veeam-6 (MEDIUM) - AURWatch

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 source=("https://repository.veeam.com/backup/linux/agent/rpm/el/10/x86_64/veeam-$pkgver-1.el10.x86_64.rpm"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Yegor Pomortsev <yegor@pomortsev.com>
    
      2# Contributors: krnlsoft <krnlsoft 4t hotmail d0t it>
    
      3# Contributors: theokonos
    
      4# Contributors: Ted Sadler
    
      5# Contributors: dekart811
    
      6# Contributors: CodeImp
    
      7
    
      8_pkgbase=veeam
    
      9pkgname=${_pkgbase}-6
    
      10pkgver=6.3.2.1501
    
      11pkgrel=1
    
      12pkgdesc="Veeam Agent for Linux (v6)"
    
      13arch=(x86_64)
    
      14url=https://www.veeam.com/products/downloads.html
    
      15install=${_pkgbase}.install
    
      16license=(custom:veeam)
    
      17depends=(ncurses lvm2 fuse mlocate veeamblksnap-6-dkms)
    
      18conflicts=(veeam veeam-nosnap)
    
      19options=(!strip)
    
      20source=("https://repository.veeam.com/backup/linux/agent/rpm/el/10/x86_64/veeam-$pkgver-1.el10.x86_64.rpm"
    
      21        "https://repository.veeam.com/backup/linux/agent/rpm/el/10/x86_64/veeam-libs-$pkgver-1.x86_64.rpm")
    
      22sha256sums=('89b246bcfc5291db717f9453196651dddc91cf70e5c89b4de8dc909f3204c23c'
    
      23            '0b07370918f7a5cc5ff85bfb94c8867eaef97f950f7f0f51837e23952ede221a')
    
      24noextract=("veeam-$pkgver-1.el10.x86_64.rpm"
    
      25           "veeam-libs-$pkgver-1.x86_64.rpm")
    
      26backup=('etc/veeam/veeam.ini'
    
      27        'usr/share/veeam/lpb_scheme.sql'
    
      28        'usr/share/veeam/db_upgrade.sql'
    
      29        'usr/share/veeam/db_scheme.sql')
    
      30
    
      31package() {
    
      32  bsdtar -xf "${_pkgbase}-$pkgver-1.el10.x86_64.rpm" -C "$pkgdir" -s /sbin/bin/ -s '|lib/systemd|usr/lib/systemd|'
    
      33  bsdtar -xf "${_pkgbase}-libs-$pkgver-1.x86_64.rpm" -C "$pkgdir" -s /sbin/bin/ -s '|lib/systemd|usr/lib/systemd|'
    
      34
    
      35  sed -i -e 's|/var/run|/run|' -e 's|/sbin|/bin|' "$pkgdir"/usr/lib/systemd/system/veeamservice.service
    
      36
    
      37  rm -rf "$pkgdir"/usr/lib/.build-id/
    
      38
    
      39  install -dm755 "$pkgdir"/usr/share/licenses/${_pkgbase}/
    
      40  install -Dm644 "$pkgdir"/usr/share/veeam/EULA "$pkgdir"/usr/share/licenses/${_pkgbase}/EULA
    
      41  install -Dm644 "$pkgdir"/usr/share/veeam/3rdPartyNotices.txt "$pkgdir"/usr/share/licenses/${_pkgbase}/3rdPartyNotices.txt
    
      42}
    
      43

Changes since previous scan

--- PKGBUILD @ 2026-08-17 00:18
+++ PKGBUILD @ 2026-11-03 00:04
@@ -7,7 +7,7 @@
 
 _pkgbase=veeam
 pkgname=${_pkgbase}-6
-pkgver=6.3.2.1405
+pkgver=6.3.2.1501
 pkgrel=1
 pkgdesc="Veeam Agent for Linux (v6)"
 arch=(x86_64)
@@ -16,10 +16,11 @@
 license=(custom:veeam)
 depends=(ncurses lvm2 fuse mlocate veeamblksnap-6-dkms)
 conflicts=(veeam veeam-nosnap)
+options=(!strip)
 source=("https://repository.veeam.com/backup/linux/agent/rpm/el/10/x86_64/veeam-$pkgver-1.el10.x86_64.rpm"
         "https://repository.veeam.com/backup/linux/agent/rpm/el/10/x86_64/veeam-libs-$pkgver-1.x86_64.rpm")
-sha256sums=('78d11f935331c543c542f381787de676b6e4ffacb1422e9e01a1f0070caf2064'
-            '5bc470c3810505901aaacb041aa3ed34d1b9a67c9770c960bd49ade8a2729093')
+sha256sums=('89b246bcfc5291db717f9453196651dddc91cf70e5c89b4de8dc909f3204c23c'
+            '0b07370918f7a5cc5ff85bfb94c8867eaef97f950f7f0f51837e23952ede221a')
 noextract=("veeam-$pkgver-1.el10.x86_64.rpm"
            "veeam-libs-$pkgver-1.x86_64.rpm")
 backup=('etc/veeam/veeam.ini'

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 00:04:01	Medium	1
2026-08-17 00:18:29	Clean	2
2026-08-16 09:32:18	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-19 18:54:17	Clean	2
2026-06-18 16:11:54	Medium	1