webex-bin

maintainer moritzo · 44 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt .deb from Webex's official binaries domain, which is a standard practice for distributing proprietary software; the host, while not a common CDN, is plausibly owned by the vendor, and the checksum ensures integrity, making this a low-risk, typical AUR packaging approach for closed-source applications.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from Webex's official binaries domain, which is a standard practice for distributing proprietary software; the host, while not a common CDN, is plausibly owned by the vendor, and the checksum ensures integrity, making this a low-risk, typical AUR packaging approach for closed-source applications.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:36 source=("$pkgname-$pkgver.deb::https://binaries.webex.com/WebexDesktop-Ubuntu-2004-Gold/20260721114923/Webex.deb"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Moritz Oberjatzas <post@moritz-oberjatzas.eu>
    
      2# Contributor: Alexander Sulfrian <asulfrian@zedat.fu-berlin.de>
    
      3pkgname=webex-bin
    
      4pkgver=46.6.1.35355
    
      5pkgrel=1
    
      6pkgdesc="Webex for Linux"
    
      7arch=('x86_64')
    
      8url="https://www.webex.com/"
    
      9license=('custom')
    
      10depends=('alsa-lib'
    
      11         'at-spi2-atk'
    
      12         'at-spi2-core'
    
      13         'atk'
    
      14         'binutils'
    
      15         'krb5'
    
      16         'libcups'
    
      17         'libnotify'
    
      18         'libpulse'
    
      19         'libsecret'
    
      20         'libxcb'
    
      21         'libxcrypt-compat'
    
      22         'libxkbcommon-x11'
    
      23         'libxss'
    
      24         'mesa'
    
      25         'nspr'
    
      26         'nss'
    
      27         'pango'
    
      28         'systemd-libs'
    
      29         'upower'
    
      30         'wayland'
    
      31         'xcb-util-image'
    
      32         'xcb-util-keysyms'
    
      33         'xcb-util-renderutil'
    
      34         'xcb-util-wm'
    
      35         'xdg-utils')
    
      36source=("$pkgname-$pkgver.deb::https://binaries.webex.com/WebexDesktop-Ubuntu-2004-Gold/20260721114923/Webex.deb"
    
      37        'webex.xml')
    
      38sha256sums=('6f77f3ed9b081f441217341791e7736484c266bf493942aaa87532b8b6252af0'
    
      39            '736a3ee2f30c947493eb01787205fc650f08a664a2c6a4a17c4189b8e2420c5a')
    
      40options=('!strip')
    
      41
    
      42prepare() {
    
      43    mkdir -p "$pkgname-$pkgver"
    
      44    tar -Jxf data.tar.xz -C "$pkgname-$pkgver"
    
      45}
    
      46
    
      47package() {
    
      48    cd "$pkgname-$pkgver"
    
      49    cp -dpr --no-preserve=ownership opt/ "$pkgdir/"
    
      50    rm "$pkgdir/opt/Webex/lib/libstdc++.so.6"
    
      51
    
      52    mkdir -p "$pkgdir/usr/share/applications/"
    
      53    mv "$pkgdir/opt/Webex/bin/webex.desktop" "$pkgdir/usr/share/applications/"
    
      54
    
      55    mkdir -p "$pkgdir/usr/share/mime/packages/"
    
      56    install -m0644 "${srcdir}/webex.xml" "${pkgdir}/usr/share/mime/packages/"
    
      57
    
      58    mkdir -p "$pkgdir/usr/bin/"
    
      59    ln -s "/opt/Webex/bin/CiscoCollabHost" "$pkgdir/usr/bin/webex"
    
      60}
    
      61

Changes since previous scan

--- PKGBUILD @ 2026-06-29 10:34
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,7 +1,7 @@
 # Maintainer: Moritz Oberjatzas <post@moritz-oberjatzas.eu>
 # Contributor: Alexander Sulfrian <asulfrian@zedat.fu-berlin.de>
 pkgname=webex-bin
-pkgver=46.6.1.35236
+pkgver=46.6.1.35355
 pkgrel=1
 pkgdesc="Webex for Linux"
 arch=('x86_64')
@@ -33,9 +33,9 @@
          'xcb-util-renderutil'
          'xcb-util-wm'
          'xdg-utils')
-source=("$pkgname-$pkgver.deb::https://binaries.webex.com/WebexDesktop-Ubuntu-Official-Package/Webex.deb"
+source=("$pkgname-$pkgver.deb::https://binaries.webex.com/WebexDesktop-Ubuntu-2004-Gold/20260721114923/Webex.deb"
         'webex.xml')
-sha256sums=('1faf16972563f6d0ded979ec2868ba5b40ca52930dcafab74103cee61edba76e'
+sha256sums=('6f77f3ed9b081f441217341791e7736484c266bf493942aaa87532b8b6252af0'
             '736a3ee2f30c947493eb01787205fc650f08a664a2c6a4a17c4189b8e2420c5a')
 options=('!strip')
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 11:17:50	MEDIUM	1
2026-06-29 10:34:39	CLEAN	2
2026-06-19 19:07:35	CLEAN	2
2026-06-18 18:55:24	LOW	2
2026-06-18 18:04:49	LOW	2
2026-06-18 17:53:10	LOW	2
2026-06-18 16:11:54	MEDIUM	1