blender-bin

LOW

maintainer HurricanePootis 15 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The source is a prebuilt Blender binary from mirror.blender.org, an official and project-controlled host, making it a legitimate and expected source despite not being on a standard whitelist; the package installs only the official binary and associated data without executing untrusted code.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt Blender binary from mirror.blender.org, an official and project-controlled host, making it a legitimate and expected source despite not being on a standard whitelist; the package installs only the official binary and associated data without executing untrusted code.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:73 source=("https://mirror.blender.org/release/Blender${pkgver:0:3}/blender-${pkgver}-linux-x64.tar.xz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: HurricanePootis <hurricanepootis@protonmail.com>
    
      2pkgname=blender-bin
    
      3pkgver=5.2.2
    
      4pkgrel=2
    
      5pkgdesc="A fully integrated 3D graphics creation suite (with packaged libraries and python3.11)"
    
      6arch=('x86_64')
    
      7url="https://blender.org"
    
      8license=(
    
      9  Apache-2.0
    
      10  Bitstream-Vera
    
      11  BSD-2-Clause
    
      12  BSD-3-Clause
    
      13  BSL-1.0
    
      14  bzip2-1.0.6
    
      15  FTL
    
      16  GPL-2.0-or-later
    
      17  GPL-3.0-or-later
    
      18  LGPL-2.1-or-later
    
      19  LGPL-3.0-or-later
    
      20  libpng-2.0
    
      21  libtiff
    
      22  MIT-Khronos-old
    
      23  MIT
    
      24  MPL-2.0
    
      25  NCSA
    
      26  OFL-1.1
    
      27  Python-2.0
    
      28  SGI-B-2.0
    
      29  Zlib
    
      30  LicenseRef-Arev-Fonts
    
      31  LicenseRef-ICS
    
      32  LicenseRef-LLVM-exception
    
      33  LicenseRef-TOST-1.0
    
      34)
    
      35depends=('glibc' 'bash' 'hicolor-icon-theme'
    
      36'libx11'
    
      37'libxrender'
    
      38'libxfixes'
    
      39'libxi'
    
      40'libxkbcommon'
    
      41'libxt'
    
      42'libstdc++'
    
      43'libgcc'
    
      44'libxcb'
    
      45'libxext'
    
      46'libsm'
    
      47'libice'
    
      48'libglvnd'
    
      49'libxau'
    
      50'libxdmcp'
    
      51'util-linux-libs'
    
      52'ffmpeg'
    
      53'mesa'
    
      54'spirv-tools'
    
      55'llvm'
    
      56'systemd-libs'
    
      57'libdrm'
    
      58'wayland'
    
      59'pulse-native-provider'
    
      60'icu'
    
      61'vulkan-driver'
    
      62'opengl-driver'
    
      63'shared-mime-info')
    
      64optdepends=('cuda: Cycles renderer CUDA support'
    
      65            'intel-compute-runtime: Cycles renderer Intel OneAPI support'
    
      66	    'level-zero-loader: Cycles renderer Intel OneAPI support'
    
      67	    'intel-level-zero-raytracing-support: Intel OneAPI Raytracing Support'
    
      68            'libdecor: wayland support'
    
      69	    'hip-runtime-amd: HIP renderer AMD support')
    
      70provides=('blender')
    
      71conflicts=('blender')
    
      72install="${pkgname}.install"
    
      73source=("https://mirror.blender.org/release/Blender${pkgver:0:3}/blender-${pkgver}-linux-x64.tar.xz")
    
      74sha256sums=('84098912789dc450e95697c4184fb8a90acbe5111c2ba4aede3fecb57806a168'
    
      75            '230fc11e49d647215f4735117761d887756823ee1c8fab08987218fd037de75c')
    
      76validpgpkeys=()
    
      77
    
      78package() {
    
      79	cd "$srcdir/blender-$pkgver-linux-x64"
    
      80	mkdir -p "${pkgdir}/usr/lib/${pkgname}/"
    
      81	install -Dm755 {blender,blender-thumbnailer} "${pkgdir}/usr/lib/blender-bin/"
    
      82	install -Dm644 blender-symbolic.svg "${pkgdir}/usr/share/icons/hicolor/symbolic/apps/blender-symbolic.svg"
    
      83	install -Dm644 blender.svg "${pkgdir}/usr/share/icons/hicolor/scalable/apps/blender.svg"
    
      84	install -Dm644 copyright.txt "${pkgdir}/usr/share/licenses/$pkgname/copyright.txt"
    
      85	install -Dm644 readme.html "${pkgdir}/usr/share/doc/$pkgname/readme.html"
    
      86	install -Dm644 blender.desktop "${pkgdir}/usr/share/applications/blender.desktop"
    
      87	
    
      88	cp -a -r "${pkgver:0:3}" lib "${pkgdir}/usr/lib/${pkgname}"
    
      89	cp -a -r -T license "${pkgdir}/usr/share/licenses/${pkgname}"
    
      90	pushd "${pkgdir}/usr/lib/${pkgname}/lib"
    
      91	for _file in *.so*;
    
      92	do
    
      93		chmod 755 "$_file"
    
      94	done
    
      95	popd
    
      96
    
      97	install -Dm755 blender-launcher "$pkgdir/usr/bin/blender"
    
      98	install -Dm755 blender-system-info.sh "$pkgdir/usr/bin/blender-system-info"
    
      99	ln -s "/usr/lib/$pkgname/blender-thumbnailer" "$pkgdir/usr/bin/blender-thumbnailer"
    
      100	sed -i 's/\$(dirname "\$(readlink -f "\$0")")/\/usr\/lib\/blender-bin/g' "$pkgdir/usr/bin/blender"
    
      101	sed -i 's/BASE_DIR=\$(dirname "\$0")/BASE_DIR=\/usr\/lib\/blender-bin/g' "$pkgdir/usr/bin/blender-system-info"
    
      102}
    
      103

Changes since previous scan

--- PKGBUILD @ 2026-10-07 00:21
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,7 +1,7 @@
 # Maintainer: HurricanePootis <hurricanepootis@protonmail.com>
 pkgname=blender-bin
-pkgver=5.2.1
-pkgrel=1
+pkgver=5.2.2
+pkgrel=2
 pkgdesc="A fully integrated 3D graphics creation suite (with packaged libraries and python3.11)"
 arch=('x86_64')
 url="https://blender.org"
@@ -59,7 +59,8 @@
 'pulse-native-provider'
 'icu'
 'vulkan-driver'
-'opengl-driver')
+'opengl-driver'
+'shared-mime-info')
 optdepends=('cuda: Cycles renderer CUDA support'
             'intel-compute-runtime: Cycles renderer Intel OneAPI support'
 	    'level-zero-loader: Cycles renderer Intel OneAPI support'
@@ -68,9 +69,9 @@
 	    'hip-runtime-amd: HIP renderer AMD support')
 provides=('blender')
 conflicts=('blender')
-source=("https://mirrors.ocf.berkeley.edu/blender/release/Blender${pkgver:0:3}/blender-${pkgver}-linux-x64.tar.xz"
-	"x-blender.xml")
-sha256sums=('a31f524fa99a527d3d52b7f5aaa68c34e1a19d5a1c9473f79c5cc610fd5b10e9'
+install="${pkgname}.install"
+source=("https://mirror.blender.org/release/Blender${pkgver:0:3}/blender-${pkgver}-linux-x64.tar.xz")
+sha256sums=('84098912789dc450e95697c4184fb8a90acbe5111c2ba4aede3fecb57806a168'
             '230fc11e49d647215f4735117761d887756823ee1c8fab08987218fd037de75c')
 validpgpkeys=()
 
@@ -83,7 +84,6 @@
 	install -Dm644 copyright.txt "${pkgdir}/usr/share/licenses/$pkgname/copyright.txt"
 	install -Dm644 readme.html "${pkgdir}/usr/share/doc/$pkgname/readme.html"
 	install -Dm644 blender.desktop "${pkgdir}/usr/share/applications/blender.desktop"
-	install -Dm644 "$srcdir/x-blender.xml" "${pkgdir}/usr/share/mime/application/x-blender.xml"
 	
 	cp -a -r "${pkgver:0:3}" lib "${pkgdir}/usr/lib/${pkgname}"
 	cp -a -r -T license "${pkgdir}/usr/share/licenses/${pkgname}"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 04:07:28	Medium	1
2026-10-08 00:28:03	Low	2
2026-10-08 00:07:12	Medium	1
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	2
2026-10-05 00:08:03	Low	2
2026-10-04 00:18:08	Low	2
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2