wolf

maintainer Slash · 29 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The PKGBUILD downloads and executes a prebuilt binary installer (wolf-linux-1.41b.x86.run) and a prebuilt shared library (libstdc++-libc6.2-2.so.3) from a personal/unofficial host (aur.slashbunny.com). Both files are executed or loaded at runtime: the .run file is chmod +x'd and run directly during the build, and the .so.3 file is installed into /opt/wolf/ where it will be loaded by the game binary. SHA256 checksums are present, which mitigates substitution risk somewhat, but the host is not an official id Software or ioquake3 mirror — it is a personal AUR-associated host. If the host were compromised and the checksums updated (or if a user skips verification), arbitrary code could execute during the build. The underlying game (Return to Castle Wolfenstein) is a legitimate commercial title and the package requires retail game files, so there is no piracy concern. This is a genuine medium-severity supply-chain risk: executed binary and loaded library from an unofficial personal host, not a false positive.

Triggered rules

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 'https://aur.slashbunny.com/wolf/libstdc++-libc6.2-2.so.3' \

MEDIUM AI review llm_review

An AI model (anthropic/claude-4.6-sonnet-20260217) reviewed this and agrees it is MEDIUM (confidence 75%): The PKGBUILD downloads and executes a prebuilt binary installer (wolf-linux-1.41b.x86.run) and a prebuilt shared library (libstdc++-libc6.2-2.so.3) from a personal/unofficial host (aur.slashbunny.com). Both files are executed or loaded at runtime: the .run file is chmod +x'd and run directly during the build, and the .so.3 file is installed into /opt/wolf/ where it will be loaded by the game binary. SHA256 checksums are present, which mitigates substitution risk somewhat, but the host is not an official id Software or ioquake3 mirror — it is a personal AUR-associated host. If the host were compromised and the checksums updated (or if a user skips verification), arbitrary code could execute during the build. The underlying game (Return to Castle Wolfenstein) is a legitimate commercial title and the package requires retail game files, so there is no piracy concern. This is a genuine medium-severity supply-chain risk: executed binary and loaded library from an unofficial personal host, not a false positive.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Slash <demodevil5[at]yahoo[dot]com>
    
      2
    
      3pkgname=wolf
    
      4pkgver=1.41b
    
      5pkgrel=5
    
      6pkgdesc="Return to Castle Wolfenstein is a single and multiplayer first person shooter. You need the retail game files to play."
    
      7arch=('i686' 'x86_64')
    
      8url="https://web.archive.org/web/20190805003933/http://zerowing.idsoftware.com/linux/wolf/"
    
      9license=('custom')
    
      10depends_i686=('libgl' 'libxext')
    
      11depends_x86_64=('lib32-libgl' 'lib32-libxext')
    
      12optdepends=('xdg-utils: for opening urls'
    
      13            'et-sdl-sound: for sdl/alsa support')
    
      14install='wolf.install'
    
      15source=('wolfsp.desktop' 'wolfmp.desktop' \
    
      16'wolf.launcher' 'wolfsp.launcher' 'wolfmp.launcher' 'wolfded.launcher' \
    
      17'https://aur.slashbunny.com/wolf/libstdc++-libc6.2-2.so.3' \
    
      18"https://aur.slashbunny.com/wolf/wolf-linux-${pkgver}.x86.run")
    
      19sha256sums=('20adb799ec0e1adef579acc02ecbd63486dc9bfe90ef48a72e1ea9049d017558'
    
      20            'f8dc16a01bf3c5fc7d3914315ffec570f5ae4f148fccffdd05326a589dabf060'
    
      21            '7fca88d5c2ca1ad9d5f782f7a7c092246f91112db8918a032234f827de123a7e'
    
      22            'ed85d6984e73a33e153269d964e7077eea7333aa6894737248119374bda02c65'
    
      23            '7fca88d5c2ca1ad9d5f782f7a7c092246f91112db8918a032234f827de123a7e'
    
      24            'b9fc003949be3b5b5265aa94611df087f0aa11c4036050cdb14ee33f5548b776'
    
      25            'cadd9a1d2bf0f991f0a0f8977c76701cbcc9a3e8ffeaba2838c98969fee340e6'
    
      26            '2921425c1b429147c1bc6f0c6a8664bec502ae86a2d6bccfaa1162f75dce89f3')
    
      27
    
      28package() {
    
      29    # Create Destination Directories
    
      30    install -d "${pkgdir}/opt/wolf/" "${pkgdir}/usr/bin/" "${srcdir}/wolf/"
    
      31
    
      32    # Set Install Files to Executable
    
      33    chmod +x "${srcdir}/wolf-linux-${pkgver}.x86.run"
    
      34
    
      35    # Extract Linux Game Files
    
      36    cd "${srcdir}/wolf/"
    
      37    "${srcdir}/wolf-linux-${pkgver}.x86.run" --noexec --tar xf --group=root --owner=root
    
      38
    
      39    # Move Binaries to Main Directory
    
      40    cp "${srcdir}/wolf/bin/Linux/x86/"{wolf.x86,wolfded.x86,wolfsp.x86} \
    
      41        "${srcdir}/wolf/"
    
      42
    
      43    # Remove Unneeded Files and Directories
    
      44    rm -r "${srcdir}/wolf/"{bin,setup.data,setup.sh,CHANGES~}
    
      45
    
      46    # Fix Permissions (Owner, Directory, and File Permissions)
    
      47    /bin/chown -R root:root "${srcdir}/wolf/"
    
      48    /bin/chmod 0755 "${srcdir}/wolf/Docs/PunkBuster"
    
      49    /bin/chmod 0644 "${srcdir}/wolf/"{Docs/{PunkBuster/{admins/index.htm,players/index.htm},Update_readme.htm},RTCW-README-1.4.txt}
    
      50
    
      51    # Move Data to Package Directory
    
      52    mv "${srcdir}/wolf/" "${pkgdir}/opt/"
    
      53
    
      54    # Install Launcher Script (Single Player Client)
    
      55    install -D -m 755 "${srcdir}/wolfsp.launcher" \
    
      56        "${pkgdir}/usr/bin/wolfsp"
    
      57
    
      58    # Install Launcher Script (Multiplayer Client)
    
      59    install -D -m 755 "${srcdir}/wolf.launcher" \
    
      60        "${pkgdir}/usr/bin/wolf"
    
      61
    
      62    # Install Launcher Script (Multiplayer Client)
    
      63    install -D -m 755 "${srcdir}/wolfmp.launcher" \
    
      64        "${pkgdir}/usr/bin/wolfmp"
    
      65
    
      66    # Install Launcher Script (Multipler Server)
    
      67    install -D -m 755 "${srcdir}/wolfded.launcher" \
    
      68        "${pkgdir}/usr/bin/wolfded"
    
      69
    
      70    # Install old libstdc++ library needed for Wolf to run
    
      71    install -D -m 644 "${srcdir}/libstdc++-libc6.2-2.so.3"  \
    
      72        "${pkgdir}/opt/wolf/libstdc++-libc6.2-2.so.3"
    
      73
    
      74    # Install License (Return to Castle Wolfenstein)
    
      75    install -D -m 644 "${pkgdir}/opt/wolf/Docs/License.txt" \
    
      76        "${pkgdir}/usr/share/licenses/${pkgname}/License.txt"
    
      77
    
      78    # Install License (PunkBuster)
    
      79    install -D -m 644 "${pkgdir}/opt/wolf/pb/PB_EULA.txt" \
    
      80        "${pkgdir}/usr/share/licenses/${pkgname}/PB_EULA.txt"
    
      81
    
      82    # Install Desktop File (Single Player)
    
      83    install -D -m 644 "${srcdir}/wolfsp.desktop" \
    
      84        "${pkgdir}/usr/share/applications/wolfsp.desktop"
    
      85
    
      86    # Install Desktop File (Multi Player)
    
      87    install -D -m 644 "${srcdir}/wolfmp.desktop" \
    
      88        "${pkgdir}/usr/share/applications/wolfmp.desktop"
    
      89
    
      90    # Install Icon File (Single Player)
    
      91    install -D -m 644 "${pkgdir}/opt/wolf/WolfSP.xpm" \
    
      92        "${pkgdir}/usr/share/pixmaps/WolfSP.xpm"
    
      93
    
      94    # Install Icon File (Multi Player)
    
      95    install -D -m 644 "${pkgdir}/opt/wolf/WolfMP.xpm" \
    
      96        "${pkgdir}/usr/share/pixmaps/WolfMP.xpm"
    
      97
    
      98    # Remove Licenses from Data Directory
    
      99    rm "${pkgdir}/opt/wolf/Docs/License.txt"
    
      100    rm "${pkgdir}/opt/wolf/pb/PB_EULA.txt"
    
      101
    
      102    # Use a more modern way for opening urls
    
      103    rm "${pkgdir}/opt/wolf/openurl.sh"
    
      104    ln -sf /usr/bin/xdg-open "${pkgdir}/opt/wolf/openurl.sh"
    
      105}
    
      106
    
      107

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	2
2026-08-02 00:16:08	MEDIUM	2
2026-08-01 00:11:18	MEDIUM	2
2026-07-31 00:14:10	MEDIUM	2
2026-07-30 00:17:23	MEDIUM	2
2026-07-29 00:25:53	MEDIUM	2
2026-07-28 00:07:28	MEDIUM	2
2026-07-27 00:24:32	MEDIUM	2
2026-07-26 00:07:32	MEDIUM	2
2026-07-25 00:13:44	MEDIUM	2
2026-07-24 00:02:28	MEDIUM	2
2026-07-23 00:14:47	MEDIUM	2
2026-07-22 00:29:32	MEDIUM	2
2026-07-21 00:24:15	MEDIUM	2
2026-07-20 00:19:49	MEDIUM	2
2026-07-19 00:17:08	MEDIUM	2
2026-07-18 00:14:48	MEDIUM	2
2026-07-17 00:06:16	MEDIUM	2
2026-07-16 00:05:41	MEDIUM	2
2026-07-15 00:09:25	MEDIUM	2