opencl-amd

LOW

maintainer luciddream 143 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads official AMD ROCm .deb files from AMD's own domain (stable.repo.amd.com), which is plausibly the project's official source; unpacks and repackages them for Arch; this is normal repackaging behavior, not malicious.

Triggered rules

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads official AMD ROCm .deb files from AMD's own domain (stable.repo.amd.com), which is plausibly the project's official source; unpacks and repackages them for Arch; this is normal repackaging behavior, not malicious.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:22 "https://stable.repo.amd.com/rocm/core/packages/ubuntu2604/pool/main/amdrocm-sysdeps10.1_10.1.0-3_amd64.deb"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: George Sofianos <george at sofianos dot dev>
    
      2
    
      3# Release notes https://rocm.docs.amd.com/en/latest/about/release-notes.html
    
      4_rocm_repo='https://repo.amd.com/rocm/packages-multi-arch/ubuntu2604'
    
      5
    
      6pkgname=opencl-amd
    
      7pkgdesc="ROCm components repackaged from AMD's Ubuntu releases (ROCr runtime, OpenCL runtime, HIP runtime) - This package is intended to work along with the free amdgpu stack."
    
      8pkgver=10.1.0
    
      9pkgrel=1
    
      10epoch=1
    
      11arch=('x86_64')
    
      12url='https://www.amd.com'
    
      13license=('custom:AMD')
    
      14depends=('ocl-icd' 'gcc-libs')
    
      15provides=('opencl-driver' 'amdrocm-llvm' 'amdrocm-runtime' 'amdrocm-base' 'amdrocm-opencl' 'amdrocm-sysdeps')
    
      16conflicts=('rocm-bin' 'rocm-gfx101x-bin' 'rocm-gfx103x-bin' 'rocm-gfx110x-bin' 'rocm-gfx120x-bin' 'rocm-gfx1150-bin' 'rocm-gfx1151-bin' 'rocm-gfx1152-bin' 'rocm-gfx1153-bin' 'rocm-opencl-runtime' 'rocm' 'rocm-core'
    
      17 'comgr' 'rocm-hip' 'hip' 'hsa-rocr' 'rocminfo' 'hip-runtime-amd' 'rocm-hip-runtime' 'rocm-ocl-icd' 'rocm-opencl-icd-loader' 'rocm-opencl' 'rocm-opencl-runtime' 'rocprofiler-register' 'hsa-amd-aqlprofile' 'rocm-cmake' 'rocm-smi-lib')
    
      18optdepends=('clinfo')
    
      19
    
      20source=(
    
      21#runtime
    
      22"https://stable.repo.amd.com/rocm/core/packages/ubuntu2604/pool/main/amdrocm-sysdeps10.1_10.1.0-3_amd64.deb"
    
      23"https://stable.repo.amd.com/rocm/core/packages/ubuntu2604/pool/main/amdrocm-llvm10.1_10.1.0-3_amd64.deb"
    
      24"https://stable.repo.amd.com/rocm/core/packages/ubuntu2604/pool/main/amdrocm-runtime10.1_10.1.0-3_amd64.deb"
    
      25"https://stable.repo.amd.com/rocm/core/packages/ubuntu2604/pool/main/amdrocm-base10.1_10.1.0-3_amd64.deb"
    
      26"https://stable.repo.amd.com/rocm/core/packages/ubuntu2604/pool/main/amdrocm-opencl10.1_10.1.0-3_amd64.deb"
    
      27#dev - todo
    
      28)
    
      29
    
      30sha256sums=(
    
      31"a2493d98144a586df49489c4b4b7a7449c9eb123597515929699b1b5fccfd916"
    
      32"6a4727102d830f6c97b911351192b15623189278afad9b4558514a6fe51ca58a"
    
      33"2cf4fa3b82f9b37be9fc18ca6886e1791585c1b8041758ccba9e3c5dadb7c6b1"
    
      34"a3d48032edee53c51016b28884a1fe81e2d2f84e087c2546dd20753402ad53c9"
    
      35"d4c195a9c99bd61f9269fb61a9c396bfdbbe1db5ebea21cc3bc5657f75ca1304"
    
      36)
    
      37
    
      38package() {
    
      39    for p in *.deb; do
    
      40        ar x "${p}"
    
      41        if [[ -f data.tar.gz ]]; then
    
      42            # echo gz: "${srcdir}/${p}"
    
      43            tar xfx data.tar.gz
    
      44            rm data.tar.gz
    
      45        elif [[ -f data.tar.xz ]]; then
    
      46            # echo xz: "${srcdir}/${p}"
    
      47            tar xJf data.tar.xz
    
      48            rm data.tar.xz
    
      49        fi
    
      50    done
    
      51
    
      52    mv "${srcdir}/opt/" "${pkgdir}/"
    
      53    mv "${pkgdir}/opt/rocm/core-10.1" "${pkgdir}/opt/rocm/core"
    
      54
    
      55    mkdir -p "${pkgdir}/opt/amdgpu/share/libdrm"
    
      56    cd "${pkgdir}/opt/amdgpu/share/libdrm"
    
      57    ln -s /usr/share/libdrm/amdgpu.ids amdgpu.ids
    
      58
    
      59    mkdir -p "${pkgdir}/etc/OpenCL/vendors"
    
      60    echo libamdocl64.so > "${pkgdir}/etc/OpenCL/vendors/amdocl64.icd"
    
      61
    
      62    mkdir -p "${pkgdir}/etc/ld.so.conf.d"
    
      63    echo /opt/rocm/core/lib >> "$pkgdir/etc/ld.so.conf.d/opencl-amd.conf"
    
      64    echo /opt/rocm/core/lib/opencl >> "$pkgdir/etc/ld.so.conf.d/opencl-amd.conf"
    
      65
    
      66    mkdir -p "${pkgdir}/etc/profile.d"
    
      67    echo export PATH="\${PATH}:/opt/rocm/core/bin:/opt/rocm/core/lib/llvm/bin" > "$pkgdir/etc/profile.d/opencl-amd.sh"
    
      68}
    
      69

Changes since previous scan

--- PKGBUILD @ 2026-08-28 00:07
+++ PKGBUILD @ 2026-10-17 00:21
@@ -5,11 +5,11 @@
 
 pkgname=opencl-amd
 pkgdesc="ROCm components repackaged from AMD's Ubuntu releases (ROCr runtime, OpenCL runtime, HIP runtime) - This package is intended to work along with the free amdgpu stack."
-pkgver=7.14.0
-pkgrel=2
+pkgver=10.1.0
+pkgrel=1
 epoch=1
 arch=('x86_64')
-url='http://www.amd.com'
+url='https://www.amd.com'
 license=('custom:AMD')
 depends=('ocl-icd' 'gcc-libs')
 provides=('opencl-driver' 'amdrocm-llvm' 'amdrocm-runtime' 'amdrocm-base' 'amdrocm-opencl' 'amdrocm-sysdeps')
@@ -19,20 +19,20 @@
 
 source=(
 #runtime
-"https://repo.amd.com/rocm/packages-multi-arch/ubuntu2604/pool/main/amdrocm-sysdeps7.14_7.14.0-3_amd64.deb"
-"https://repo.amd.com/rocm/packages-multi-arch/ubuntu2604/pool/main/amdrocm-llvm7.14_7.14.0-3_amd64.deb"
-"https://repo.amd.com/rocm/packages-multi-arch/ubuntu2604/pool/main/amdrocm-runtime7.14_7.14.0-3_amd64.deb"
-"https://repo.amd.com/rocm/packages-multi-arch/ubuntu2604/pool/main/amdrocm-base7.14_7.14.0-3_amd64.deb"
-"https://repo.amd.com/rocm/packages-multi-arch/ubuntu2604/pool/main/amdrocm-opencl7.14_7.14.0-3_amd64.deb"
+"https://stable.repo.amd.com/rocm/core/packages/ubuntu2604/pool/main/amdrocm-sysdeps10.1_10.1.0-3_amd64.deb"
+"https://stable.repo.amd.com/rocm/core/packages/ubuntu2604/pool/main/amdrocm-llvm10.1_10.1.0-3_amd64.deb"
+"https://stable.repo.amd.com/rocm/core/packages/ubuntu2604/pool/main/amdrocm-runtime10.1_10.1.0-3_amd64.deb"
+"https://stable.repo.amd.com/rocm/core/packages/ubuntu2604/pool/main/amdrocm-base10.1_10.1.0-3_amd64.deb"
+"https://stable.repo.amd.com/rocm/core/packages/ubuntu2604/pool/main/amdrocm-opencl10.1_10.1.0-3_amd64.deb"
 #dev - todo
 )
 
 sha256sums=(
-"6e6ab8b0560f9157ceb2afefe481eddb93789041cbb53137018571d749205a8b"
-"46f336f876528d0c2c98503491cb1e1e176986caaf2ea281f84c56c1a8822747"
-"3b940320e839d68e05360ef70e6c4d3222cd135a4b02d68ece2267366330748c"
-"4221475e72a3481ae746f7562d6db2094133bb5b9c394fd7f9f1820a5f83695b"
-"58dad7d4d0b6ef795117b818aecfee7e2719c66f3fa9151a3c07123a839c0d2d"
+"a2493d98144a586df49489c4b4b7a7449c9eb123597515929699b1b5fccfd916"
+"6a4727102d830f6c97b911351192b15623189278afad9b4558514a6fe51ca58a"
+"2cf4fa3b82f9b37be9fc18ca6886e1791585c1b8041758ccba9e3c5dadb7c6b1"
+"a3d48032edee53c51016b28884a1fe81e2d2f84e087c2546dd20753402ad53c9"
+"d4c195a9c99bd61f9269fb61a9c396bfdbbe1db5ebea21cc3bc5657f75ca1304"
 )
 
 package() {
@@ -50,7 +50,7 @@
     done
 
     mv "${srcdir}/opt/" "${pkgdir}/"
-    mv "${pkgdir}/opt/rocm/core-7.14" "${pkgdir}/opt/rocm/core"
+    mv "${pkgdir}/opt/rocm/core-10.1" "${pkgdir}/opt/rocm/core"
 
     mkdir -p "${pkgdir}/opt/amdgpu/share/libdrm"
     cd "${pkgdir}/opt/amdgpu/share/libdrm"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 00:28:03	Low	2
2026-10-07 00:21:34	Low	2
2026-10-07 00:04:18	Low	2
2026-08-28 00:07:31	Clean	2
2026-08-27 17:33:13	Low	1
2026-07-30 00:17:23	Clean	2
2026-07-29 23:13:22	Low	1
2026-07-29 00:25:53	Low	2
2026-07-28 00:07:28	Low	2
2026-07-27 00:24:32	Low	2
2026-07-26 00:07:32	Low	2