webalizer
LOW
maintainer victor3d
17 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds from source hosted on a maintainer's personal domain, which is not whitelisted but plausibly legitimate for an AUR package; the sources are verified via checksums and consist of standard tarballs and a patch, with no evidence of obfuscated or executable payloads.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on a maintainer's personal domain, which is not whitelisted but plausibly legitimate for an AUR package; the sources are verified via checksums and consist of standard tarballs and a patch, with no evidence of obfuscated or executable payloads.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
"http://dev.victor3d.com.br/webalizer/${pkgname}-${_pkgver}-src.tgz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Victor Perevozchikov <victor3d@yandex.ru>
2
# Contributor: Brian Bidulock <bidulock@openss7.org>
3
# Contributor: Thore Bödecker <me [at] foxxx0 [dot] de>
4
# Contributor: Robert Knauer <robert@privatdemail.net>
5
# Contributor: megadriver <megadriver at gmx dot com>
6
# Contributor: Jamie Nguyen <jamie AT tomoyolinux.co.uk>
7
# Contributor: Andrea Scarpino <andrea@archlinux.org>
8
9
pkgname=webalizer
10
_geodbver=20210401
11
pkgver=2.23.08.${_geodbver}
12
_pkgver=2.23-08
13
pkgrel=5
14
pkgdesc="A web server log file analysis program producing HTML reports"
15
arch=('i686' 'x86_64' 'armv7h')
16
url="http://www.webalizer.com/"
17
license=('GPL')
18
depends=('db' 'gd' 'geoip' 'bzip2')
19
install="${pkgname}.install"
20
source=(
21
"http://dev.victor3d.com.br/webalizer/${pkgname}-${_pkgver}-src.tgz"
22
"http://dev.victor3d.com.br/webalizer/${pkgname}-geodb-${_geodbver}.tgz"
23
"http://dev.victor3d.com.br/webalizer/${pkgname}-flags.tgz"
24
"webalizer-2.23-08-memmove.patch"
25
)
26
sha512sums=('219cae51d2e938e2d9327ce52c9c814e7436c821b05cb528dc88f548bdfbd7a6ad69c235b078d6af194c3a1d38029fde7dde9e8b81ad6fd93c236ca76a49811b'
27
'b90aa2fdef14dde132eb866c44f8132e16dacbdf06790701ca6d8b7f54ec6a60756a7f47218d2635536d3d939fd4795dcb68ae1ca64157cc7d9dcaed5de7dfa0'
28
'bb23d68fed2f130c8a752d1b219974e44e3f32dd40ecf6b236cdbede58d4bfbb15a8901e5ee76fbfae1ce1bd3d3664b28d0bd79b85e15949ff420ec262be21c1'
29
'538b7cf51303581df7d1710073d55563fda4c64841a6d7dac8d47e0b037975b9ad4ad4973db5807226480ecea0e0783c445400bd53b60d0d7308559946ce3b4a')
30
31
prepare() {
32
cd "${srcdir}/${pkgname}-${_pkgver}"
33
# fix history corruption, see https://bugs.launchpad.net/ubuntu/+source/webalizer/+bug/1399615
34
patch -p1 -i "${srcdir}/webalizer-2.23-08-memmove.patch"
35
}
36
37
build() {
38
cd "${srcdir}/${pkgname}-${_pkgver}"
39
export CFLAGS="$CFLAGS -fcommon"
40
./configure \
41
--prefix=/usr \
42
--sysconfdir=/etc \
43
--datarootdir=/usr/share \
44
--mandir=/usr/share/man \
45
--enable-bz2 \
46
--enable-geoip
47
make
48
}
49
50
package() {
51
cd "${srcdir}/${pkgname}-${_pkgver}"
52
make DESTDIR="${pkgdir}" install
53
# install geolocation database (GeoDB)
54
install -D -m644 "${srcdir}/GeoDB.dat" "${pkgdir}/usr/share/GeoDB/GeoDB.dat"
55
# install flags
56
cd "${srcdir}/flags"
57
for _i in *.png; do
58
install -D -m644 "${_i}" "${pkgdir}/usr/share/${pkgname}/flags/${_i}"
59
done
60
}
61
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |