crossover

maintainer roadrunner · 231 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads a prebuilt .deb from the official vendor's domain (codeweavers.com), which is plausibly the project's own release infrastructure; while the host is not on a standard whitelist, it is not swappable by an unrelated third party, and the checksum is verified.

Triggered rules

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt .deb from the official vendor's domain (codeweavers.com), which is plausibly the project's own release infrastructure; while the host is not on a standard whitelist, it is not swappable by an unrelated third party, and the checksum is verified.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:18 source=("https://media.codeweavers.com/pub/${pkgname}/cxlinux/demo/${pkgname}_${pkgver}-${_pkgdebrel}.deb")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Erik Fleischer <erik [at] erlenweg [dot] de>
2# Contributor: Cian Mc Govern <cian [at] cianmcgovern [dot] com>
3# Contributor: Roland Singer <roland [at] manjaro [dot] org>
4# Contributor: TheBenj <thebenj88 [at] gmail [dot] com>
5# Contributor: Philipp 'TamCore' B. <philipp [at] tamcore [dot] eu>
6
7pkgname=crossover
8pkgver=26.3.0
9pkgrel=1
10_pkgdebrel=1
11pkgdesc="Run Windows Programs on Linux"
12arch=('i686' 'x86_64')
13url="https://www.codeweavers.com/crossover"
14license=('custom:CrossOver Linux License Grant')
15makedepends=('tar')
16install=${pkgname}.install
17
18source=("https://media.codeweavers.com/pub/${pkgname}/cxlinux/demo/${pkgname}_${pkgver}-${_pkgdebrel}.deb")
19sha256sums=('34e2521d8cf0af0128844e1c3cfd498e9bced711d85ef7164142127c376b4282')
20
21depends=(
22 'python' 'desktop-file-utils' 'python-gobject' 'vte3' 'python-cairo'
23)
24
25optdepends=(
26 'unzip: required to install Guild Wars, automatic installer extraction'
27)
28
29depends_i686=(
30 'glibc>=2.11' 'libice' 'libsm' 'libx11' 'libxext' 'libxi' 'freetype2'
31 'libpng' 'zlib' 'lcms2' 'libgl' 'libxcursor' 'libxrandr' 'glu'
32)
33
34optdepends_i686=(
35 'alsa-lib: This is the preferred way to provide audio support to Windows applications.'
36 "fontconfig: Makes it possible to find and use the system's TrueType fonts. This is strongly recommended for office-type applications."
37 'gnutls: This is needed by applications that perform encryption or check online certificates.'
38 'gsm: Lets Windows applications use the GSM codec for audio compression and decompression.'
39 'libcups: Needed to print to printers managed by the CUPS system, which is most likely the case. It is strongly recommended for office-type applications.'
40 'libdbus: This is needed for Windows applications to automatically detect CD-ROM and USB key insertion.'
41 'libexif: Some applications need to parse EXIF and read their data tags.'
42 'libgphoto2: Lets Windows applications access digital cameras.'
43 'libldap: Lets Windows applications access LDAP servers.'
44 'libpulse: A featureful, general-purpose sound server (client library).'
45 'libxcomposite: This is needed for most CAD-like applications and some games.'
46 "libxinerama: This is needed if your display spans multiple screens. If your computer has a single screen then you don't need it."
47 'libxml2: This library makes it possible for Windows applications read and write XML files.'
48 'libxslt: This library lets Windows applications perform queries and transformations on XML files.'
49 'libxxf86vm: This is needed to let games perform some gamma adjustments (essentially to adjust the brightness).'
50 'libxxf86dga: X11 Direct Graphics Access extension library.'
51 'mpg123: Needed by some Windows applications to play MP3 files.'
52 'nss-mdns: Host name resolution via mDNS'
53 'ocl-icd: OpenCL ICD Bindings'
54 'openal: Provides audio support to Windows applications.'
55 'openssl: This library provides support for secure Internet communication.'
56 'sane: Lets Windows applications access scanners.'
57 'v4l-utils: Lets Windows applications access video devices.'
58)
59
60depends_x86_64=(
61 'lib32-glibc>=2.11' 'lib32-libice' 'lib32-libsm' 'lib32-libx11'
62 'lib32-libxext' 'lib32-libxi' 'lib32-freetype2' 'lib32-libpng' 'lib32-zlib'
63 'lib32-lcms2' 'lib32-libgl' 'lib32-libxcursor' 'lib32-libxrandr'
64 'lib32-glu'
65)
66
67optdepends_x86_64=(
68 'lib32-alsa-lib: This is the preferred way to provide audio support to Windows applications.'
69 "lib32-fontconfig: Makes it possible to find and use the system's TrueType fonts. This is strongly recommended for office-type applications."
70 'lib32-libcups: Needed to print to printers managed by the CUPS system, which is most likely the case. It is strongly recommended for office-type applications.'
71 'lib32-libdbus: This is needed for Windows applications to automatically detect CD-ROM and USB key insertion.'
72 'lib32-libexif: (aur) Some applications need to parse EXIF and read their data tags.'
73 'lib32-libldap: Lets Windows applications access LDAP servers.'
74 'lib32-libpulse: A featureful, general-purpose sound server (client library).'
75 'lib32-gnutls: This is needed by applications that perform encryption or check online certificates.'
76 'lib32-libxcomposite: This is needed for most CAD-like applications and some games.'
77 "lib32-libxinerama: This is needed if your display spans multiple screens. If your computer has a single screen then you don't need it."
78 'lib32-libxml2: This library makes it possible for Windows applications read and write XML files.'
79 'lib32-libxslt: This library lets Windows applications perform queries and transformations on XML files.'
80 'lib32-libxxf86vm: This is needed to let games perform some gamma adjustments (essentially to adjust the brightness).'
81 'lib32-libxxf86dga: X11 Direct Graphics Access extension library.'
82 'lib32-mpg123: Needed by some Windows applications to play MP3 files.'
83 'lib32-nss-mdns: (aur) host name resolution via mDNS'
84 'lib32-openal: Provides audio support to Windows applications.'
85 'lib32-openssl: This library provides support for secure Internet communication.'
86 'lib32-v4l-utils: Lets Windows applications access video devices.'
87)
88
89package() {
90 cd ${srcdir}
91
92 ar -p crossover_${pkgver}-${_pkgdebrel}.deb data.tar.xz | tar Jxf - -C "${pkgdir}" || return 1
93 if [[ "${CARCH}" = 'i686' ]]; then
94 rm -f ${pkgdir}/opt/cxoffice/lib/nsplugin-linux64.so
95 fi
96
97 #remove symlink and create real directory
98 rm ${pkgdir}/opt/cxoffice/doc
99 mkdir ${pkgdir}/opt/cxoffice/doc
100
101 mv ${pkgdir}/usr/share/doc/crossover/* ${pkgdir}/opt/cxoffice/doc
102
103 rm -r "${pkgdir}/usr"
104 sed -e 's!;;"MenuRoot" = ""!"MenuRoot" = "Windows Games"!' \
105 -e 's!;;"MenuStrip" = ""!"MenuStrip" = "1"!' \
106 -i ${pkgdir}/opt/cxoffice/share/crossover/bottle_data/cxbottle.conf
107
108 mkdir -p ${pkgdir}/usr/bin
109 ln -s /opt/cxoffice/bin/crossover ${pkgdir}/usr/bin/crossover
110 ln -s /opt/cxoffice/bin/cxsetup ${pkgdir}/usr/bin/cxsetup
111
112 mkdir -p ${pkgdir}/etc/profile.d
113 echo '[ -d /opt/cxoffice/bin ] && export PATH="${PATH}:/opt/cxoffice/bin"' > ${pkgdir}/etc/profile.d/cxoffice.sh
114 echo '[ -d /opt/cxoffice/bin ] && setenv PATH ${PATH}:/opt/cxoffice/bin' > ${pkgdir}/etc/profile.d/cxoffice.csh
115 chmod 755 ${pkgdir}/etc/profile.d/cxoffice.sh ${pkgdir}/etc/profile.d/cxoffice.csh
116
117 # Fix Auto update error
118 install -m 644 -D ${pkgdir}/opt/cxoffice/share/crossover/data/cxoffice.conf ${pkgdir}/opt/cxoffice/etc/cxoffice.conf
119 sed -e 's!;;"PrivateShortcutDirs" = ""!"PrivateShortcutDirs" = "${HOME}/bin:${CX_ROOT}/bin"!' \
120 -e 's!;;"PrivateLinuxNSPluginDirs" = ""!"PrivateLinuxNSPluginDirs" = "${MOZ_PLUGIN_PATH}"!' \
121 -e 's!;;"PrivateLinux64NSPluginDirs" = ""!"PrivateLinux64NSPluginDirs" = "${MOZ_PLUGIN_PATH}"!' \
122 -e 's!;;"ProductPackage" = ""!"ProductPackage" = "Converted from .deb to pacman."!' \
123 -i ${pkgdir}/opt/cxoffice/etc/cxoffice.conf
124
125 # place license in correct directory
126 install -D -m644 ${pkgdir}/opt/cxoffice/doc/license.txt.gz ${pkgdir}/usr/share/licenses/${pkgname}/license.txt.gz
127}
128

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-08-03 00:08
@@ -5,7 +5,7 @@
# Contributor: Philipp 'TamCore' B. <philipp [at] tamcore [dot] eu>
pkgname=crossover
-pkgver=26.2.0
+pkgver=26.3.0
pkgrel=1
_pkgdebrel=1
pkgdesc="Run Windows Programs on Linux"
@@ -16,7 +16,7 @@
install=${pkgname}.install
source=("https://media.codeweavers.com/pub/${pkgname}/cxlinux/demo/${pkgname}_${pkgver}-${_pkgdebrel}.deb")
-sha256sums=('b33bafd2ff142398a55974da20416f7a81d69b200ee1378e3f55eea9cf5b9bcb')
+sha256sums=('34e2521d8cf0af0128844e1c3cfd498e9bced711d85ef7164142127c376b4282')
depends=(
'python' 'desktop-file-utils' 'python-gobject' 'vte3' 'python-cairo'

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 17:18:23 LOW 2
2026-06-19 19:07:35 CLEAN 2
2026-06-18 18:04:49 CLEAN 2
2026-06-18 16:11:54 LOW 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion