python-fangfrisch 1.9.3-2
Freshclam like utility that allows downloading unofficial virus definition files
config.json file.
/v1/packages/python-fangfrisch/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 3674c7a9b078head | verified | 2026-11-05 16:10 | 5 |
| 27b66dd134aa | verified | 2026-11-05 16:10 | 6 |
| 03540b2ac91b | verified | 2026-11-05 16:10 | 6 |
Head findings
command-substitution
in
fangfrisch-has-news.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
die "Usage: $(basename "$0") {directory}"command-substitution
in
fangfrisch-has-news.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
echo -e "\n### $(basename "$ni"):\n"
command-substitution
in
fangfrisch-has-news.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
t=$(mktemp)
privilege-escalation
in
fangfrisch.installPrivilege escalation tool 'sudo' is invoked inside the package's .install scriptlet - scriptlets already run as root under alpm's control, so the call is redundant rather than an escalation.
sudo -u clamav /usr/bin/fangfrisch --conf /etc/fangfrisch/fangfrisch.conf initdb
privilege-escalation
in
fangfrisch.installPrivilege escalation tool 'sudo' is invoked inside the package's .install scriptlet - scriptlets already run as root under alpm's control, so the call is redundant rather than an escalation.
sudo systemctl enable fangfrisch.timer
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.