lib32-nvidia-580xx-utils
LOW
maintainer ventureo
32 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads a prebuilt NVIDIA driver blob from download.nvidia.com, which is NVIDIA's official domain, making it a legitimate source despite not being on a typical whitelist; the build extracts and installs 32-bit libraries, which is standard for such packages, and there is no code execution or obfuscation beyond the normal extraction of a proprietary binary blob.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt NVIDIA driver blob from download.nvidia.com, which is NVIDIA's official domain, making it a legitimate source despite not being on a typical whitelist; the build extracts and installs 32-bit libraries, which is standard for such packages, and there is no code execution or obfuscation beyond the normal extraction of a proprietary binary blob.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source=("https://download.nvidia.com/XFree86/Linux-x86_64/${pkgver}/${_pkg}.run")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Vasiliy Stelmachenok <ventureo@cachyos.org>
2
# Contributor: Sven-Hendrik Haase <svenstaro@archlinux.org>
3
# Contributor: Thomas Baechler <thomas@archlinux.org>
4
# Contributor: James Rayner <iphitus@gmail.com>
5
6
pkgbase=lib32-nvidia-580xx-utils
7
pkgname=('lib32-nvidia-580xx-utils' 'lib32-opencl-nvidia-580xx')
8
pkgver=580.196.07
9
pkgrel=1
10
arch=('x86_64')
11
url="http://www.nvidia.com/"
12
#makedepends=('nvidia-libgl') # To avoid conflict during installation in the build chroot
13
license=('custom')
14
options=('!strip')
15
_pkg="NVIDIA-Linux-x86_64-${pkgver}"
16
source=("https://download.nvidia.com/XFree86/Linux-x86_64/${pkgver}/${_pkg}.run")
17
sha512sums=('dabd0b33fae2c4f05501202a4bcac3b8dd8dc1e5121b6e0991b8ba47eec36beb33af5b3fde2994567e0133a55910a2dab80facca682e14ac8c09990fcf9166e4')
18
19
create_links() {
20
# create soname links
21
for _lib in $(find "${pkgdir}" -name '*.so*' | grep -v 'xorg/'); do
22
_soname=$(dirname "${_lib}")/$(readelf -d "${_lib}" | grep -Po 'SONAME.*: \[\K[^]]*' || true)
23
_base=$(echo ${_soname} | sed -r 's/(.*).so.*/\1.so/')
24
[[ -e "${_soname}" ]] || ln -s $(basename "${_lib}") "${_soname}"
25
[[ -e "${_base}" ]] || ln -s $(basename "${_soname}") "${_base}"
26
done
27
}
28
29
build() {
30
sh ${_pkg}.run --extract-only
31
}
32
33
package_lib32-opencl-nvidia-580xx() {
34
pkgdesc="OpenCL implemention for NVIDIA (32-bit) (580xx)"
35
depends=('lib32-zlib' 'lib32-gcc-libs')
36
optdepends=('opencl-headers: headers necessary for OpenCL development')
37
conflicts=('lib32-opencl-nvidia')
38
provides=('lib32-opencl-driver' "lib32-opencl-nvidia=$pkgver")
39
40
cd "${_pkg}"/32
41
42
# OpenCL
43
install -D -m755 "libnvidia-opencl.so.${pkgver}" "${pkgdir}/usr/lib32/libnvidia-opencl.so.${pkgver}"
44
45
create_links
46
47
mkdir -p "${pkgdir}/usr/share/licenses"
48
ln -s lib32-nvidia-580xx-utils "${pkgdir}/usr/share/licenses/lib32-opencl-nvidia"
49
}
50
51
package_lib32-nvidia-580xx-utils() {
52
pkgdesc="NVIDIA drivers utilities (32-bit) (580xx)"
53
depends=('lib32-zlib' 'lib32-gcc-libs' 'lib32-libglvnd')
54
optdepends=('lib32-opencl-nvidia')
55
conflicts=('lib32-nvidia-libgl' 'lib32-nvidia-utils')
56
provides=('lib32-vulkan-driver' 'lib32-opengl-driver' 'lib32-nvidia-libgl' "lib32-nvidia-utils=$pkgver")
57
replaces=('lib32-nvidia-libgl')
58
59
cd "${_pkg}"/32
60
61
# Check http://us.download.nvidia.com/XFree86/Linux-x86_64/${pkgver}/README/installedcomponents.html
62
# for hints on what needs to be installed where.
63
64
install -D -m755 "libGLX_nvidia.so.${pkgver}" "${pkgdir}/usr/lib32/libGLX_nvidia.so.${pkgver}"
65
66
# OpenGL libraries
67
install -D -m755 "libEGL_nvidia.so.${pkgver}" "${pkgdir}/usr/lib32/libEGL_nvidia.so.${pkgver}"
68
install -D -m755 "libGLESv1_CM_nvidia.so.${pkgver}" "${pkgdir}/usr/lib32/libGLESv1_CM_nvidia.so.${pkgver}"
69
install -D -m755 "libGLESv2_nvidia.so.${pkgver}" "${pkgdir}/usr/lib32/libGLESv2_nvidia.so.${pkgver}"
70
71
# OpenGL core library
72
install -D -m755 "libnvidia-glcore.so.${pkgver}" "${pkgdir}/usr/lib32/libnvidia-glcore.so.${pkgver}"
73
install -D -m755 "libnvidia-eglcore.so.${pkgver}" "${pkgdir}/usr/lib32/libnvidia-eglcore.so.${pkgver}"
74
install -D -m755 "libnvidia-glsi.so.${pkgver}" "${pkgdir}/usr/lib32/libnvidia-glsi.so.${pkgver}"
75
76
# misc
77
mkdir -p "${pkgdir}/usr/lib32/gbm" && ln -sr "${pkgdir}/usr/lib32/libnvidia-allocator.so.${pkgver}" "${pkgdir}/usr/lib32/gbm/nvidia-drm_gbm.so"
78
install -D -m755 "libnvidia-fbc.so.${pkgver}" "${pkgdir}/usr/lib32/libnvidia-fbc.so.${pkgver}"
79
install -D -m755 "libnvidia-encode.so.${pkgver}" "${pkgdir}/usr/lib32/libnvidia-encode.so.${pkgver}"
80
install -D -m755 "libnvidia-ml.so.${pkgver}" "${pkgdir}/usr/lib32/libnvidia-ml.so.${pkgver}"
81
install -D -m755 "libnvidia-glvkspirv.so.${pkgver}" "${pkgdir}/usr/lib32/libnvidia-glvkspirv.so.${pkgver}"
82
install -D -m755 "libnvidia-allocator.so.${pkgver}" "${pkgdir}/usr/lib32/libnvidia-allocator.so.${pkgver}"
83
install -D -m755 "libnvidia-gpucomp.so.${pkgver}" "${pkgdir}/usr/lib32/libnvidia-gpucomp.so.${pkgver}"
84
85
# VDPAU
86
install -D -m755 "libvdpau_nvidia.so.${pkgver}" "${pkgdir}/usr/lib32/vdpau/libvdpau_nvidia.so.${pkgver}"
87
88
# nvidia-tls library
89
install -D -m755 "libnvidia-tls.so.${pkgver}" "${pkgdir}/usr/lib32/libnvidia-tls.so.${pkgver}"
90
91
# CUDA
92
install -D -m755 "libcuda.so.${pkgver}" "${pkgdir}/usr/lib32/libcuda.so.${pkgver}"
93
install -D -m755 "libnvcuvid.so.${pkgver}" "${pkgdir}/usr/lib32/libnvcuvid.so.${pkgver}"
94
95
# PTX JIT Compiler (Parallel Thread Execution (PTX) is a pseudo-assembly language for CUDA)
96
install -D -m755 "libnvidia-ptxjitcompiler.so.${pkgver}" "${pkgdir}/usr/lib32/libnvidia-ptxjitcompiler.so.${pkgver}"
97
98
# Optical flow
99
install -D -m755 "libnvidia-opticalflow.so.${pkgver}" "${pkgdir}/usr/lib32/libnvidia-opticalflow.so.${pkgver}"
100
101
create_links
102
103
rm -rf "${pkgdir}"/usr/{include,share,bin}
104
mkdir -p "${pkgdir}/usr/share/licenses"
105
ln -s lib32-nvidia-580xx-utils "${pkgdir}/usr/share/licenses/${pkgname}"
106
}
107
Changes since previous scan
--- PKGBUILD @ 2026-10-23 00:02+++ PKGBUILD @ 2026-11-01 00:21@@ -5,7 +5,7 @@ pkgbase=lib32-nvidia-580xx-utils pkgname=('lib32-nvidia-580xx-utils' 'lib32-opencl-nvidia-580xx')-pkgver=580.178.04+pkgver=580.196.07 pkgrel=1 arch=('x86_64') url="http://www.nvidia.com/"@@ -14,7 +14,7 @@ options=('!strip') _pkg="NVIDIA-Linux-x86_64-${pkgver}" source=("https://download.nvidia.com/XFree86/Linux-x86_64/${pkgver}/${_pkg}.run")-sha512sums=('b463dec07dab14370e3bd89d559e54e5f81d5b01be9de2bac6c700334c10a8bce2f9049b978a01a97d515d5ebb16ec4ecf02ce35979a8833a619bc6bd97084de')+sha512sums=('dabd0b33fae2c4f05501202a4bcac3b8dd8dc1e5121b6e0991b8ba47eec36beb33af5b3fde2994567e0133a55910a2dab80facca682e14ac8c09990fcf9166e4') create_links() { # create soname linksScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 21:38:30 | Medium | 1 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |