mixbus12
LOW
maintainer z3n
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads a source tarball from a non-whitelisted but plausibly official vendor domain (solidstatelogic.com) used by the upstream project; it builds from official prebuilt binaries without executing remote code or introducing unverifiable payloads.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from a non-whitelisted but plausibly official vendor domain (solidstatelogic.com) used by the upstream project; it builds from official prebuilt binaries without executing remote code or introducing unverifiable payloads.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:41
"Mixbus-${pkgver}-x86_64.tar::https://eu1.download.solidstatelogic.com/Mixbus%2012/Mixbus-${pkgver}-x86_64.tar"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: z3n <z3nlabs at proton dot me>
2
3
# Version 12.1.0 - point release, upstream package date 2026-10-19:
4
# - Installer layout is unchanged: makeself .run, payload
5
# Mixbus_x86_64-${pkgver}.tar, launcher bin/mixbus12, binary bin/mixbus-${pkgver}.
6
# - The bundle no longer ships libreadline, libhistory, libncurses, libtinfo,
7
# or libbz2. libz is still bundled and is removed so the system zlib is used.
8
# - The bundled launcher still sets PIPEWIRE_MIDI_BROKEN for Pipewire 1.1-1.5.
9
#
10
# Version 12.0.1 - Mixbus 12 major release:
11
# - First release of the Mixbus 12 series (Ardour 8-based engine).
12
# - New launcher/binary naming: /opt/Mixbus-12.0.1/bin/mixbus12.
13
# - Pipewire JACK compatibility shim (PIPEWIRE_MIDI_BROKEN) handled by the
14
# bundled launcher for affected Pipewire 1.1-1.5 releases.
15
#
16
# WARNING - Linux Version Limitations:
17
# The Linux version is missing several advertised features present in Windows/Mac:
18
# - NO SSL 9KJ Channel Strip (Windows/Mac exclusive)
19
# - NO Slate Sounds Starter Pack (replaced with Goldbaby Audio Loops)
20
# - Partial/unclear Harrison Creator Pack implementation
21
# - Unclear RTA analyzer per-channel implementation
22
# Linux users receive core DAW functionality but not all advertised premium features.
23
24
pkgname=mixbus12
25
pkgver=12.1.0
26
pkgrel=1
27
pkgdesc="Harrison Consoles Mixbus DAW (Version 12)"
28
arch=('x86_64')
29
url="https://store.harrisonaudio.com/all-products/mixbus"
30
license=('custom')
31
groups=('pro-audio')
32
depends=('glibc' 'libcurl-gnutls' 'readline' 'ncurses' 'zlib' 'bzip2')
33
makedepends=(
34
'binutils'
35
)
36
optdepends=('avldrums.lv2: AVLinux drumkits'
37
'gmsynth.lv2: General MIDI LV2 Synth'
38
'setbfree-lv2: Tonewheel organ'
39
'x42-plugins-lv2: Set of plugins and utilities from the X42 Project')
40
source=(
41
"Mixbus-${pkgver}-x86_64.tar::https://eu1.download.solidstatelogic.com/Mixbus%2012/Mixbus-${pkgver}-x86_64.tar"
42
"${pkgname}.install"
43
)
44
sha256sums=(
45
'1875c8d93c4ea80ee3266647bde0d27845681a127697b36c726abb4ac5fdbf3c'
46
'764953880bdd424974bda39ad387830777cf746649578962a1c6e37830202550'
47
)
48
options=('!strip')
49
50
install=${pkgname}.install
51
52
prepare() {
53
cd "$srcdir"
54
55
# Extract the .run file from the tar archive
56
tar -xf "Mixbus-${pkgver}-x86_64.tar"
57
58
chmod +x "Mixbus-${pkgver}-x86_64.run"
59
60
# Use a completely clean environment for extraction
61
# This prevents any system libraries from being overridden by Mixbus libraries
62
env -i HOME="$HOME" USER="$USER" PATH="/usr/bin:/bin" \
63
LD_LIBRARY_PATH="" \
64
./Mixbus-${pkgver}-x86_64.run --target extract --noexec
65
66
# Similarly for the tarball extraction
67
env -i HOME="$HOME" USER="$USER" PATH="/usr/bin:/bin" \
68
LD_LIBRARY_PATH="" \
69
tar xf extract/Mixbus_x86_64-${pkgver}.tar
70
}
71
72
package() {
73
cd "$srcdir"
74
75
# Create required directories
76
install -dm755 "$pkgdir/opt/Mixbus-${pkgver}"
77
install -dm755 "$pkgdir/usr/bin"
78
79
install -dm755 "$pkgdir/usr/share/applications"
80
install -dm755 "$pkgdir/usr/share/icons/hicolor/16x16/apps"
81
install -dm755 "$pkgdir/usr/share/icons/hicolor/22x22/apps"
82
install -dm755 "$pkgdir/usr/share/icons/hicolor/32x32/apps"
83
install -dm755 "$pkgdir/usr/share/icons/hicolor/48x48/apps"
84
install -dm755 "$pkgdir/usr/share/icons/hicolor/256x256/apps"
85
86
87
# Copy the extracted files to the package directory
88
cp -a Mixbus_x86_64-${pkgver}/* "$pkgdir/opt/Mixbus-${pkgver}/"
89
90
# Remove conflicting bundled libraries that clash with system libraries
91
# This prevents symbol lookup errors like "undefined symbol: rl_print_keybinding"
92
# and other compatibility issues with recent Arch updates
93
94
# Core system libraries that should use system versions
95
rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libreadline.so"*
96
rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libhistory.so"*
97
rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libncurses.so"*
98
rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libncursesw.so"*
99
rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libtinfo.so"*
100
rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libz.so"*
101
rm -f "$pkgdir/opt/Mixbus-${pkgver}/lib/libbz2.so"*
102
103
104
# Install license file
105
install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/share/doc/COPYING" \
106
"$pkgdir/usr/share/licenses/${pkgname}/LICENSE" || \
107
install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/COPYING" \
108
"$pkgdir/usr/share/licenses/${pkgname}/LICENSE" || \
109
install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/LICENSE" \
110
"$pkgdir/usr/share/licenses/${pkgname}/LICENSE" || true
111
112
# Install icons
113
install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/share/resources/Mixbus-icon_16px.png" \
114
"$pkgdir/usr/share/icons/hicolor/16x16/apps/mixbus12.png"
115
install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/share/resources/Mixbus-icon_22px.png" \
116
"$pkgdir/usr/share/icons/hicolor/22x22/apps/mixbus12.png"
117
install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/share/resources/Mixbus-icon_32px.png" \
118
"$pkgdir/usr/share/icons/hicolor/32x32/apps/mixbus12.png"
119
install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/share/resources/Mixbus-icon_48px.png" \
120
"$pkgdir/usr/share/icons/hicolor/48x48/apps/mixbus12.png"
121
install -Dm644 "$pkgdir/opt/Mixbus-${pkgver}/share/resources/Mixbus-icon_256px.png" \
122
"$pkgdir/usr/share/icons/hicolor/256x256/apps/mixbus12.png"
123
124
# Create wrapper script to handle library paths
125
cat > "$pkgdir/usr/bin/mixbus12-wrapper" << EOF
126
#!/bin/bash
127
# Enhanced wrapper to handle library conflicts and system compatibility
128
129
# Ensure system libraries take precedence over potentially conflicting bundled ones
130
# This prevents issues like "undefined symbol: rl_print_keybinding"
131
export LD_LIBRARY_PATH="/opt/Mixbus-${pkgver}/lib:\$LD_LIBRARY_PATH"
132
133
# Set additional environment variables for better compatibility
134
export MIXBUS_SYSTEM_LIB_PATH="/usr/lib:/lib"
135
136
# Run Mixbus with appropriate environment
137
exec env GDK_BACKEND=x11 /opt/Mixbus-${pkgver}/bin/mixbus12 "\$@"
138
EOF
139
chmod 755 "$pkgdir/usr/bin/mixbus12-wrapper"
140
141
# Install desktop file with the wrapper
142
cat > "$pkgdir/usr/share/applications/mixbus12.desktop" << EOF
143
[Desktop Entry]
144
Version=1.0
145
Type=Application
146
Terminal=false
147
Exec=/usr/bin/mixbus12-wrapper
148
Name=Harrison Mixbus Version 12
149
Icon=mixbus12
150
Comment=Digital Audio Workstation
151
Categories=AudioVideo;AudioEditing;Audio;Recorder;
152
StartupWMClass=Mixbus-${pkgver}
153
StartupNotify=true
154
EOF
155
156
# Create symlink to the wrapper
157
ln -s "/usr/bin/mixbus12-wrapper" "$pkgdir/usr/bin/mixbus12"
158
159
# Fix permissions
160
chmod -R 755 "$pkgdir/opt/Mixbus-${pkgver}"
161
find "$pkgdir/opt/Mixbus-${pkgver}" -type f -exec chmod 644 {} \;
162
find "$pkgdir/opt/Mixbus-${pkgver}/bin" -type f -exec chmod 755 {} \; || true
163
find "$pkgdir/opt/Mixbus-${pkgver}/lib" -name "*.so*" -exec chmod 755 {} \; || true
164
find "$pkgdir/opt/Mixbus-${pkgver}/lib" -name "ardour-*" -exec chmod 755 {} \; || true
165
}
166
Changes since previous scan
--- PKGBUILD @ 2026-10-22 00:13+++ PKGBUILD @ 2026-11-01 00:21@@ -1,5 +1,12 @@ # Maintainer: z3n <z3nlabs at proton dot me> +# Version 12.1.0 - point release, upstream package date 2026-10-19:+# - Installer layout is unchanged: makeself .run, payload+# Mixbus_x86_64-${pkgver}.tar, launcher bin/mixbus12, binary bin/mixbus-${pkgver}.+# - The bundle no longer ships libreadline, libhistory, libncurses, libtinfo,+# or libbz2. libz is still bundled and is removed so the system zlib is used.+# - The bundled launcher still sets PIPEWIRE_MIDI_BROKEN for Pipewire 1.1-1.5.+# # Version 12.0.1 - Mixbus 12 major release: # - First release of the Mixbus 12 series (Ardour 8-based engine). # - New launcher/binary naming: /opt/Mixbus-12.0.1/bin/mixbus12.@@ -15,7 +22,7 @@ # Linux users receive core DAW functionality but not all advertised premium features. pkgname=mixbus12-pkgver=12.0.1+pkgver=12.1.0 pkgrel=1 pkgdesc="Harrison Consoles Mixbus DAW (Version 12)" arch=('x86_64')@@ -35,7 +42,7 @@ "${pkgname}.install" ) sha256sums=(- '06bd21dc64a6083215f3a2fc7189f3d9d75fad751a5da5b38735fb92f459f740'+ '1875c8d93c4ea80ee3266647bde0d27845681a127697b36c726abb4ac5fdbf3c' '764953880bdd424974bda39ad387830777cf746649578962a1c6e37830202550' ) options=('!strip')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 01:33:44 | Medium | 1 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |