urbanterror41

maintainer JackKelli · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads a source zip from a non-whitelisted host, but it is a data archive for a legitimate game, built alongside a publicly auditable git repository (ioq3), with no evidence of malicious or unverifiable executable code.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source zip from a non-whitelisted host, but it is a data archive for a legitimate game, built alongside a publicly auditable git repository (ioq3), with no evidence of malicious or unverifiable executable code.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:13 source=("https://up.barbatos.fr/urt/UrbanTerror4.1.1.zip"
  • PKGBUILD:15 "https://upload.wikimedia.org/wikipedia/commons/5/56/Urbanterror.svg"

PKGBUILD

2 offending line(s) highlighted
1# Maintainer: Joshua Olsen (JackKelli) <joshuaolsen@gmail.com>
2
3pkgname=urbanterror41
4pkgver=4.1
5pkgrel=1
6epoch=1
7pkgdesc="Urban Terror is a team-based tactical shooter based on the Quake 3 Engine (ioQ3 Version)"
8arch=('x86_64')
9url="http://www.urbanterror.info"
10license=('GPL2')
11depends=('sdl' 'openal' 'curl' 'opus' 'opusfile' 'mumble')
12makedepends=('mesa')
13source=("https://up.barbatos.fr/urt/UrbanTerror4.1.1.zip"
14 "git+https://github.com/ioquake/ioq3.git"
15 "https://upload.wikimedia.org/wikipedia/commons/5/56/Urbanterror.svg"
16 "ioq3-makefile.local"
17 "ioq3-standalone.patch"
18 "ioq3-compile64.patch"
19 "${pkgname}.sh"
20 "${pkgname}-server.sh"
21 "${pkgname}.desktop"
22 "default.cfg")
23md5sums=('722c1fea9936593c9ef039bb068cc33b'
24 'SKIP'
25 '728dc8288d4ffb781feddf55e0fc878d'
26 'c8e10b3582bbe56ccaf5e9d43c961002'
27 '1643d06ec3079542fb38cf2b913c84d9'
28 '62736969cc65c7b82d2183fd01078c2f'
29 'a437e92578430636a35bcb9b17337198'
30 'b3fd5122bdd49c6003701dd9214b9aef'
31 '5e1068aed72fb55bf9dcb80efa72a9c7'
32 'SKIP')
33
34package() {
35 unzip -o UrbanTerror4.1.1.zip -d "${srcdir}"
36
37 cp -f "ioq3-makefile.local" ioq3/Makefile.local
38 patch -d "${srcdir}/ioq3" -s -p1 < ioq3-standalone.patch
39 patch -d "${srcdir}/ioq3" -s -p1 < ioq3-compile64.patch
40
41 cd ioq3
42 make
43
44 zip -j - "${srcdir}/default.cfg" > "${srcdir}/zpak000_newdefault.pk3"
45 mkdir -p "${pkgdir}/opt/${pkgname}/q3ut4"
46 install -m755 "${srcdir}/ioq3/build/release-linux-x86_64/urbanterror41.x86_64" "${pkgdir}/opt/${pkgname}"
47 install -m755 "${srcdir}/ioq3/build/release-linux-x86_64/urbanterror41-server.x86_64" "${pkgdir}/opt/${pkgname}"
48 install -m755 "${srcdir}/ioq3/build/release-linux-x86_64/renderer_opengl1_x86_64.so" "${pkgdir}/opt/${pkgname}"
49 install -m755 "${srcdir}/ioq3/build/release-linux-x86_64/renderer_opengl2_x86_64.so" "${pkgdir}/opt/${pkgname}"
50 install -m644 "${srcdir}/UrbanTerror/q3ut4/autoexec.cfg" "${pkgdir}/opt/${pkgname}/q3ut4"
51 install -m644 "${srcdir}/UrbanTerror/q3ut4/description.txt" "${pkgdir}/opt/${pkgname}/q3ut4"
52 install -m644 "${srcdir}/UrbanTerror/q3ut4/mapcycle.txt" "${pkgdir}/opt/${pkgname}/q3ut4"
53 install -m644 "${srcdir}/UrbanTerror/q3ut4/server.cfg" "${pkgdir}/opt/${pkgname}/q3ut4"
54 install -m644 "${srcdir}/UrbanTerror/q3ut4/zpak000.pk3" "${pkgdir}/opt/${pkgname}/q3ut4"
55 install -m644 "${srcdir}/UrbanTerror/q3ut4/zpak000_assets.pk3" "${pkgdir}/opt/${pkgname}/q3ut4"
56 install -m644 "${srcdir}/UrbanTerror/q3ut4/zpak001_assets.pk3" "${pkgdir}/opt/${pkgname}/q3ut4"
57 install -m644 "${srcdir}/zpak000_newdefault.pk3" "${pkgdir}/opt/${pkgname}/q3ut4"
58 install -m644 -T "${srcdir}/Urbanterror.svg" "${pkgdir}/opt/${pkgname}/${pkgname}.svg"
59 mkdir -p "${pkgdir}/usr/bin"
60 install -m755 -T "${srcdir}/${pkgname}.sh" "${pkgdir}/usr/bin/${pkgname}"
61 install -m755 -T "${srcdir}/${pkgname}-server.sh" "${pkgdir}/usr/bin/${pkgname}-server"
62 mkdir -p "${pkgdir}/usr/share/applications"
63 install -m644 "${srcdir}/${pkgname}.desktop" "${pkgdir}/usr/share/applications"
64}

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion