veeam

maintainer ypomortsev · 16 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged The package downloads official Veeam RPMs from the vendor's own repository domain (veeam.com), which is plausibly the project's official source; despite the static analyzer flag for a non-whitelisted host, this is a normal and expected source for the software, and the checksums are provided and valid.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official Veeam RPMs from the vendor's own repository domain (veeam.com), which is plausibly the project's official source; despite the static analyzer flag for a non-whitelisted host, this is a normal and expected source for the software, and the checksums are provided and valid.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 source=("https://repository.veeam.com/backup/linux/agent-13/rpm/el/10/x86_64/veeam-$pkgver-1.el10.x86_64.rpm"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Yegor Pomortsev <yegor@pomortsev.com>
    
      2# Contributors: krnlsoft <krnlsoft 4t hotmail d0t it>
    
      3# Contributors: theokonos
    
      4# Contributors: Ted Sadler
    
      5# Contributors: dekart811
    
      6# Contributors: CodeImp
    
      7
    
      8pkgname=veeam
    
      9pkgver=13.1.1.4
    
      10pkgrel=1
    
      11pkgdesc="Veeam Agent for Linux"
    
      12arch=(x86_64)
    
      13url=https://www.veeam.com/products/downloads.html
    
      14install=${pkgname}.install
    
      15license=(custom:veeam)
    
      16depends=(ncurses lvm2 fuse mlocate veeamblksnap-dkms)
    
      17conflicts=(veeam-nosnap veeam-6)
    
      18options=(!strip)
    
      19source=("https://repository.veeam.com/backup/linux/agent-13/rpm/el/10/x86_64/veeam-$pkgver-1.el10.x86_64.rpm"
    
      20        "https://repository.veeam.com/backup/linux/agent-13/rpm/el/10/x86_64/veeam-libs-$pkgver-1.x86_64.rpm")
    
      21sha256sums=('4f10c519927fc25067e8cfb82bc6fc56935ded278c5076d01dada051a4b8ca3d'
    
      22            '90829a1d1dff15091245e1f672f40814006efdb46513631cbfe7dd804409b5c4')
    
      23noextract=("veeam-$pkgver-1.el10.x86_64.rpm"
    
      24           "veeam-libs-$pkgver-1.x86_64.rpm")
    
      25backup=('etc/veeam/veeam.ini'
    
      26        'usr/share/veeam/lpb_scheme.sql'
    
      27        'usr/share/veeam/db_upgrade.sql'
    
      28        'usr/share/veeam/db_scheme.sql')
    
      29
    
      30package() {
    
      31  bsdtar -xf "$pkgname-$pkgver-1.el10.x86_64.rpm" -C "$pkgdir" -s /sbin/bin/ -s '|lib/systemd|usr/lib/systemd|'
    
      32  bsdtar -xf "$pkgname-libs-$pkgver-1.x86_64.rpm" -C "$pkgdir" -s /sbin/bin/ -s '|lib/systemd|usr/lib/systemd|'
    
      33
    
      34  sed -i -e 's|# .include fipsmodule.cnf|.include /opt/veeam/veeamagentforlinux/openssl_fips_redistributable/3.1.2/ssl/fipsmodule.cnf|' \
    
      35      "$pkgdir"/opt/veeam/veeamagentforlinux/openssl_fips_redistributable/3.1.2/ssl/openssl.cnf
    
      36
    
      37  sed -i -e 's|/var/run|/run|' -e 's|/sbin|/bin|' "$pkgdir"/usr/lib/systemd/system/veeamservice.service
    
      38
    
      39  rm -rf "$pkgdir"/usr/lib/.build-id/
    
      40
    
      41  install -dm755 "$pkgdir"/usr/share/licenses/$pkgname/
    
      42  install -Dm644 "$pkgdir"/usr/share/veeam/EULA "$pkgdir"/usr/share/licenses/$pkgname/EULA
    
      43  install -Dm644 "$pkgdir"/usr/share/veeam/3rdPartyNotices.txt "$pkgdir"/usr/share/licenses/$pkgname/3rdPartyNotices.txt
    
      44}
    
      45

Changes since previous scan

--- PKGBUILD @ 2026-08-02 00:16
+++ PKGBUILD @ 2026-08-18 00:03
@@ -6,7 +6,7 @@
 # Contributors: CodeImp
 
 pkgname=veeam
-pkgver=13.1.0.252
+pkgver=13.1.1.4
 pkgrel=1
 pkgdesc="Veeam Agent for Linux"
 arch=(x86_64)
@@ -14,10 +14,12 @@
 install=${pkgname}.install
 license=(custom:veeam)
 depends=(ncurses lvm2 fuse mlocate veeamblksnap-dkms)
+conflicts=(veeam-nosnap veeam-6)
+options=(!strip)
 source=("https://repository.veeam.com/backup/linux/agent-13/rpm/el/10/x86_64/veeam-$pkgver-1.el10.x86_64.rpm"
         "https://repository.veeam.com/backup/linux/agent-13/rpm/el/10/x86_64/veeam-libs-$pkgver-1.x86_64.rpm")
-sha256sums=('fcc8dbdcd1882b7dae0792a7731fb9b34b50d2463c50c20e590875260da3ba48'
-            'ed628e86d54f3cd5510db013940a39ad77c87ab285bd2f9591081e1281cd117b')
+sha256sums=('4f10c519927fc25067e8cfb82bc6fc56935ded278c5076d01dada051a4b8ca3d'
+            '90829a1d1dff15091245e1f672f40814006efdb46513631cbfe7dd804409b5c4')
 noextract=("veeam-$pkgver-1.el10.x86_64.rpm"
            "veeam-libs-$pkgver-1.x86_64.rpm")
 backup=('etc/veeam/veeam.ini'

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	2
2026-08-17 00:18:29	LOW	2
2026-08-16 09:32:18	MEDIUM	1
2026-08-02 00:16:08	CLEAN	2
2026-08-01 05:20:08	MEDIUM	1
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2