wpa_supplicant-wep2

MEDIUM

maintainer clalos 0 votes scanned 2026-09-09 09:19:26.157521

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:32 "git+https://git.w1.fi/hostap.git?signed#tag=hostap_${pkgver//./_}"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: clalos <clalos at users dot noreply dot github dot com>
    
      2# Contributor: Morten Linderud <foxboron@archlinux.org>
    
      3# Contributor: Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
    
      4# Contributor: Thomas Bächler <thomas@archlinux.org>
    
      5# Contributor: loqs
    
      6
    
      7pkgname=wpa_supplicant-wep2
    
      8pkgver=2.12
    
      9pkgrel=1
    
      10epoch=2
    
      11pkgdesc='A utility providing key negotiation for WPA wireless networks (with WEP support)'
    
      12url='https://w1.fi/wpa_supplicant/'
    
      13arch=(x86_64)
    
      14license=(BSD-3-Clause)
    
      15depends=(
    
      16  glibc
    
      17  libdbus
    
      18  libnl
    
      19  openssl
    
      20  pcsclite
    
      21  readline
    
      22)
    
      23makedepends=(
    
      24  docbook-sgml
    
      25  docbook-utils
    
      26  git
    
      27  perl-sgmls
    
      28)
    
      29provides=('wpa_supplicant')
    
      30conflicts=('wpa_supplicant')
    
      31source=(
    
      32  "git+https://git.w1.fi/hostap.git?signed#tag=hostap_${pkgver//./_}"
    
      33  wpa_supplicant_config
    
      34
    
      35  # More permissive TLS fallback
    
      36  0001-Enable-TLSv1.0-by-default.patch
    
      37
    
      38  # https://salsa.debian.org/debian/wpa/-/commit/13e1d28e4f987a220c546df94df86bb9b2371874
    
      39  0002-Disable-Werror-for-eapol_test.patch
    
      40
    
      41  # https://lists.infradead.org/pipermail/hostap/2022-May/040511.html
    
      42  # https://bugs.archlinux.org/task/76474
    
      43  0003-Allow-legacy-renegotiation-to-fix-PEAP-issues-with-s.patch
    
      44
    
      45  # Unit improvements from Ubuntu
    
      46  0004-Tweak-D-Bus-systemd-service-activation-configuration.patch
    
      47  0005-Add-IgnoreOnIsolate-yes-to-keep-wpa-supplicant-runni.patch
    
      48
    
      49  # More unit improvements from Debian
    
      50  0006-Add-reload-support-to-the-systemd-unit-files.patch
    
      51
    
      52  # https://lists.infradead.org/pipermail/hostap/2022-January/040178.html
    
      53  0007-nl80211-add-extra-ies-only-if-allowed-by-driver.patch
    
      54
    
      55  # Fix authentication regressions with Broadcom brcmfmac fullmac devices.
    
      56  0008-Revert-Mark-authorization-completed-on-driver-indica.patch
    
      57)
    
      58b2sums=('632b255467f1c7b52fccaf217ff471a89a59943b74bef3536f7b5eb6146527dc9e86c67e8c40162a3809f14a97dc94c3a339bc77d356c9ef16cfcf41fcd00208'
    
      59        '3e6782a1d6817696b00542615c71a178c755de403d1f099b3c47ac83725957747a0c94acae3bbd9c9d4ad7caff183724097896772370cac9d55060fc151c9dab'
    
      60        'ec738735c4e820f87082b8bd86f07c458cf9c8137734f65b01cbc88ead66c90d7c362a88465cedaff1eacad3e6d43bc97d846e3d7c22132038b026c28c70a63a'
    
      61        'df0cebf38b8c9c03055db2d5a60d21b64b277165d7238173ef21e7bdbffca883795b9fa517bdfd4ab1eb9d288d1237f339d9e6bdb92d679e662eefe98843e42c'
    
      62        '28ebf66b30a421830470ff191b0ff6ca10a91acc66d36024ccfce0e024f17cd05f136564982cc0fb6b99ec4d791d1e501b6dd7c4130f3cae10a5f8e7e6a350b1'
    
      63        '7175e7aab682370aef1b3358eaa839dcb009e12940aa2b9949c8c3254406341433e84af09d09ad670bf41f5201d979af02095c87a368b76465a952b1be9de049'
    
      64        '6472d571f18c3ee718315888b9c756c4579a4b411e8c6994002f9a79fb0a36fbebe8b3d419af0f9ea881dd1bc439d03dbe3c6d6661e670f16575197c31f0bd7a'
    
      65        'c1ce2e8d6f42cbc8181aeb2bdc19d4a22bff804c18f6e505d8315a294c67c936e90135046812ec37765be3d0f433e31554604deb1d7b160549d7e3284610a22b'
    
      66        'c70aa659f2e5e5cd59d7f5006eda115f780a6bdcb3e006505c9dde560c590d596da368795ee42991d4735b9c8e55eb9412a58dfc17239f518c5ecdb013347cce'
    
      67        '72742bba49ea105419d510f64c3d728d672efa4a91612bfd7d22d5c46d98e0d496ae7713f971074442621f6e87d5623fa33675b6b329278422f50b3a4afdbf1b')
    
      68validpgpkeys=(
    
      69  EC4AA0A991A5F2464582D52D2B6EF432EFC895FA # Jouni Malinen <j@w1.fi>
    
      70)
    
      71
    
      72prepare() {
    
      73  cd hostap
    
      74
    
      75  local src
    
      76  for src in "${source[@]}"; do
    
      77    [[ $src = *.patch ]] || continue
    
      78    echo "Applying patch $src..."
    
      79    git apply -3 < "../$src"
    
      80  done
    
      81
    
      82  cp ../wpa_supplicant_config wpa_supplicant/.config
    
      83}
    
      84
    
      85_make() {
    
      86  local make_options=(
    
      87    BINDIR=/usr/bin
    
      88    LIBDIR=/usr/lib
    
      89    "$@"
    
      90  )
    
      91
    
      92  make "${make_options[@]}"
    
      93}
    
      94
    
      95build() {
    
      96  cd hostap/wpa_supplicant
    
      97
    
      98  _make
    
      99  _make eapol_test
    
      100  _make -C doc/docbook man
    
      101}
    
      102
    
      103package() {
    
      104  cd hostap/wpa_supplicant
    
      105
    
      106  _make DESTDIR="$pkgdir" install
    
      107
    
      108  install -Dm755 eapol_test "$pkgdir/usr/bin/eapol_test"
    
      109
    
      110  install -dm755 "$pkgdir/etc/wpa_supplicant"
    
      111  install -Dm644 wpa_supplicant.conf -t "$pkgdir/usr/share/doc/wpa_supplicant"
    
      112
    
      113  install -Dm644 dbus/fi.w1.wpa_supplicant1.service \
    
      114    -t "$pkgdir/usr/share/dbus-1/system-services"
    
      115
    
      116  install -Dm644 dbus/dbus-wpa_supplicant.conf \
    
      117    "$pkgdir/usr/share/dbus-1/system.d/wpa_supplicant.conf"
    
      118
    
      119  install -Dm644 doc/docbook/*.5 -t "$pkgdir/usr/share/man/man5"
    
      120  install -Dm644 doc/docbook/*.8 -t "$pkgdir/usr/share/man/man8"
    
      121  rm "$pkgdir"/usr/share/man/man8/wpa_{priv,gui}.8
    
      122
    
      123  install -Dm644 systemd/*.service -t "$pkgdir/usr/lib/systemd/system"
    
      124
    
      125  install -Dm644 ../README "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      126}
    
      127
    
      128# vim:set sw=2 sts=-1 et:
    
      129

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-09 09:19
@@ -5,7 +5,7 @@
 # Contributor: loqs
 
 pkgname=wpa_supplicant-wep2
-pkgver=2.11
+pkgver=2.12
 pkgrel=1
 epoch=2
 pkgdesc='A utility providing key negotiation for WPA wireless networks (with WEP support)'
@@ -28,9 +28,8 @@
 )
 provides=('wpa_supplicant')
 conflicts=('wpa_supplicant')
-install=wpa_supplicant.install
 source=(
-  "git+https://w1.fi/hostap.git?signed#tag=hostap_${pkgver//./_}"
+  "git+https://git.w1.fi/hostap.git?signed#tag=hostap_${pkgver//./_}"
   wpa_supplicant_config
 
   # More permissive TLS fallback
@@ -53,19 +52,19 @@
   # https://lists.infradead.org/pipermail/hostap/2022-January/040178.html
   0007-nl80211-add-extra-ies-only-if-allowed-by-driver.patch
 
-  # https://w1.fi/cgit/hostap/commit/?id=c330b5820eefa8e703dbce7278c2a62d9c69166a
-  0008-Send-CTRL-EVENT-SIGNAL-CHANGE-message-to-control-interfaces-only.patch
+  # Fix authentication regressions with Broadcom brcmfmac fullmac devices.
+  0008-Revert-Mark-authorization-completed-on-driver-indica.patch
 )
-b2sums=('163d2e6644902f36b3b5f25e328221fa34495d745801e8d3dce874b05366c81370ef75c8f7e0198e206a3d04c5ea4bb501bf97693fa481e15cf5067d80ab0c1e'
-        'a059f15a21a3bb22b8094f0501ea9b15f4259b53cd3613173b3a945398fef721ca50539f6709eb30ce47eadc717e0264a9c2d6e4957c971aa03bdef6115cdb60'
-        '96b82aaa5315e931424150d47e52f70186e2eea3928a5c97792473b69e8f92463863e8044e073bf940d597a3620f63381bd6996a594c85977785cdce4038f768'
-        'bd00e0f6c04db9c2dc274763b97dace4d886fb105b0a605bb15877ee84e4a93a7b95ab9a0242b4937c748c8e7991e3dddb795ac4c2b0e99be0f5e48098041b70'
-        'aaa7604faf1fede451582c8b981579cc86724a66c783d8368d1c122e0c381b75842d83bd85a982c1d4461d65bc74e62d34768762d15b4005a24a17e1392a109a'
+b2sums=('632b255467f1c7b52fccaf217ff471a89a59943b74bef3536f7b5eb6146527dc9e86c67e8c40162a3809f14a97dc94c3a339bc77d356c9ef16cfcf41fcd00208'
+        '3e6782a1d6817696b00542615c71a178c755de403d1f099b3c47ac83725957747a0c94acae3bbd9c9d4ad7caff183724097896772370cac9d55060fc151c9dab'
+        'ec738735c4e820f87082b8bd86f07c458cf9c8137734f65b01cbc88ead66c90d7c362a88465cedaff1eacad3e6d43bc97d846e3d7c22132038b026c28c70a63a'
+        'df0cebf38b8c9c03055db2d5a60d21b64b277165d7238173ef21e7bdbffca883795b9fa517bdfd4ab1eb9d288d1237f339d9e6bdb92d679e662eefe98843e42c'
+        '28ebf66b30a421830470ff191b0ff6ca10a91acc66d36024ccfce0e024f17cd05f136564982cc0fb6b99ec4d791d1e501b6dd7c4130f3cae10a5f8e7e6a350b1'
         '7175e7aab682370aef1b3358eaa839dcb009e12940aa2b9949c8c3254406341433e84af09d09ad670bf41f5201d979af02095c87a368b76465a952b1be9de049'
         '6472d571f18c3ee718315888b9c756c4579a4b411e8c6994002f9a79fb0a36fbebe8b3d419af0f9ea881dd1bc439d03dbe3c6d6661e670f16575197c31f0bd7a'
         'c1ce2e8d6f42cbc8181aeb2bdc19d4a22bff804c18f6e505d8315a294c67c936e90135046812ec37765be3d0f433e31554604deb1d7b160549d7e3284610a22b'
-        '28bf078147cc2f3395d3f907d6d900c7976dbd9948a9513f1d7ef32a40b89fee55e243c9302d24eda62dc1f813857fa09ae79e6faf52881e463a163acb437380'
-        '821949ae71cc50a0922b922c3dd41027fe32798aa2f2eb466d361dfb867a795126a3cbec7fb1584bf20e9dd55388e44b5f0908d8b2442644f20545b0580f59d4')
+        'c70aa659f2e5e5cd59d7f5006eda115f780a6bdcb3e006505c9dde560c590d596da368795ee42991d4735b9c8e55eb9412a58dfc17239f518c5ecdb013347cce'
+        '72742bba49ea105419d510f64c3d728d672efa4a91612bfd7d22d5c46d98e0d496ae7713f971074442621f6e87d5623fa33675b6b329278422f50b3a4afdbf1b')
 validpgpkeys=(
   EC4AA0A991A5F2464582D52D2B6EF432EFC895FA # Jouni Malinen <j@w1.fi>
 )
@@ -77,11 +76,8 @@
   for src in "${source[@]}"; do
     [[ $src = *.patch ]] || continue
     echo "Applying patch $src..."
-    patch -Np1 < "../$src"
+    git apply -3 < "../$src"
   done
-
-  # Cherry-pick a nullptr crash fix.
-  git cherry-pick -n 015f6a5a0cd1c8b0d40441b9fd9e4c8658bc9493
 
   cp ../wpa_supplicant_config wpa_supplicant/.config
 }

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-09 09:19:26	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-19 18:54:17	Clean	2
2026-06-18 16:11:54	Medium	1