mixbus12

maintainer z3n · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged Downloads a prebuilt proprietary DAW installer from eu1.download.solidstatelogic.com, which is plausibly Harrison/SSL's own official CDN infrastructure (SSL acquired Harrison), with a hardcoded sha256 checksum; the .run installer is executed only with --noexec to extract files, and the rest is standard packaging — no obfuscation, no exfiltration, no piped-to-shell payloads.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-4.6-sonnet-20260217) reviewed the full PKGBUILD and judged it LOW (confidence 75%): Downloads a prebuilt proprietary DAW installer from eu1.download.solidstatelogic.com, which is plausibly Harrison/SSL's own official CDN infrastructure (SSL acquired Harrison), with a hardcoded sha256 checksum; the .run installer is executed only with --noexec to extract files, and the rest is standard packaging — no obfuscation, no exfiltration, no piped-to-shell payloads.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:34 "Mixbus-${pkgver}-x86_64.tar::https://eu1.download.solidstatelogic.com/Mixbus%2012/Mixbus-${pkgver}-x86_64.tar"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: z3n <z3nlabs at proton dot me>
2
3# Version 12.0.1 - Mixbus 12 major release:
4# - First release of the Mixbus 12 series (Ardour 8-based engine).
5# - New launcher/binary naming: /opt/Mixbus-12.0.1/bin/mixbus12.
6# - Pipewire JACK compatibility shim (PIPEWIRE_MIDI_BROKEN) handled by the
7# bundled launcher for affected Pipewire 1.1-1.5 releases.
8#
9# WARNING - Linux Version Limitations:
10# The Linux version is missing several advertised features present in Windows/Mac:
11# - NO SSL 9KJ Channel Strip (Windows/Mac exclusive)
12# - NO Slate Sounds Starter Pack (replaced with Goldbaby Audio Loops)
13# - Partial/unclear Harrison Creator Pack implementation
14# - Unclear RTA analyzer per-channel implementation
15# Linux users receive core DAW functionality but not all advertised premium features.
16
17pkgname=mixbus12
18pkgver=12.0.1
19pkgrel=1
20pkgdesc="Harrison Consoles Mixbus DAW (Version 12)"
21arch=('x86_64')
22url="https://store.harrisonaudio.com/all-products/mixbus"
23license=('custom')
24groups=('pro-audio')
25depends=('glibc' 'libcurl-gnutls' 'readline' 'ncurses' 'zlib' 'bzip2')
26makedepends=(
27 'binutils'
28)
29optdepends=('avldrums.lv2: AVLinux drumkits'
30 'gmsynth.lv2: General MIDI LV2 Synth'
31 'setbfree-lv2: Tonewheel organ'
32 'x42-plugins-lv2: Set of plugins and utilities from the X42 Project')
33source=(
34 "Mixbus-${pkgver}-x86_64.tar::https://eu1.download.solidstatelogic.com/Mixbus%2012/Mixbus-${pkgver}-x86_64.tar"
35 "${pkgname}.install"
36)
37sha256sums=(
38 '06bd21dc64a6083215f3a2fc7189f3d9d75fad751a5da5b38735fb92f459f740'
39 '764953880bdd424974bda39ad387830777cf746649578962a1c6e37830202550'
40)
41options=('!strip')
42
43install=${pkgname}.install
44
45prepare() {
46 cd "$srcdir"
47
48 # Extract the .run file from the tar archive
49 tar -xf "Mixbus-${pkgver}-x86_64.tar"
50
51 chmod +x "Mixbus-${pkgver}-x86_64.run"
52
53 # Use a completely clean environment for extraction
54 # This prevents any system libraries from being overridden by Mixbus libraries
55 env -i HOME="$HOME" USER="$USER" PATH="/usr/bin:/bin" \
56 LD_LIBRARY_PATH="" \
57 ./Mixbus-${pkgver}-x86_64.run --target extract --noexec
58
59 # Similarly for the tarball extraction
60 env -i HOME="$HOME" USER="$USER" PATH="/usr/bin:/bin" \
61 LD_LIBRARY_PATH="" \
62 tar xf extract/Mixbus_x86_64-${pkgver}.tar
63}
64
65package() {
66 cd "$srcdir"
67
68 # Create required directories
69 install -dm755 "$pkgdir/opt/Mixbus-${pkgver}"
70 install -dm755 "$pkgdir/usr/bin"
71
72 install -dm755 "$pkgdir/usr/share/applications"
73 install -dm755 "$pkgdir/usr/share/icons/hicolor/16x16/apps"
74 install -dm755 "$pkgdir/usr/share/icons/hicolor/22x22/apps"
75 install -dm755 "$pkgdir/usr/share/icons/hicolor/32x32/apps"
76 install -dm755 "$pkgdir/usr/share/icons/hicolor/48x48/apps"
77 install -dm755 "$pkgdir/usr/share/icons/hicolor/256x256/apps"
78
79
80 # Copy the extracted files to the package directory
81 cp -a Mixbus_x86_64-${pkgver}/* "$pkgdir/opt/Mixbus-${pkgver}/"
82
83 # Remove conflicting bundled libraries that clash with system libraries
84 # This prevents symbol lookup errors like "undefined symbol: rl_print_keybinding"
85 # and other compatibility issues with recent Arch updates
86
87 # Core system libraries that should use system versions
88 rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libreadline.so"*
89 rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libhistory.so"*
90 rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libncurses.so"*
91 rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libncursesw.so"*
92 rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libtinfo.so"*
93 rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libz.so"*
94 rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libbz2.so"*
95
96
97 # Install license file
98 install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/share/doc/COPYING" \
99 "$pkgdir/usr/share/licenses/${pkgname}/LICENSE" || \
100 install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/COPYING" \
101 "$pkgdir/usr/share/licenses/${pkgname}/LICENSE" || \
102 install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/LICENSE" \
103 "$pkgdir/usr/share/licenses/${pkgname}/LICENSE" || true
104
105 # Install icons
106 install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/share/resources/Mixbus-icon_16px.png" \
107 "$pkgdir/usr/share/icons/hicolor/16x16/apps/mixbus12.png"
108 install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/share/resources/Mixbus-icon_22px.png" \
109 "$pkgdir/usr/share/icons/hicolor/22x22/apps/mixbus12.png"
110 install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/share/resources/Mixbus-icon_32px.png" \
111 "$pkgdir/usr/share/icons/hicolor/32x32/apps/mixbus12.png"
112 install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/share/resources/Mixbus-icon_48px.png" \
113 "$pkgdir/usr/share/icons/hicolor/48x48/apps/mixbus12.png"
114 install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/share/resources/Mixbus-icon_256px.png" \
115 "$pkgdir/usr/share/icons/hicolor/256x256/apps/mixbus12.png"
116
117 # Create wrapper script to handle library paths
118 cat > "$pkgdir/usr/bin/mixbus12-wrapper" << EOF
119#!/bin/bash
120# Enhanced wrapper to handle library conflicts and system compatibility
121
122# Ensure system libraries take precedence over potentially conflicting bundled ones
123# This prevents issues like "undefined symbol: rl_print_keybinding"
124export LD_LIBRARY_PATH="/opt/Mixbus-${pkgver}/lib:\$LD_LIBRARY_PATH"
125
126# Set additional environment variables for better compatibility
127export MIXBUS_SYSTEM_LIB_PATH="/usr/lib:/lib"
128
129# Run Mixbus with appropriate environment
130exec env GDK_BACKEND=x11 /opt/Mixbus-${pkgver}/bin/mixbus12 "\$@"
131EOF
132 chmod 755 "$pkgdir/usr/bin/mixbus12-wrapper"
133
134 # Install desktop file with the wrapper
135 cat > "$pkgdir/usr/share/applications/mixbus12.desktop" << EOF
136[Desktop Entry]
137Version=1.0
138Type=Application
139Terminal=false
140Exec=/usr/bin/mixbus12-wrapper
141Name=Harrison Mixbus Version 12
142Icon=mixbus12
143Comment=Digital Audio Workstation
144Categories=AudioVideo;AudioEditing;Audio;Recorder;
145StartupWMClass=Mixbus-${pkgver}
146StartupNotify=true
147EOF
148
149 # Create symlink to the wrapper
150 ln -s "/usr/bin/mixbus12-wrapper" "$pkgdir/usr/bin/mixbus12"
151
152 # Fix permissions
153 chmod -R 755 "$pkgdir/opt/Mixbus-${pkgver}"
154 find "$pkgdir/opt/Mixbus-${pkgver}" -type f -exec chmod 644 {} \;
155 find "$pkgdir/opt/Mixbus-${pkgver}/bin" -type f -exec chmod 755 {} \; || true
156 find "$pkgdir/opt/Mixbus-${pkgver}/lib" -name "*.so*" -exec chmod 755 {} \; || true
157 find "$pkgdir/opt/Mixbus-${pkgver}/lib" -name "ardour-*" -exec chmod 755 {} \; || true
158}
159

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 3

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion