blender-4.2-bin
maintainer notfood
· 1 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads Blender binaries from the official builder.blender.org domain, which is the project's legitimate build infrastructure; the untrusted host flag is a false positive as builder.blender.org is authoritative for Blender daily builds, and the source is a prebuilt binary intended for direct use, not a hidden payload.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads Blender binaries from the official builder.blender.org domain, which is the project's legitimate build infrastructure; the untrusted host flag is a false positive as builder.blender.org is authoritative for Blender daily builds, and the source is a prebuilt binary intended for direct use, not a hidden payload.
2 higher static findings superseded - not the current verdict (shown for transparency)
MEDIUM
External download from an untrusted host, not in source=()
external_download_not_in_source
curl/wget fetches a URL on a non-allowlisted host that is not part of source=(), so it is not checksum-verified by makepkg.
-
PKGBUILD:40
wget -nc "https://builder.blender.org/download/daily/$_full"
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:18
source=("$_webpage::https://builder.blender.org/download/")
PKGBUILD
2 offending line(s) highlighted
1
# Maintainer: NF <notfood.dev at gmail dot com>
2
# Contributor: Oliver Mangold <o.mangold@gmail.com>
3
# Contributor: Adam Brunnmeier <adam.brunnmeier@gmail.com>
4
pkgname=blender-4.2-bin
5
pkgver=4.2.240710.a2ba481c7110
6
pkgrel=1
7
pkgdesc="A fully integrated 3D graphics creation suite"
8
arch=('x86_64')
9
url="https://www.blender.org"
10
license=('GPL')
11
# dependencies copied from https://www.archlinux.org/packages/community/x86_64/blender/
12
depends=('libxi' 'python' 'libxrender' 'libglvnd' 'hicolor-icon-theme')
13
makedepends=('wget')
14
optdepends=('cuda: cycles renderer cuda support' 'python311: use system python')
15
# use different url per version to trigger rebuilds when package updates.
16
# using $pkgver instead of $_inc is not possible (see comments on AUR-website)
17
_webpage="daily.$(date '+%y%m%d').html"
18
source=("$_webpage::https://builder.blender.org/download/")
19
md5sums=('SKIP')
20
21
_setvars() {
22
cd "$srcdir"
23
_upstreamversion=$(echo $pkgname | cut -d '-' -f2)
24
local regex="blender-${_upstreamversion}[^-]*[^\+]+\+([^.]+).([^-]+)-linux.x86_64-release.tar.xz" && [[ $(cat $_webpage) =~ $regex ]]
25
_full=${BASH_REMATCH[0]}
26
_branch=${BASH_REMATCH[1]}
27
_commit=${BASH_REMATCH[2]}
28
local regex="$_commit-linux.*?([0-9]{4}-[0-9]+-[0-9]+T[0-9]+:[0-9]+:[0-9]+\+[0-9]+:[0-9]+)" && [[ $(cat $_webpage) =~ $regex ]]
29
_date=$(date --date="${BASH_REMATCH[1]//,}" "+%y%m%d")
30
}
31
32
pkgver() {
33
_setvars
34
printf "$_upstreamversion.$_date.$_commit"
35
}
36
37
build() {
38
_setvars
39
cd "$srcdir"
40
wget -nc "https://builder.blender.org/download/daily/$_full"
41
tar -xJ -f "$_full"
42
cd "${_full%.tar.xz}"
43
# Remove included python installation if the right version is available. (requires 3.11 as 2024-07-24)
44
[ -f /usr/bin/python3.11 ] && rm -rf "$_upstreamversion/python"
45
sed -i "s/=blender/=blender-$_upstreamversion/" blender.desktop
46
sed -i "s/=Blender/=Blender-$_upstreamversion/" blender.desktop
47
#for f in datafiles/icons/*/apps/blender.* ; do chmod 644 $f && mv $f "${f%.*}-$_upstreamversion.${f#*.}" ; done
48
echo -n "[Thumbnailer Entry]
49
TryExec=blender-$_upstreamversion-thumbnailer
50
Exec=blender-$_upstreamversion-thumbnailer %u %o
51
MimeType=application/x-blender;
52
" > blender.thumbnailer
53
echo -e "#!/bin/bash\nLD_LIBRARY_PATH=/usr/share/blender/$_upstreamversion/lib exec /usr/share/blender/blender-$_upstreamversion \$@" > blender-$_upstreamversion
54
echo -e "#!/bin/bash\nLD_LIBRARY_PATH=/usr/share/blender/$_upstreamversion/lib exec /usr/share/blender/blender-softwaregl-$_upstreamversion \$@" > blender-$_upstreamversion-softwaregl
55
}
56
57
package() {
58
_setvars
59
cd "$srcdir/${_full%.tar.xz}"
60
install -Dm644 blender.desktop "$pkgdir/usr/share/applications/blender-$_upstreamversion.desktop"
61
install -Dm644 blender.thumbnailer "$pkgdir/usr/share/thumbnailers/blender-$_upstreamversion.thumbnailer"
62
mkdir -p "$pkgdir/usr/share/icons/hicolor/scalable/apps"
63
install -Dm644 blender.svg "$pkgdir/usr/share/icons/hicolor/scalable/apps/blender-$_upstreamversion.svg"
64
mkdir -p "$pkgdir/usr/share/icons/hicolor/symbolic/apps"
65
install -Dm644 blender-symbolic.svg "$pkgdir/usr/share/icons/hicolor/symbolic/apps/blender-$_upstreamversion-symbolic.svg"
66
mkdir -p "$pkgdir/usr/share/blender/"
67
cp -r $_upstreamversion "$pkgdir/usr/share/blender/$_upstreamversion"
68
cp -r lib "$pkgdir/usr/share/blender/$_upstreamversion/"
69
# binaries path workaround
70
install -Dm755 blender "$pkgdir/usr/share/blender/blender-$_upstreamversion"
71
install -Dm755 blender-$_upstreamversion "$pkgdir/usr/bin/blender-$_upstreamversion"
72
install -Dm755 blender-softwaregl "$pkgdir/usr/share/blender/blender-softwaregl-$_upstreamversion"
73
install -Dm755 blender-$_upstreamversion-softwaregl "$pkgdir/usr/bin/blender-$_upstreamversion-softwaregl"
74
install -Dm755 blender-thumbnailer "$pkgdir/usr/bin/blender-$_upstreamversion-thumbnailer"
75
}
76
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 3 |
| 2026-08-02 00:16:08 | LOW | 3 |
| 2026-08-01 00:11:18 | LOW | 3 |
| 2026-07-31 00:14:10 | LOW | 3 |
| 2026-07-30 00:17:23 | LOW | 3 |
| 2026-07-29 00:25:53 | LOW | 3 |
| 2026-07-28 00:07:28 | LOW | 3 |
| 2026-07-27 00:24:32 | LOW | 3 |
| 2026-07-26 00:07:32 | LOW | 3 |
| 2026-07-25 00:13:44 | LOW | 3 |
| 2026-07-24 00:02:28 | LOW | 3 |
| 2026-07-23 00:14:47 | LOW | 3 |
| 2026-07-22 00:29:32 | LOW | 3 |
| 2026-07-21 00:24:15 | LOW | 3 |
| 2026-07-20 00:19:49 | LOW | 3 |
| 2026-07-19 00:17:08 | LOW | 3 |
| 2026-07-18 00:14:48 | LOW | 3 |
| 2026-07-17 00:06:16 | LOW | 3 |
| 2026-07-16 00:05:41 | LOW | 3 |
| 2026-07-15 00:09:25 | LOW | 3 |