obs-studio-liberty

maintainer LibertyGM · 19 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The non-standard host (cdn-fastly.obsproject.com) is a legitimate CDN used by the OBS project for official CEF binary releases; the file is a prebuilt dependency required for building, not executed arbitrary code, and the source is otherwise the official git repository with proper version tagging.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host (cdn-fastly.obsproject.com) is a legitimate CDN used by the OBS project for official CEF binary releases; the file is a prebuilt dependency required for building, not executed arbitrary code, and the source is otherwise the official git repository with proper version tagging.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:95 "https://cdn-fastly.obsproject.com/downloads/$_cefver.tar.xz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Konstantin Liberty <jon9097 at gmail dot com>
    
      2
    
      3pkgname=obs-studio-liberty
    
      4pkgver=32.2.1
    
      5pkgrel=2
    
      6pkgdesc="Free, open source software for live streaming and recording. With Browser Source support. Without the need to install ffmpeg-obs, etc."
    
      7arch=('x86_64')
    
      8url="https://github.com/obsproject/obs-studio"
    
      9license=('GPL-2.0-or-later')
    
      10_qtver=6.11.0
    
      11#_libajantv2ver=17.5.0
    
      12_libdatachannelver=0.24.5
    
      13_mbedtlsver=3.6.1
    
      14_pythonver=3.14
    
      15_cefver=cef_binary_6533_linux_x86_64_v6
    
      16depends=(
    
      17  "alsa-lib" # Deps of ALSA plugin and CEF
    
      18  "curl" # Deps of OBS Studio and rtmp-services plugin
    
      19  "ffmpeg>=8" # Deps of OBS Studio and FFmpeg plugin
    
      20  "fontconfig" # Deps of Freetype2 plugin
    
      21  "freetype2" # Deps of Freetype2 plugin
    
      22  "gcc-libs" # Deps of any C++ related binary
    
      23  "glib2" # Deps of libobs, PipeWire plugin and CEF
    
      24  "glibc" # Deps of any C related binary
    
      25  "jack" # Deps of JACK plugin
    
      26  "jansson" # Deps of libobs and rtmp-services plugin
    
      27#  "libajantv2>=$_libajantv2ver" # Deps of AJA plugins
    
      28  "libdatachannel>=$_libdatachannelver" # Deps of WebRTC plugin (NICE variant like the Flatpak)
    
      29  "libfdk-aac" # Deps of FDK AAC plugin
    
      30  "libgl" # Deps of libobs-opengl and OBS Studio
    
      31  "libjuice" # UDP Interactive Connectivity Establishment (ICE) library
    
      32  "libpipewire" # Deps of the PipeWire plugin
    
      33  "libpulse" # Deps of PulseAudio monitoring (in libobs) and PulseAudio plugin
    
      34  "librist" # Deps of FFmpeg plugin
    
      35  "libva" # Deps of FFmpeg plugin and QSV plugin
    
      36  "libvpl" # Deps of QSV plugin
    
      37  "libx11" # Deps of libobs, libobs-opengl, X11 Capture plugin, frontend tools plugin, obs-browser and CEF
    
      38  "libxcb" # Deps of libobs-opengl, X11 Capture plugin and CEF
    
      39  "libxcomposite" # Deps of the X11 capture plugin
    
      40  "libxkbcommon" # Deps of libobs, OBS Studio and CEF
    
      41  "luajit" # Deps of Scripting plugin
    
      42  "mbedtls>=$_mbedtlsver" # Deps of OBS Studio and Outputs plugin
    
      43  "pciutils" # Deps of FFmpeg plugin
    
      44  "python>=$_pythonver" # Deps of Scripting plugin
    
      45  "qrcodegencpp-cmake" # Deps of Websocket plugin
    
      46  "qt6-base>=$_qtver" # Deps of OBS Studio and any frontend plugin
    
      47  "qt6-svg>=$_qtver" # Deps of OBS Studio
    
      48  "qt6-wayland>=$_qtver" # Needed to use Qt on Wayland platform
    
      49  "rnnoise" # Deps if the filter plugin
    
      50  "simde" # Implementations of SIMD instruction sets
    
      51  "sndio" # Deps of sndio plugin
    
      52  "speexdsp" # Deps if the filter plugin
    
      53  "srt" # Deps of FFmpeg plugin
    
      54  "systemd-libs" # Deps of V4L2 plugin
    
      55  "util-linux-libs" # Deps of libobs
    
      56  "v4l-utils" # Deps of V4L2 plugin
    
      57  "vlc" # It is necessary to build the package and work
    
      58  "wayland" # Deps of libobs, libobs-opengl and CEF
    
      59  "x264" # Deps of the X264 plugin
    
      60  "zlib" # Deps of libobs
    
      61
    
      62  # Deps of CEF
    
      63  "at-spi2-core" "cairo" "dbus" "expat" "libcups" "libdrm"
    
      64  "libxdamage" "libxext" "libxfixes" "libxrandr" "mesa" "nspr"
    
      65  "nss" "pango"
    
      66)
    
      67
    
      68makedepends=(
    
      69  "asio" # Deps of Websocket plugin (headers-only lib)
    
      70  "cmake"
    
      71  "extra-cmake-modules"
    
      72  "ffnvcodec-headers" # Deps of NVENC plugin (headers-only lib)
    
      73  "git"
    
      74  "uthash" # Deps of libobs (headers-only lib)
    
      75  "nlohmann-json" # Deps of Websocket plugin (headers-only lib)
    
      76  "swig" # Deps of Scripting plugin
    
      77  "websocketpp" # Deps of Websocket plugin (headers-only lib)
    
      78)
    
      79
    
      80optdepends=(
    
      81  "intel-media-sdk: QSV encoder support(<= Rocket Lake & >= Broadwell)"
    
      82  "vpl-gpu-rt: QSV encoder support (>= Alder Lake)"
    
      83  "intel-media-driver: VAAPI encoder support (>= Broadwell)"
    
      84  "libva-intel-driver: VAAPI encoder support (<= Haswell)"
    
      85  "libva-mesa-driver: VAAPI encoder support"
    
      86  "v4l2loopback-dkms: V4L2 virtual camera output"
    
      87)
    
      88
    
      89provides=("obs-studio=$pkgver" "obs-vst" "obs-websocket" "obs-browser")
    
      90conflicts=("obs-studio" "obs-websocket" "obs-browser" "obs-linuxbrowser" "obs-studio-tytan652" "obs-studio-git" "obs-studio-amf" "obs-studio-browser" "obs-vst" "obs-studio-plugin-browser")
    
      91source=(
    
      92  "obs-studio::git+https://github.com/obsproject/obs-studio.git#tag=$pkgver"
    
      93  "obs-browser::git+https://github.com/obsproject/obs-browser.git"
    
      94  "obs-websocket::git+https://github.com/obsproject/obs-websocket.git"
    
      95  "https://cdn-fastly.obsproject.com/downloads/$_cefver.tar.xz"
    
      96  #"qt_fix.patch"
    
      97)
    
      98
    
      99sha512sums=('68b40a60991cc67819510f4c878014e476db15994d594c7b63f31b6b2afc99a8dc5799ebb70613197019a6692ed533e0056da8c43c672d158dffc291fb4f61dd'
    
      100            'SKIP'
    
      101            'SKIP'
    
      102            '790da9bf3a2495eb6d4d155ae89adea88a45f496b5996278d72df47a1dea662241b2b73d93be7fc56f83186805c591dcd718266575a74d1b25b6b93379ce74b3')
    
      103
    
      104prepare() {
    
      105  cd "$srcdir/obs-studio"
    
      106  git config submodule.plugins/obs-browser.url $srcdir/obs-browser
    
      107  git config submodule.plugins/obs-websocket.url $srcdir/obs-websocket
    
      108
    
      109  #git checkout 5e7804c1376a7cc40c0270a8b6edd5a6ece8272f
    
      110
    
      111  git -c protocol.file.allow=always submodule update
    
      112
    
      113  #patch -Np1 -i $srcdir/qt_fix.patch
    
      114
    
      115}
    
      116
    
      117build() {
    
      118
    
      119  cmake -B build -S obs-studio \
    
      120    -DCMAKE_BUILD_TYPE=Release \
    
      121    -DCMAKE_INSTALL_PREFIX=/usr \
    
      122    -DCMAKE_INSTALL_LIBDIR=lib \
    
      123    -DENABLE_LIBFDK=ON \
    
      124    -DENABLE_JACK=ON \
    
      125    -DENABLE_SNDIO=ON \
    
      126    -DENABLE_AJA=OFF \
    
      127    -DENABLE_BROWSER=ON \
    
      128    -DENABLE_NVENC=ON \
    
      129    -DCEF_ROOT_DIR="$srcdir/${_cefver/%_v?/}" \
    
      130    -DOBS_VERSION_OVERRIDE="$pkgver" \
    
      131    -DOBS_COMPILE_DEPRECATION_AS_WARNING=ON \
    
      132    -Wno-dev
    
      133
    
      134  cmake --build build
    
      135}
    
      136
    
      137package() {
    
      138  DESTDIR="$pkgdir" cmake --install build
    
      139}
    
      140

Changes since previous scan

--- PKGBUILD @ 2026-07-27 00:24
+++ PKGBUILD @ 2026-08-03 00:08
@@ -2,13 +2,13 @@
 
 pkgname=obs-studio-liberty
 pkgver=32.2.1
-pkgrel=1
+pkgrel=2
 pkgdesc="Free, open source software for live streaming and recording. With Browser Source support. Without the need to install ffmpeg-obs, etc."
 arch=('x86_64')
 url="https://github.com/obsproject/obs-studio"
 license=('GPL-2.0-or-later')
 _qtver=6.11.0
-_libajantv2ver=17.5.0
+#_libajantv2ver=17.5.0
 _libdatachannelver=0.24.5
 _mbedtlsver=3.6.1
 _pythonver=3.14
@@ -24,7 +24,7 @@
   "glibc" # Deps of any C related binary
   "jack" # Deps of JACK plugin
   "jansson" # Deps of libobs and rtmp-services plugin
-  "libajantv2>=$_libajantv2ver" # Deps of AJA plugins
+#  "libajantv2>=$_libajantv2ver" # Deps of AJA plugins
   "libdatachannel>=$_libdatachannelver" # Deps of WebRTC plugin (NICE variant like the Flatpak)
   "libfdk-aac" # Deps of FDK AAC plugin
   "libgl" # Deps of libobs-opengl and OBS Studio
@@ -123,6 +123,7 @@
     -DENABLE_LIBFDK=ON \
     -DENABLE_JACK=ON \
     -DENABLE_SNDIO=ON \
+    -DENABLE_AJA=OFF \
     -DENABLE_BROWSER=ON \
     -DENABLE_NVENC=ON \
     -DCEF_ROOT_DIR="$srcdir/${_cefver/%_v?/}" \

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 13:35:00	MEDIUM	1
2026-07-27 00:24:32	LOW	2
2026-07-26 15:32:35	MEDIUM	1
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 21:22:00	MEDIUM	1
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2