librealsense

maintainer buresu · 11 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads firmware binaries from Intel's official librealsense domain, which is a legitimate source for the project; while the domain is not a standard GitHub release host, it is project-specific and trusted, and the files are firmware data, not executable code, so the risk is low.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads firmware binaries from Intel's official librealsense domain, which is a legitimate source for the project; while the domain is not a standard GitHub release host, it is project-specific and trusted, and the files are firmware data, not executable code, so the risk is low.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 "https://librealsense.intel.com/Releases/RS4xx/FW/D4XX_FW_Image-${_RS4XX_VER}.bin"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: pingplug < aur at pingplug dot me >
    
      2# Contributr: Patrick José Pereira < positivcheg94 at gmail dot com >
    
      3
    
      4_RS4XX_VER=5.17.0.10
    
      5_L51X_VER=1.5.8.1
    
      6
    
      7pkgname=librealsense
    
      8pkgver=2.58.1
    
      9pkgrel=1
    
      10pkgdesc="RealSense SDK 2.0 is a cross-platform library for RealSense depth cameras. The SDK allows depth and color streaming, and provides intrinsic and extrinsic calibration information."
    
      11arch=('x86_64')
    
      12url="https://github.com/realsenseai/librealsense"
    
      13license=('Apache')
    
      14makedepends=('cmake' 'git')
    
      15depends=('glfw' 'glu' 'gtk3' 'libusb')
    
      16source=("https://github.com/realsenseai/librealsense/archive/refs/tags/v${pkgver}.tar.gz"
    
      17    "https://librealsense.intel.com/Releases/RS4xx/FW/D4XX_FW_Image-${_RS4XX_VER}.bin"
    
      18    "https://librealsense.intel.com/Releases/L5xx/FW/L51X_FW_Image-${_L51X_VER}.bin"
    
      19    "realsense-viewer.desktop"
    
      20    "0000-Fix-glibc-detection-probe.patch"
    
      21    "0001-Fix-glibc-detection-probe.patch")
    
      22sha256sums=('14409c3b810bf1508b87f46d47608a89018743b8a73d5855ab5d1ad18763fd8c'
    
      23            'a7e10cf7b011929df2bfc6347d87471372621cc937c96cb529c3846f26b60f1c'
    
      24            '87a9a91b613d9d807b2bfc424abe9cac63cad75dfc04718592c44777cb0b4452'
    
      25            '59281f91e7d471a7dde1cf7207eddd8624e05218cc4301ee52e4c453a0c8ab21'
    
      26            'dbde38fc466256c365c0f64d18db23ad930c196edb1475ca691c2479a03e74d0'
    
      27            '9b9e3294c7bb084404ec88595fafe3f704b657e70b0daf67dd330a531c76338d')
    
      28
    
      29prepare(){
    
      30  cd "${srcdir}/${pkgname}-${pkgver}"
    
      31
    
      32  patch -Np1 -i "${srcdir}/0000-Fix-glibc-detection-probe.patch"
    
      33  patch -Np1 -i "${srcdir}/0001-Fix-glibc-detection-probe.patch"
    
      34
    
      35  sed -i 's|, GROUP:="plugdev"||g' "config/99-realsense-libusb.rules"
    
      36  sed -i 's|, GROUP="plugdev"||g' "config/99-realsense-libusb.rules"
    
      37
    
      38  mkdir -p build/common/fw/
    
      39  cp "../D4XX_FW_Image-${_RS4XX_VER}.bin" build/common/fw/
    
      40  cp "../L51X_FW_Image-${_L51X_VER}.bin" build/common/fw/
    
      41}
    
      42
    
      43build() {
    
      44  cd "${srcdir}/${pkgname}-${pkgver}"
    
      45  mkdir -p build && cd build
    
      46  CFLAGS="${CFLAGS} -Wformat -pthread" \
    
      47  CXXFLAGS="${CXXFLAGS} -Wformat -pthread" \
    
      48  unset HOME
    
      49  cmake .. \
    
      50    -DCMAKE_INSTALL_PREFIX=/usr \
    
      51    -DCMAKE_INSTALL_LIBDIR=lib \
    
      52    -DCMAKE_INSTALL_SBINDIR=bin \
    
      53    -DCMAKE_INSTALL_SYSCONFDIR=/etc \
    
      54    -DCMAKE_BUILD_TYPE=Release \
    
      55    -DBUILD_SHARED_LIBS=on \
    
      56    -DBUILD_WITH_STATIC_CRT=off \
    
      57    -DBUILD_WITH_OPENMP=on \
    
      58    -DBUILD_EXAMPLES=on \
    
      59    -DBUILD_TOOLS=on \
    
      60    -DCHECK_FOR_UPDATES=off
    
      61  make
    
      62}
    
      63
    
      64package() {
    
      65  cd "${srcdir}/${pkgname}-${pkgver}/build"
    
      66  DESTDIR="${pkgdir}" make install
    
      67
    
      68  install -dm755 "${pkgdir}/usr/share"
    
      69  mv "${pkgdir}/Documents/librealsense2" "${pkgdir}/usr/share"
    
      70  rmdir "${pkgdir}/Documents"
    
      71
    
      72  cd "${srcdir}/${pkgname}-${pkgver}"
    
      73
    
      74  # Install udev rules
    
      75  install -Dm644 "config/99-realsense-libusb.rules" "${pkgdir}/usr/lib/udev/rules.d/99-realsense-libusb.rules"
    
      76  install -Dm644 "config/99-realsense-d4xx-mipi-dfu.rules" "${pkgdir}/usr/lib/udev/rules.d/99-realsense-d4xx-mipi-dfu.rules"
    
      77
    
      78  install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      79  install -Dm644 common/res/icon_512.png "${pkgdir}/usr/share/pixmaps/realsense-viewer.png"
    
      80  install -Dm644 "$srcdir/realsense-viewer.desktop" "${pkgdir}/usr/share/applications/realsense-viewer.desktop"
    
      81}
    
      82

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2