intel-opencl

maintainer dakataca · 28 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a prebuilt binary archive from an archived Intel download link via web.archive.org, which is non-standard but plausibly the project's official legacy release; the package installs only data and libraries, not executing arbitrary code, and the worst case of a swapped source is limited to supply-chain risk of the binary itself, not active exploitation.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt binary archive from an archived Intel download link via web.archive.org, which is non-standard but plausibly the project's official legacy release; the package installs only data and libraries, not executing arbitrary code, and the worst case of a swapped source is limited to supply-chain risk of the binary itself, not active exploitation.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 source=("${pkgname}-${pkgver}-linux64.zip::https://web.archive.org/web/20190526190814if_/https://registrationcenter-download.intel.com/akdlm/irc_nas/11396/SRB5.0_linux64.zip")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: dakataca <danieldakataca@gmail.com>
    
      2# Contributor: Ivan Shapovalov <intelfx@intelfx.name>
    
      3# Contributor: Francois Menning <f.menning@protonmail.com>
    
      4# Contributor: ava1ar <mail@ava1ar.me>
    
      5# Contributor: Duong Pham <dthpham@gmail.com>
    
      6# Contributor: Eric Quackenbush <mail@ericquackenbush.com>
    
      7# Contributor: Wei-Ning Huang <aitjcize@gmail.com>
    
      8
    
      9pkgname=intel-opencl
    
      10_pkgver=5.0-63503
    
      11pkgver="${_pkgver/-/.r}"
    
      12pkgrel=2
    
      13pkgdesc="Legacy OpenCL(TM) driver 1.2 or 2.0, for Intel graphics from Ivy Bridge GPU model (gen 7), to Haswell (gen 7.5) for Linux (pre-Broadwell)"
    
      14arch=('x86_64')
    
      15url="https://software.intel.com/en-us/articles/legacy-opencl-drivers#latest_linux_driver"
    
      16license=('custom:intel')
    
      17depends=('zlib' 'libdrm')
    
      18optdepends=('intel-opencl-sdk: Intel SDK for OpenCL Applications')
    
      19provides=('opencl-driver')
    
      20source=("${pkgname}-${pkgver}-linux64.zip::https://web.archive.org/web/20190526190814if_/https://registrationcenter-download.intel.com/akdlm/irc_nas/11396/SRB5.0_linux64.zip")
    
      21#source=("$pkgname-$pkgver-linux64.zip")
    
      22sha256sums=('a3989a7a00f216b1a50bad37dc49629c3f7ce65104a2ca665e59d8c699bf7443') #updpkgsums to generate.
    
      23
    
      24# Paquetes internos:
    
      25_package_internal=("intel-opencl-r${_pkgver}.$arch.tar.xz"
    
      26                   "intel-opencl-devel-r$_pkgver.$arch.tar.xz"
    
      27                   "intel-opencl-cpu-r${_pkgver}.$arch.tar.xz")
    
      28
    
      29# Alistar ficheros en el directorio de instalación.
    
      30package() {
    
      31	# Extraer paquetes internos con "tar".
    
      32	for p in "${_package_internal[@]}"; do
    
      33		tar -xf "$p" -C "$pkgdir"
    
      34	done
    
      35
    
      36	# Copy license
    
      37	install -D "$pkgdir/opt/intel/opencl/LICENSE" "$pkgdir/usr/share/licenses/intel-opencl/LICENSE"
    
      38
    
      39	# Renombrar el archivo de índice de control de dispositivo (ICD) de "intel.icd" a "intel-gpu.icd"
    
      40	# para evitar conflictos con el archivo "intel.icd" del paquete "intel-opencl-runtime".
    
      41	mv "$pkgdir/etc/OpenCL/vendors/intel"{,-gpu}.icd
    
      42
    
      43
    
      44	## Sanitizar o asegurar los permisos del paquete intel-opencl ##
    
      45	
    
      46	# Cambiar la propiedad del directorio y sus subdirectorios a root:root.
    
      47	chown root:root -R "$pkgdir"
    
      48
    
      49	# Quitar los permisos de escritura para los grupos y otros.
    
      50	chmod go-w -R "$pkgdir"
    
      51}
    
      52
    
      53## Source:
    
      54# https://web.archive.org/web/20190526190814if_/https://registrationcenter-download.intel.com/akdlm/irc_nas/11396/SRB5.0_linux64.zip
    
      55
    
      56## References:
    
      57# https://community.intel.com/t5/Intel-Distribution-of-OpenVINO/Can-t-find-opencl-driver/m-p/1149053#M12047
    
      58
    
      59## Test:
    
      60# updpkgsums
    
      61# makepkg --printsrcinfo > .SRCINFO
    
      62# git clean -dfx
    
      63
    
      64# 👤 Autor: https://t.me/dakataca 💻 🐬 #
    
      65

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2