yozo-office

maintainer zxp19821005 · 13 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The package downloads a prebuilt .deb from a non-standard host (dl.yozosoft.com) which is not on the whitelist; while likely the official vendor, the unverifiable nature of a binary artifact from a non-standard domain poses a moderate supply-chain risk if the host were compromised or spoofed.

Triggered rules

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:25 source=("${pkgbase}-${pkgver}.deb::https://dl.yozosoft.com/yozo/project/file/${_relver}/${pkgbase}_${pkgver}_amd64.deb")

MEDIUM AI review llm_review

An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt .deb from a non-standard host (dl.yozosoft.com) which is not on the whitelist; while likely the official vendor, the unverifiable nature of a binary artifact from a non-standard domain poses a moderate supply-chain risk if the host were compromised or spoofed.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: zxp19821005 <zxp19821005 at 163 dot com>
    
      2# Contributor: WhriedPlanck
    
      3# Contributor: Felix Golatofski <contact@xdfr.de>
    
      4# Contributor: h0cheung <unknow>
    
      5# Contributor: WhiredPlanck <unknow>
    
      6# Contributor: heavysink <unknow>
    
      7pkgbase=yozo-office
    
      8_pkgname=Yozo_Office
    
      9pkgname=(
    
      10    "${pkgbase}"
    
      11    "${pkgbase}-fonts"
    
      12    "${pkgbase}-templates"
    
      13)
    
      14pkgver=9.0.6589.141ZH.S1
    
      15_relver=20251224_134417_869690
    
      16pkgrel=1
    
      17pkgdesc="Yozo Office 2024 - An MS Office compatible office suite"
    
      18url="https://www.yozosoft.com/product-officelinux.html"
    
      19options=(
    
      20    '!strip'
    
      21)
    
      22install=yozo-office.install
    
      23license=('LicenseRef-custom')
    
      24arch=('x86_64')
    
      25source=("${pkgbase}-${pkgver}.deb::https://dl.yozosoft.com/yozo/project/file/${_relver}/${pkgbase}_${pkgver}_amd64.deb")
    
      26sha256sums=('495375f2d122fb362ca7deb971f800a6090993deb77dbb4ae86624dcae098567')
    
      27prepare() {
    
      28    cd "${srcdir}"
    
      29    # Extracting data.tar.xz ...
    
      30    bsdtar -xf "${srcdir}/data."*
    
      31    # Fixing directory permissions ...
    
      32    find "${srcdir}" -type d -exec chmod -v 755 {} +
    
      33    # Removing unnecessary files ...
    
      34    rm -rf "${srcdir}/etc/"{xdg,yozoXpack}
    
      35    rm -rf "${srcdir}/opt/apps/${_pkgname}/"{Upgrade,uninstall}
    
      36    rm -rf "${srcdir}/usr/share/applications/yozo-uninstall.desktop"
    
      37}
    
      38package_yozo-office() {
    
      39    depends=(
    
      40        'freetype2'
    
      41        'sane'
    
      42        'libvlc'
    
      43        'libxt'
    
      44        'libsm'
    
      45        'libxkbcommon'
    
      46        'alsa-lib'
    
      47        'libglvnd'
    
      48        'libwebp'
    
      49        'gtk3'
    
      50        'mesa'
    
      51        'libmng'
    
      52        'nspr'
    
      53        'twolame'
    
      54        'libice'
    
      55        'nss'
    
      56        'libtiff5'
    
      57        'sdl12-compat'
    
      58        'lsof'
    
      59    )
    
      60    optdepends=(
    
      61        "${pkgbase}-fonts: built-in fonts"
    
      62        "${pkgbase}-templates: built-in document templates"
    
      63    )
    
      64    # Installing main binaries ...
    
      65    cp -a "${srcdir}"/{usr,opt,etc} "${pkgdir}"
    
      66    rm -rf "${pkgdir}/usr/share/fonts"
    
      67    rm -rf "${pkgdir}/opt/apps/${_pkgname}/Templates"
    
      68    # Fixing permissions of binaries in /usr/bin ...
    
      69    find "${pkgdir}/usr/bin" -type f -exec chmod -v 755 {} +
    
      70    # Replacing libfreetype.so.6 with system's to adapt for harfbuzz 5.x
    
      71    #rm -rf "${pkgdir}/opt/Yozosoft/${_pkgname}/Jre/lib/amd64/libfreetype.so.6"
    
      72    #ln -sf "/usr/lib/libfreetype.so.6" "${pkgdir}/opt/Yozosoft/${_pkgname}/Jre/lib/amd64/libfreetype.so.6"
    
      73    # Installing licenses of thirdparties ...
    
      74    install -Dm644 "${srcdir}/opt/apps/${_pkgname}/thirdpartylicensereadme.txt" -t "${pkgdir}/usr/share/licenses/${pkgname}"
    
      75}
    
      76package_yozo-office-fonts() {
    
      77    pkgdesc="Built-in fonts of Yozo Office 2024"
    
      78    # Installing built-in fonts of Yozo Office 2024 ...
    
      79    install -Dm644 "${srcdir}/usr/share/fonts/truetype/yozo/"* -t "${pkgdir}/usr/share/fonts/truetype/yozo"
    
      80    install -Dm644 "${srcdir}/opt/apps/${_pkgname}/thirdpartylicensereadme.txt" -t "${pkgdir}/usr/share/licenses/${pkgname}"
    
      81}
    
      82package_yozo-office-templates() {
    
      83    pkgdesc="Built-in document templates of Yozo Office 2024"
    
      84    # Installing built-in document templates of Yozo Office 2024 ...
    
      85    install -Dm755 -d "${pkgdir}/opt/Yozosoft/${_pkgname}"
    
      86    cp -a "${srcdir}/opt/apps/${_pkgname}/Templates" "${pkgdir}/opt/Yozosoft/${_pkgname}"
    
      87    install -Dm644 "${srcdir}/opt/apps/${_pkgname}/thirdpartylicensereadme.txt" -t "${pkgdir}/usr/share/licenses/${pkgname}"
    
      88}
    
      89

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	2
2026-08-02 00:16:08	MEDIUM	2
2026-08-01 00:11:18	MEDIUM	2
2026-07-31 00:14:10	MEDIUM	2
2026-07-30 00:17:23	MEDIUM	2
2026-07-29 00:25:53	MEDIUM	2
2026-07-28 00:07:28	MEDIUM	2
2026-07-27 00:24:32	MEDIUM	2
2026-07-26 00:07:32	MEDIUM	2
2026-07-25 00:13:44	MEDIUM	2
2026-07-24 00:02:28	MEDIUM	2
2026-07-23 00:14:47	MEDIUM	2
2026-07-22 00:29:32	MEDIUM	2
2026-07-21 00:24:15	MEDIUM	2
2026-07-20 00:19:49	MEDIUM	2
2026-07-19 00:17:08	MEDIUM	2
2026-07-18 00:14:48	MEDIUM	2
2026-07-17 00:06:16	MEDIUM	2
2026-07-16 00:05:41	MEDIUM	2
2026-07-15 00:09:25	MEDIUM	2