12conflicts=('urbackup2-client-no-gui' 'urbackup-client-no-gui' 'urbackup-client')
    
      13source=(
    
      14    "https://hndl.urbackup.org/Client/${pkgver}/urbackup-client-${pkgver}.0.tar.gz"
    
      15    'btrfs_create_filesystem_snapshot'
    
      16    'btrfs_remove_filesystem_snapshot'
    
      17    'dattobd_create_filesystem_snapshot'
    
      18    'dattobd_remove_filesystem_snapshot'
    
      19    'defaults_client'
    
      20    'lvm_create_filesystem_snapshot'
    
      21    'lvm_remove_filesystem_snapshot'
    
      22    'md5-bytes.patch'
    
      23    'uintptr_t.patch'
    
      24)
    
      25sha512sums=('70620e17b6c3e2afdf48f54f2b11137a0d29137c5049e626c50d0d66f2917a90d48f0bab0a028e19db902631b8d21c67dc2cbf34aa0ae5c0ffffedf9f81ff091'
    
      26            '416fb8f5f3687a3c369cc2b199d4c8b4170494f0a119566a91ac6a0c2f202dc5049804c10508b66ba657011b39be5ddd055091cd531a665b4398899f404086ca'
    
      27            '860021ce5b8d92ff58e8286991162c7bab45493c3b9c87577a43764f6b416397448bb99b8fcb850c4c5853927cb0a8637792b75ff53ee7ee257da3f5d29ae3a7'
    
      28            'fde5912b589a495dc03a26d174d7673ff746eed34d6b1ed64758b2dc2ec2ec53e02e6a28b04734a7112f16687b31d25123e99dbc69e9dcab48773675382ec582'
    
      29            'a8b58bba1b8b0a6b70395f9fe4277eeee60a0ba534f4eddb999d719915c76b76facb54172e03b7b29b9f725a4d720e9b676b05e5081f7528570956e903fe59bd'
    
      30            '238c286d451474a8721292f7e98b4f13600cb430c16a27ceb9551cc83705b8268a3f1202785fb5b61523f372b4e7e804fd20b7db62677621983d79a271aa106b'
    
      31            'a2d4ba03ae15582d2cd74ff68c38ff0f90d75a6eb5c241f9a022b0652fa2dc9b184439f6bda9a9538645925f739503ee7b3fc7bb232589583cdeb6dc27d74e5c'
    
      32            '9bdfefccdd9d6e37a77975324a7c417f3de2aa59e6da0bfde3c318b8c6f3d7f4629f3a41eebee548b9c572b8ed39640434cc08bd020d25362fddffc4426438de'
    
      33            '34e25c868cf4572414fbc6c693877127152f9a97edf8865b4263a55cf16f71a5045ba96b1a9af8244ed49c35cab56e3fdb44348d191e9f85e2efb66392907132'
    
      34            '46a89313447c2aee40943e800bb79d05e30bb9f89fcd48e37ca1a0f9226efbfed20b0ff02cc88e03ed904069b98008525a66856568dbe57d1380389d74e4b091')
    
      35
    
      36CFLAGS="-march=native -O2 -pipe -fstack-protector-strong"
    
      37CXXFLAGS="${CFLAGS} -ansi -std=gnu++11"
    
      38CPPFLAGS="${CPPFLAGS} -DNDEBUG"
    
      39MAKEFLAGS="-j$(nproc)"
    
      40
    
      41build() {
    
      42    sed  -i '/\#include \"cryptopp_inc.h\"/a #include "assert.h"' "${srcdir}/urbackup-client-${pkgver}.0/cryptoplugin/AESGCMDecryption.h"
    
      43
    
      44    patch -d"${srcdir}/urbackup-client-${pkgver}.0" -p0 < "${srcdir}/md5-bytes.patch"
    
      45
    
      46    patch -d"${srcdir}/urbackup-client-${pkgver}.0" -p1 < "${srcdir}/uintptr_t.patch"
    
      47
    
      48    cd "${srcdir}/urbackup-client-${pkgver}.0"
    
      49    ./configure --prefix=/usr --sbindir=/usr/bin --localstatedir=/var --sysconfdir=/etc --enable-embedded-cryptopp
    
      50    make
    
      51}
    
      52
    
      53package() {
    
      54    cd "${srcdir}/urbackup-client-${pkgver}.0"
    
      55    make DESTDIR="${pkgdir}" install
    
      56    sed -i 's/\/usr\/local\/sbin/\/usr\/bin/gi' urbackupclientbackend-debian.service
    
      57    install -Dm644 urbackupclientbackend-debian.service \
    
      58    "${pkgdir}"/usr/lib/systemd/system/urbackupclientbackend.service
    
      59    install -Dm644 docs/urbackupclientbackend.1 \
    
      60    "${pkgdir}"/usr/share/man/man1/urbackupclientbackend.1
    
      61
    
      62    cd "${srcdir}"
    
      63    install -Dm644 defaults_client "${pkgdir}/etc/default/urbackupclient"
    
      64    install -Dm700 btrfs_create_filesystem_snapshot "${pkgdir}/usr/share/urbackup"
    
      65    install -Dm700 btrfs_remove_filesystem_snapshot "${pkgdir}/usr/share/urbackup"
    
      66    install -Dm700 lvm_create_filesystem_snapshot "${pkgdir}/usr/share/urbackup"
    
      67    install -Dm700 lvm_remove_filesystem_snapshot "${pkgdir}/usr/share/urbackup"
    
      68    install -Dm700 dattobd_create_filesystem_snapshot "${pkgdir}/usr/share/urbackup"
    
      69    install -Dm700 dattobd_remove_filesystem_snapshot "${pkgdir}/usr/share/urbackup"
    
      70}
    
      71# vim: ts=2
    
      72

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2