crossover

LOW

maintainer roadrunner 231 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads a prebuilt .deb from the official vendor's domain (codeweavers.com), which is plausibly the project's own release infrastructure; while the host is not on a standard whitelist, it is not swappable by an unrelated third party, and the checksum is verified.

Triggered rules

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt .deb from the official vendor's domain (codeweavers.com), which is plausibly the project's own release infrastructure; while the host is not on a standard whitelist, it is not swappable by an unrelated third party, and the checksum is verified.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:18 source=("https://media.codeweavers.com/pub/${pkgname}/cxlinux/demo/${pkgname}_${pkgver}-${_pkgdebrel}.deb")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Erik Fleischer <erik [at] erlenweg [dot] de>
    
      2# Contributor: Cian Mc Govern <cian [at] cianmcgovern [dot] com>
    
      3# Contributor: Roland Singer <roland [at] manjaro [dot] org>
    
      4# Contributor: TheBenj <thebenj88 [at] gmail [dot] com>
    
      5# Contributor: Philipp 'TamCore' B. <philipp [at] tamcore [dot] eu>
    
      6
    
      7pkgname=crossover
    
      8pkgver=26.3.0
    
      9pkgrel=1
    
      10_pkgdebrel=1
    
      11pkgdesc="Run Windows Programs on Linux"
    
      12arch=('i686' 'x86_64')
    
      13url="https://www.codeweavers.com/crossover"
    
      14license=('custom:CrossOver Linux License Grant')
    
      15makedepends=('tar')
    
      16install=${pkgname}.install
    
      17
    
      18source=("https://media.codeweavers.com/pub/${pkgname}/cxlinux/demo/${pkgname}_${pkgver}-${_pkgdebrel}.deb")
    
      19sha256sums=('34e2521d8cf0af0128844e1c3cfd498e9bced711d85ef7164142127c376b4282')
    
      20
    
      21depends=( 
    
      22    'python' 'desktop-file-utils' 'python-gobject' 'vte3' 'python-cairo'
    
      23)
    
      24
    
      25optdepends=(
    
      26    'unzip: required to install Guild Wars, automatic installer extraction'
    
      27)
    
      28
    
      29depends_i686=(
    
      30    'glibc>=2.11' 'libice' 'libsm' 'libx11' 'libxext' 'libxi' 'freetype2'
    
      31    'libpng' 'zlib' 'lcms2' 'libgl' 'libxcursor' 'libxrandr' 'glu'
    
      32)
    
      33
    
      34optdepends_i686=(
    
      35    'alsa-lib: This is the preferred way to provide audio support to Windows applications.'
    
      36    "fontconfig: Makes it possible to find and use the system's TrueType fonts. This is strongly recommended for office-type applications."
    
      37    'gnutls: This is needed by applications that perform encryption or check online certificates.'
    
      38    'gsm: Lets Windows applications use the GSM codec for audio compression and decompression.'
    
      39    'libcups: Needed to print to printers managed by the CUPS system, which is most likely the case. It is strongly recommended for office-type applications.'
    
      40    'libdbus: This is needed for Windows applications to automatically detect CD-ROM and USB key insertion.'
    
      41    'libexif: Some applications need to parse EXIF and read their data tags.'
    
      42    'libgphoto2: Lets Windows applications access digital cameras.'
    
      43    'libldap: Lets Windows applications access LDAP servers.'
    
      44    'libpulse: A featureful, general-purpose sound server (client library).'
    
      45    'libxcomposite: This is needed for most CAD-like applications and some games.'
    
      46    "libxinerama: This is needed if your display spans multiple screens. If your computer has a single screen then you don't need it."
    
      47    'libxml2: This library makes it possible for Windows applications read and write XML files.'
    
      48    'libxslt: This library lets Windows applications perform queries and transformations on XML files.'
    
      49    'libxxf86vm: This is needed to let games perform some gamma adjustments (essentially to adjust the brightness).'  
    
      50    'libxxf86dga: X11 Direct Graphics Access extension library.' 
    
      51    'mpg123: Needed by some Windows applications to play MP3 files.'
    
      52    'nss-mdns: Host name resolution via mDNS'
    
      53    'ocl-icd: OpenCL ICD Bindings'
    
      54    'openal: Provides audio support to Windows applications.' 
    
      55    'openssl: This library provides support for secure Internet communication.'
    
      56    'sane: Lets Windows applications access scanners.'
    
      57    'v4l-utils: Lets Windows applications access video devices.' 
    
      58)
    
      59
    
      60depends_x86_64=(
    
      61    'lib32-glibc>=2.11' 'lib32-libice' 'lib32-libsm' 'lib32-libx11'
    
      62    'lib32-libxext' 'lib32-libxi' 'lib32-freetype2' 'lib32-libpng' 'lib32-zlib'
    
      63    'lib32-lcms2' 'lib32-libgl' 'lib32-libxcursor' 'lib32-libxrandr'
    
      64    'lib32-glu'
    
      65)
    
      66
    
      67optdepends_x86_64=(
    
      68    'lib32-alsa-lib: This is the preferred way to provide audio support to Windows applications.'
    
      69    "lib32-fontconfig: Makes it possible to find and use the system's TrueType fonts. This is strongly recommended for office-type applications."
    
      70    'lib32-libcups: Needed to print to printers managed by the CUPS system, which is most likely the case. It is strongly recommended for office-type applications.'
    
      71    'lib32-libdbus: This is needed for Windows applications to automatically detect CD-ROM and USB key insertion.'
    
      72    'lib32-libexif: (aur) Some applications need to parse EXIF and read their data tags.'
    
      73    'lib32-libldap: Lets Windows applications access LDAP servers.'
    
      74    'lib32-libpulse: A featureful, general-purpose sound server (client library).'
    
      75    'lib32-gnutls: This is needed by applications that perform encryption or check online certificates.'
    
      76    'lib32-libxcomposite: This is needed for most CAD-like applications and some games.'
    
      77    "lib32-libxinerama: This is needed if your display spans multiple screens. If your computer has a single screen then you don't need it."
    
      78    'lib32-libxml2: This library makes it possible for Windows applications read and write XML files.'
    
      79    'lib32-libxslt: This library lets Windows applications perform queries and transformations on XML files.' 
    
      80    'lib32-libxxf86vm: This is needed to let games perform some gamma adjustments (essentially to adjust the brightness).'  
    
      81    'lib32-libxxf86dga: X11 Direct Graphics Access extension library.' 
    
      82    'lib32-mpg123: Needed by some Windows applications to play MP3 files.'
    
      83    'lib32-nss-mdns: (aur) host name resolution via mDNS'
    
      84    'lib32-openal: Provides audio support to Windows applications.' 
    
      85    'lib32-openssl: This library provides support for secure Internet communication.'
    
      86    'lib32-v4l-utils: Lets Windows applications access video devices.' 
    
      87)
    
      88
    
      89package() {
    
      90    cd ${srcdir}
    
      91
    
      92    ar -p crossover_${pkgver}-${_pkgdebrel}.deb data.tar.xz | tar Jxf - -C "${pkgdir}" || return 1
    
      93    if [[ "${CARCH}" = 'i686' ]]; then
    
      94        rm -f ${pkgdir}/opt/cxoffice/lib/nsplugin-linux64.so
    
      95    fi
    
      96
    
      97    #remove symlink and create real directory
    
      98    rm ${pkgdir}/opt/cxoffice/doc 
    
      99    mkdir ${pkgdir}/opt/cxoffice/doc 
    
      100
    
      101    mv ${pkgdir}/usr/share/doc/crossover/* ${pkgdir}/opt/cxoffice/doc
    
      102
    
      103    rm -r "${pkgdir}/usr"
    
      104    sed -e 's!;;"MenuRoot" = ""!"MenuRoot" = "Windows Games"!' \
    
      105        -e 's!;;"MenuStrip" = ""!"MenuStrip" = "1"!' \
    
      106        -i ${pkgdir}/opt/cxoffice/share/crossover/bottle_data/cxbottle.conf
    
      107
    
      108    mkdir -p ${pkgdir}/usr/bin
    
      109    ln -s /opt/cxoffice/bin/crossover ${pkgdir}/usr/bin/crossover
    
      110    ln -s /opt/cxoffice/bin/cxsetup ${pkgdir}/usr/bin/cxsetup
    
      111
    
      112    mkdir -p ${pkgdir}/etc/profile.d
    
      113    echo '[ -d /opt/cxoffice/bin ] && export PATH="${PATH}:/opt/cxoffice/bin"' > ${pkgdir}/etc/profile.d/cxoffice.sh
    
      114    echo '[ -d /opt/cxoffice/bin ] && setenv PATH ${PATH}:/opt/cxoffice/bin' > ${pkgdir}/etc/profile.d/cxoffice.csh
    
      115    chmod 755 ${pkgdir}/etc/profile.d/cxoffice.sh ${pkgdir}/etc/profile.d/cxoffice.csh
    
      116
    
      117    # Fix Auto update error
    
      118    install -m 644 -D ${pkgdir}/opt/cxoffice/share/crossover/data/cxoffice.conf ${pkgdir}/opt/cxoffice/etc/cxoffice.conf
    
      119    sed -e 's!;;"PrivateShortcutDirs" = ""!"PrivateShortcutDirs" = "${HOME}/bin:${CX_ROOT}/bin"!' \
    
      120        -e 's!;;"PrivateLinuxNSPluginDirs" = ""!"PrivateLinuxNSPluginDirs" = "${MOZ_PLUGIN_PATH}"!' \
    
      121        -e 's!;;"PrivateLinux64NSPluginDirs" = ""!"PrivateLinux64NSPluginDirs" = "${MOZ_PLUGIN_PATH}"!' \
    
      122        -e 's!;;"ProductPackage" = ""!"ProductPackage" = "Converted from .deb to pacman."!' \
    
      123        -i ${pkgdir}/opt/cxoffice/etc/cxoffice.conf
    
      124
    
      125    # place license in correct directory
    
      126    install -D -m644 ${pkgdir}/opt/cxoffice/doc/license.txt.gz ${pkgdir}/usr/share/licenses/${pkgname}/license.txt.gz
    
      127}
    
      128

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2