blender-bin

LOW

maintainer HurricanePootis 14 votes scanned 2026-08-27 00:08:17.237226

View on AUR

Why flagged

The source is a prebuilt Blender binary from a university mirror (ocf.berkeley.edu), which is a legitimate and trusted academic institution; while not on a standard host whitelist, the download is verifiable via matching sha256sum and corresponds to official Blender releases, posing minimal supply-chain risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt Blender binary from a university mirror (ocf.berkeley.edu), which is a legitimate and trusted academic institution; while not on a standard host whitelist, the download is verifiable via matching sha256sum and corresponds to official Blender releases, posing minimal supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:71 source=("https://mirrors.ocf.berkeley.edu/blender/release/Blender${pkgver:0:3}/blender-${pkgver}-linux-x64.tar.xz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: HurricanePootis <hurricanepootis@protonmail.com>
    
      2pkgname=blender-bin
    
      3pkgver=5.2.1
    
      4pkgrel=1
    
      5pkgdesc="A fully integrated 3D graphics creation suite (with packaged libraries and python3.11)"
    
      6arch=('x86_64')
    
      7url="https://blender.org"
    
      8license=(
    
      9  Apache-2.0
    
      10  Bitstream-Vera
    
      11  BSD-2-Clause
    
      12  BSD-3-Clause
    
      13  BSL-1.0
    
      14  bzip2-1.0.6
    
      15  FTL
    
      16  GPL-2.0-or-later
    
      17  GPL-3.0-or-later
    
      18  LGPL-2.1-or-later
    
      19  LGPL-3.0-or-later
    
      20  libpng-2.0
    
      21  libtiff
    
      22  MIT-Khronos-old
    
      23  MIT
    
      24  MPL-2.0
    
      25  NCSA
    
      26  OFL-1.1
    
      27  Python-2.0
    
      28  SGI-B-2.0
    
      29  Zlib
    
      30  LicenseRef-Arev-Fonts
    
      31  LicenseRef-ICS
    
      32  LicenseRef-LLVM-exception
    
      33  LicenseRef-TOST-1.0
    
      34)
    
      35depends=('glibc' 'bash' 'hicolor-icon-theme'
    
      36'libx11'
    
      37'libxrender'
    
      38'libxfixes'
    
      39'libxi'
    
      40'libxkbcommon'
    
      41'libxt'
    
      42'libstdc++'
    
      43'libgcc'
    
      44'libxcb'
    
      45'libxext'
    
      46'libsm'
    
      47'libice'
    
      48'libglvnd'
    
      49'libxau'
    
      50'libxdmcp'
    
      51'util-linux-libs'
    
      52'ffmpeg'
    
      53'mesa'
    
      54'spirv-tools'
    
      55'llvm'
    
      56'systemd-libs'
    
      57'libdrm'
    
      58'wayland'
    
      59'pulse-native-provider'
    
      60'icu'
    
      61'vulkan-driver'
    
      62'opengl-driver')
    
      63optdepends=('cuda: Cycles renderer CUDA support'
    
      64            'intel-compute-runtime: Cycles renderer Intel OneAPI support'
    
      65	    'level-zero-loader: Cycles renderer Intel OneAPI support'
    
      66	    'intel-level-zero-raytracing-support: Intel OneAPI Raytracing Support'
    
      67            'libdecor: wayland support'
    
      68	    'hip-runtime-amd: HIP renderer AMD support')
    
      69provides=('blender')
    
      70conflicts=('blender')
    
      71source=("https://mirrors.ocf.berkeley.edu/blender/release/Blender${pkgver:0:3}/blender-${pkgver}-linux-x64.tar.xz"
    
      72	"x-blender.xml")
    
      73sha256sums=('a31f524fa99a527d3d52b7f5aaa68c34e1a19d5a1c9473f79c5cc610fd5b10e9'
    
      74            '230fc11e49d647215f4735117761d887756823ee1c8fab08987218fd037de75c')
    
      75validpgpkeys=()
    
      76
    
      77package() {
    
      78	cd "$srcdir/blender-$pkgver-linux-x64"
    
      79	mkdir -p "${pkgdir}/usr/lib/${pkgname}/"
    
      80	install -Dm755 {blender,blender-thumbnailer} "${pkgdir}/usr/lib/blender-bin/"
    
      81	install -Dm644 blender-symbolic.svg "${pkgdir}/usr/share/icons/hicolor/symbolic/apps/blender-symbolic.svg"
    
      82	install -Dm644 blender.svg "${pkgdir}/usr/share/icons/hicolor/scalable/apps/blender.svg"
    
      83	install -Dm644 copyright.txt "${pkgdir}/usr/share/licenses/$pkgname/copyright.txt"
    
      84	install -Dm644 readme.html "${pkgdir}/usr/share/doc/$pkgname/readme.html"
    
      85	install -Dm644 blender.desktop "${pkgdir}/usr/share/applications/blender.desktop"
    
      86	install -Dm644 "$srcdir/x-blender.xml" "${pkgdir}/usr/share/mime/application/x-blender.xml"
    
      87	
    
      88	cp -a -r "${pkgver:0:3}" lib "${pkgdir}/usr/lib/${pkgname}"
    
      89	cp -a -r -T license "${pkgdir}/usr/share/licenses/${pkgname}"
    
      90	pushd "${pkgdir}/usr/lib/${pkgname}/lib"
    
      91	for _file in *.so*;
    
      92	do
    
      93		chmod 755 "$_file"
    
      94	done
    
      95	popd
    
      96
    
      97	install -Dm755 blender-launcher "$pkgdir/usr/bin/blender"
    
      98	install -Dm755 blender-system-info.sh "$pkgdir/usr/bin/blender-system-info"
    
      99	ln -s "/usr/lib/$pkgname/blender-thumbnailer" "$pkgdir/usr/bin/blender-thumbnailer"
    
      100	sed -i 's/\$(dirname "\$(readlink -f "\$0")")/\/usr\/lib\/blender-bin/g' "$pkgdir/usr/bin/blender"
    
      101	sed -i 's/BASE_DIR=\$(dirname "\$0")/BASE_DIR=\/usr\/lib\/blender-bin/g' "$pkgdir/usr/bin/blender-system-info"
    
      102}
    
      103

Changes since previous scan

--- PKGBUILD @ 2026-07-15 00:09
+++ PKGBUILD @ 2026-08-27 00:08
@@ -1,6 +1,6 @@
 # Maintainer: HurricanePootis <hurricanepootis@protonmail.com>
 pkgname=blender-bin
-pkgver=5.1.2
+pkgver=5.2.1
 pkgrel=1
 pkgdesc="A fully integrated 3D graphics creation suite (with packaged libraries and python3.11)"
 arch=('x86_64')
@@ -16,6 +16,7 @@
   GPL-2.0-or-later
   GPL-3.0-or-later
   LGPL-2.1-or-later
+  LGPL-3.0-or-later
   libpng-2.0
   libtiff
   MIT-Khronos-old
@@ -67,9 +68,9 @@
 	    'hip-runtime-amd: HIP renderer AMD support')
 provides=('blender')
 conflicts=('blender')
-source=("https://download.blender.org/release/Blender${pkgver:0:3}/blender-${pkgver}-linux-x64.tar.xz"
+source=("https://mirrors.ocf.berkeley.edu/blender/release/Blender${pkgver:0:3}/blender-${pkgver}-linux-x64.tar.xz"
 	"x-blender.xml")
-sha256sums=('aaccb355f50183979b698bcce7467103a76261b5fa59f4972295842662a285fb'
+sha256sums=('a31f524fa99a527d3d52b7f5aaa68c34e1a19d5a1c9473f79c5cc610fd5b10e9'
             '230fc11e49d647215f4735117761d887756823ee1c8fab08987218fd037de75c')
 validpgpkeys=()
 
@@ -87,24 +88,16 @@
 	cp -a -r "${pkgver:0:3}" lib "${pkgdir}/usr/lib/${pkgname}"
 	cp -a -r -T license "${pkgdir}/usr/share/licenses/${pkgname}"
 	pushd "${pkgdir}/usr/lib/${pkgname}/lib"
-	for file in *.so*;
+	for _file in *.so*;
 	do
-		chmod 755 "$file"
-	done
-	popd
-	pushd "${pkgdir}/usr/lib/${pkgname}/lib/mesa"
-	for file in *.so*;
-	do
-		chmod 755 "$file"
+		chmod 755 "$_file"
 	done
 	popd
 
 	install -Dm755 blender-launcher "$pkgdir/usr/bin/blender"
-	install -Dm755 blender-softwaregl "$pkgdir/usr/bin/blender-softwaregl"
 	install -Dm755 blender-system-info.sh "$pkgdir/usr/bin/blender-system-info"
 	ln -s "/usr/lib/$pkgname/blender-thumbnailer" "$pkgdir/usr/bin/blender-thumbnailer"
 	sed -i 's/\$(dirname "\$(readlink -f "\$0")")/\/usr\/lib\/blender-bin/g' "$pkgdir/usr/bin/blender"
-	sed -i 's/BF_DIST_BIN=\$(dirname "\$0")/BF_DIST_BIN=\/usr\/lib\/blender-bin/g' "$pkgdir/usr/bin/blender-softwaregl"
 	sed -i 's/BASE_DIR=\$(dirname "\$0")/BASE_DIR=\/usr\/lib\/blender-bin/g' "$pkgdir/usr/bin/blender-system-info"
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-27 00:08:17	Low	2
2026-08-26 23:31:22	Medium	1
2026-07-15 00:09:25	Clean	2
2026-07-14 21:46:03	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1