◎ AURWatch - AUR Security Monitor
scan coverage …
Last scan …
Next scan -

opencl-nvidia-beta

maintainer dbermond · 343 votes · base nvidia-utils-beta · scanned 2026-08-18 00:03:42.021799
LOW
View on AUR ↗
Why flagged The package downloads an official NVIDIA driver installer from nvidia.com, a legitimate source, and installs it locally; the flagged privileged operations are standard for NVIDIA driver packages and do not represent malicious behavior.

Triggered rules

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads an official NVIDIA driver installer from nvidia.com, a legitimate source, and installs it locally; the flagged privileged operations are standard for NVIDIA driver packages and do not represent malicious behavior.

2 higher static findings superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:16 source=("https://us.download.nvidia.com/XFree86/Linux-${CARCH}/${pkgver}/${_pkg}.run"
MEDIUM Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

  • PKGBUILD:247 install -D -m4755 nvidia-modprobe -t "${pkgdir}/usr/bin"

PKGBUILD

2 offending line(s) highlighted
1# Maintainer : Daniel Bermond <dbermond@archlinux.org>
2# Contributor: Det <nimetonmaili g-mail>
3# Contributor: Ng Oon-Ee
4# Contributor: Dan Vratil
5
6pkgbase=nvidia-utils-beta
7pkgname=('nvidia-utils-beta' 'opencl-nvidia-beta' 'nvidia-settings-beta')
8pkgver=610.57.04
9pkgrel=1
10pkgdesc='NVIDIA drivers utilities (beta version)'
11arch=('x86_64')
12url='https://www.nvidia.com/'
13license=('LicenseRef-custom')
14options=('!strip')
15_pkg="NVIDIA-Linux-${CARCH}-${pkgver}"
16source=("https://us.download.nvidia.com/XFree86/Linux-${CARCH}/${pkgver}/${_pkg}.run"
17 'nvidia-drm-outputclass.conf'
18 'nvidia-sleep.conf'
19 'nvidia-utils.sysusers'
20 'nvidia.rules'
21 'systemd-homed-override.conf'
22 'systemd-suspend-override.conf'
23 '10-gsk.conf'
24 'gsk-renderer.sh'
25 '120-nvidia-settings-change-desktop-paths.patch')
26sha256sums=('b2e935c66b83bb00c0c857bc8e0ee0fd52de9286b40c9cc1eec29a7ce7eb116d'
27 'be99ff3def641bb900c2486cce96530394c5dc60548fc4642f19d3a4c784134d'
28 '19800e91ab96a8be828af1383cbbadeda9f65f709e52f1217b54d5f3f1282318'
29 'f77a5247a3ba63e9fad3a3b2822d0fcfa51e0f79b5a90bd79bf08ea34b64ab07'
30 '0e54249a7754b668b436f0f7aa7e95fff68edbb12a93dbee4660e09a8c695f84'
31 'c5aa7b8abe69e72bfdc6b9ee8afbfd350bcc557e894558f2e6e4087fa9aa0dd8'
32 '1d053c5078387021338cfc3a732bed61be1a20a549775573788e9134775c8149'
33 '05af96f86b7b3b40b93160fdcb702572401579f8756c0831b5de5f8e9afebeba'
34 '67eac203e7de4cf979b82c1e43439ac0e7c951d8901ebd9e4555c5d186a1b2ec'
35 '6f0f4a23706241e9e37e0fe30a09bd30ca29bb446d8fe7861cb4959f0a010ef4')
36
37# create soname links
38_create_links() {
39 local _lib
40 local _soname
41 local _base
42 find "$pkgdir" -type f -name '*.so*' ! -path '*xorg/*' -print0 | while read -d $'\0' _lib
43 do
44 _soname="$(dirname "$_lib")/$(readelf -d "$_lib" | grep -Po 'SONAME.*: \[\K[^]]*' || true)"
45 _base="$(printf '%s' "$_soname" | sed -r 's/(.*)\.so.*/\1.so/')"
46 [ -e "$_soname" ] || ln -s "$(basename "$_lib")" "$_soname"
47 [ -e "$_base" ] || ln -s "$(basename "$_soname")" "$_base"
48 done
49}
50
51prepare() {
52 # extract the source file
53 [ -d "$_pkg" ] && rm -rf "$_pkg"
54 printf '%s\n' " -> Self-Extracting ${_pkg}.run..."
55 sh "${_pkg}.run" --extract-only
56 bsdtar -C "$_pkg" -xf "${_pkg}/nvidia-persistenced-init.tar.bz2"
57 gunzip "$_pkg"/nvidia-{cuda-mps-control,modprobe,persistenced,settings,smi,xconfig}.1.gz
58
59 patch -d "$_pkg" -Np1 -i "${srcdir}/120-nvidia-settings-change-desktop-paths.patch"
60}
61
62package_nvidia-settings-beta() {
63 pkgdesc='Tool for configuring the NVIDIA graphics driver (beta version)'
64 depends=(
65 'at-spi2-core'
66 'cairo'
67 'glib2'
68 'glibc'
69 'gdk-pixbuf2'
70 'gtk3'
71 'hicolor-icon-theme'
72 'libx11'
73 'libxext'
74 "nvidia-utils-beta>=${pkgver}"
75 'pango'
76 'wayland')
77 provides=("nvidia-settings=${pkgver}" "nvidia-settings-beta=${pkgver}")
78 conflicts=('nvidia-settings')
79
80 cd "$_pkg"
81
82 install -D -m755 nvidia-settings -t "${pkgdir}/usr/bin"
83 install -D -m644 nvidia-settings.1 -t "${pkgdir}/usr/share/man/man1"
84 install -D -m644 nvidia-settings.png -t "${pkgdir}/usr/share/icons/hicolor/128x128/apps"
85 install -D -m644 nvidia-settings.desktop -t "${pkgdir}/usr/share/applications"
86 install -D -m755 "libnvidia-gtk3.so.${pkgver}" -t "${pkgdir}/usr/lib"
87 install -D -m755 "libnvidia-wayland-client.so.${pkgver}" -t "${pkgdir}/usr/lib"
88
89 # license
90 install -D -m644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}"
91}
92
93package_opencl-nvidia-beta() {
94 pkgdesc='OpenCL implemention for NVIDIA (beta version)'
95 depends=(
96 'glibc')
97 optdepends=(
98 'opencl-headers: headers necessary for OpenCL development')
99 provides=("opencl-nvidia=${pkgver}" 'opencl-driver')
100 conflicts=('opencl-nvidia')
101
102 cd "$_pkg"
103
104 # OpenCL
105 install -D -m644 nvidia.icd "${pkgdir}/etc/OpenCL/vendors/nvidia.icd"
106 install -D -m755 "libnvidia-opencl.so.${pkgver}" -t "${pkgdir}/usr/lib"
107
108 _create_links
109
110 # license
111 install -D -m644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}"
112}
113
114package_nvidia-utils-beta() {
115 depends=(
116 'bash'
117 'egl-gbm'
118 'egl-wayland'
119 'egl-wayland2'
120 'egl-x11'
121 'glibc'
122 'libgcc'
123 'libglvnd'
124 'libx11'
125 'libxext'
126 'openssl')
127 optdepends=(
128 'nvidia-settings-beta: for the configuration tool'
129 'opencl-nvidia-beta: for OpenCL support'
130 'xorg-server: for Xorg support'
131 'xorg-server-devel: for nvidia-xconfig')
132 provides=("nvidia-utils=${pkgver}" 'vulkan-driver' 'opengl-driver' "nvidia-libgl=${pkgver}"
133 "nvidia-libgl-beta=${pkgver}")
134 conflicts=('nvidia-utils' 'nvidia-libgl')
135 replaces=('nvidia-libgl')
136 install=nvidia-utils.install
137
138 cd "$_pkg"
139
140 # X driver
141 install -D -m755 nvidia_drv.so -t "${pkgdir}/usr/lib/xorg/modules/drivers"
142
143 # Wayland/GBM
144 install -d -m755 "${pkgdir}/usr/lib/gbm"
145 ln -s "../libnvidia-allocator.so.${pkgver}" "${pkgdir}/usr/lib/gbm/nvidia-drm_gbm.so"
146
147 # firmware
148 install -D -m644 firmware/*.bin -t "${pkgdir}/usr/lib/firmware/nvidia/${pkgver}"
149
150 # GLX extension module for X
151 install -D -m755 "libglxserver_nvidia.so.${pkgver}" -t "${pkgdir}/usr/lib/nvidia/xorg"
152 # Ensure that X finds glx
153 ln -s "libglxserver_nvidia.so.${pkgver}" "${pkgdir}/usr/lib/nvidia/xorg/libglxserver_nvidia.so.1"
154 ln -s "libglxserver_nvidia.so.${pkgver}" "${pkgdir}/usr/lib/nvidia/xorg/libglxserver_nvidia.so"
155
156 install -D -m755 "libGLX_nvidia.so.${pkgver}" -t "${pkgdir}/usr/lib"
157
158 # OpenGL libraries
159 install -D -m755 "libEGL_nvidia.so.${pkgver}" -t "${pkgdir}/usr/lib"
160 install -D -m755 "libGLESv1_CM_nvidia.so.${pkgver}" -t "${pkgdir}/usr/lib"
161 install -D -m755 "libGLESv2_nvidia.so.${pkgver}" -t "${pkgdir}/usr/lib"
162 install -D -m644 10_nvidia.json -t "${pkgdir}/usr/share/glvnd/egl_vendor.d"
163
164 # OpenGL core library
165 install -D -m755 "libnvidia-glcore.so.${pkgver}" -t "${pkgdir}/usr/lib"
166 install -D -m755 "libnvidia-eglcore.so.${pkgver}" -t "${pkgdir}/usr/lib"
167 install -D -m755 "libnvidia-glsi.so.${pkgver}" -t "${pkgdir}/usr/lib"
168
169 # misc
170 install -D -m755 libnvidia-api.so.1 -t "${pkgdir}/usr/lib"
171 install -D -m755 "libnvidia-fbc.so.${pkgver}" -t "${pkgdir}/usr/lib"
172 install -D -m755 "libnvidia-encode.so.${pkgver}" -t "${pkgdir}/usr/lib"
173 install -D -m755 "libnvidia-cfg.so.${pkgver}" -t "${pkgdir}/usr/lib"
174 install -D -m755 "libnvidia-ml.so.${pkgver}" -t "${pkgdir}/usr/lib"
175 install -D -m755 "libnvidia-glvkspirv.so.${pkgver}" -t "${pkgdir}/usr/lib"
176 install -D -m755 "libnvidia-allocator.so.${pkgver}" -t "${pkgdir}/usr/lib"
177 install -D -m755 "libnvidia-gpucomp.so.${pkgver}" -t "${pkgdir}/usr/lib"
178
179 # Vulkan ICD
180 install -D -m644 nvidia_icd.json -t "${pkgdir}/usr/share/vulkan/icd.d"
181 install -D -m644 nvidia_layers.json -t "${pkgdir}/usr/share/vulkan/implicit_layer.d"
182
183 # VulkanSC
184 install -D -m755 nvidia-pcc -t "${pkgdir}/usr/bin"
185 install -D -m755 "libnvidia-vksc-core.so.${pkgver}" -t "${pkgdir}/usr/lib"
186 install -D -m644 nvidia_icd_vksc.json -t "${pkgdir}/usr/share/vulkansc/icd.d"
187
188 # NvPresent - Vulkan layer implementing NVIDIA Smooth Motion
189 install -D -m755 "libnvidia-present.so.${pkgver}" -t "${pkgdir}/usr/lib"
190
191 # VDPAU
192 install -D -m755 "libvdpau_nvidia.so.${pkgver}" -t "${pkgdir}/usr/lib/vdpau"
193
194 # nvidia-tls library
195 install -D -m755 "libnvidia-tls.so.${pkgver}" -t "${pkgdir}/usr/lib"
196
197 # CUDA
198 install -D -m755 "libcuda.so.${pkgver}" -t "${pkgdir}/usr/lib"
199 install -D -m755 "libnvcuvid.so.${pkgver}" -t "${pkgdir}/usr/lib"
200 install -D -m755 "libcudadebugger.so.${pkgver}" -t "${pkgdir}/usr/lib"
201
202 # NVVM Compiler (JIT link-time-optimization for CUDA)
203 install -D -m755 libnvidia-nvvm70.so.4 -t "${pkgdir}/usr/lib"
204 install -D -m755 "libnvidia-nvvm.so.${pkgver}" -t "${pkgdir}/usr/lib"
205
206 # PTX JIT Compiler (Parallel Thread Execution (PTX) is a pseudo-assembly language for CUDA)
207 install -D -m755 "libnvidia-ptxjitcompiler.so.${pkgver}" -t "${pkgdir}/usr/lib"
208
209 # raytracing
210 install -D -m755 "libnvoptix.so.${pkgver}" -t "${pkgdir}/usr/lib"
211 install -D -m755 "libnvidia-rtcore.so.${pkgver}" -t "${pkgdir}/usr/lib"
212 install -D -m755 "nvoptix.bin" -t "${pkgdir}/usr/share/nvidia/nvoptix.bin"
213
214 # NGX / DLSS
215 install -D -m755 nvidia-ngx-updater -t "${pkgdir}/usr/bin"
216 install -D -m755 "libnvidia-ngx.so.${pkgver}" -t "${pkgdir}/usr/lib"
217 install -D -m644 {,_}nvngx.dll -t "${pkgdir}/usr/lib/nvidia/wine"
218
219 # Optical flow
220 install -D -m755 "libnvidia-opticalflow.so.${pkgver}" -t "${pkgdir}/usr/lib"
221
222 # Cryptography library wrapper
223 install -D -m755 "libnvidia-pkcs11.so.${pkgver}" -t "${pkgdir}/usr/lib"
224 install -D -m755 "libnvidia-pkcs11-openssl3.so.${pkgver}" -t "${pkgdir}/usr/lib"
225
226 # Debug
227 install -D -m755 nvidia-debugdump -t "${pkgdir}/usr/bin"
228
229 # nvidia-xconfig
230 install -D -m755 nvidia-xconfig -t "${pkgdir}/usr/bin"
231 install -D -m644 nvidia-xconfig.1 -t "${pkgdir}/usr/share/man/man1"
232
233 # nvidia-bug-report
234 install -D -m755 nvidia-bug-report.sh -t "${pkgdir}/usr/bin"
235
236 # nvidia-smi
237 install -D -m755 nvidia-smi -t "${pkgdir}/usr/bin"
238 install -D -m644 nvidia-smi.1 -t "${pkgdir}/usr/share/man/man1"
239
240 # nvidia-cuda-mps
241 install -D -m755 nvidia-cuda-mps-server -t "${pkgdir}/usr/bin"
242 install -D -m755 nvidia-cuda-mps-control -t "${pkgdir}/usr/bin"
243 install -D -m644 nvidia-cuda-mps-control.1 -t "${pkgdir}/usr/share/man/man1"
244
245 # nvidia-modprobe
246 # This should be removed if nvidia fixed their uvm module!
247 install -D -m4755 nvidia-modprobe -t "${pkgdir}/usr/bin"
248 install -D -m644 nvidia-modprobe.1 -t "${pkgdir}/usr/share/man/man1"
249
250 # nvidia-persistenced
251 install -D -m755 nvidia-persistenced -t "${pkgdir}/usr/bin"
252 install -D -m644 nvidia-persistenced.1 -t "${pkgdir}/usr/share/man/man1"
253 install -D -m644 nvidia-persistenced-init/systemd/nvidia-persistenced.service.template "${pkgdir}/usr/lib/systemd/system/nvidia-persistenced.service"
254 sed -i 's/__USER__/nvidia-persistenced/' "${pkgdir}/usr/lib/systemd/system/nvidia-persistenced.service"
255
256 # application profiles
257 install -D -m644 "nvidia-application-profiles-${pkgver}-rc" -t "${pkgdir}/usr/share/nvidia"
258 install -D -m644 "nvidia-application-profiles-${pkgver}-key-documentation" -t "${pkgdir}/usr/share/nvidia"
259
260 install -D -m644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}"
261 install -D -m644 README.txt "${pkgdir}/usr/share/doc/${pkgname}/README"
262 install -D -m644 NVIDIA_Changelog -t "${pkgdir}/usr/share/doc/${pkgname}"
263 install -D -m644 supported-gpus/supported-gpus.json -t "${pkgdir}/usr/share/doc/${pkgname}"
264 cp -dr --no-preserve='ownership' html "${pkgdir}/usr/share/doc/${pkgname}/"
265 #ln -s nvidia "${pkgdir}/usr/share/doc/nvidia-utils"
266
267 # new power management support
268 install -D -m644 systemd/system/*.service -t "${pkgdir}/usr/lib/systemd/system"
269 install -D -m755 systemd/system-sleep/nvidia -t "${pkgdir}/usr/lib/systemd/system-sleep"
270 install -D -m755 systemd/nvidia-sleep.sh -t "${pkgdir}/usr/bin"
271 install -D -m755 nvidia-powerd -t "${pkgdir}/usr/bin"
272 install -D -m644 nvidia-dbus.conf -t "${pkgdir}/usr/share/dbus-1/system.d"
273 install -D -m644 "${srcdir}/systemd-homed-override.conf" "${pkgdir}/usr/lib/systemd/system/systemd-homed.service.d/10-nvidia-no-freeze-session.conf"
274 local _dir
275 for _dir in systemd-{suspend{,-then-hibernate},hibernate,hybrid-sleep}.service.d
276 do
277 install -D -m644 "${srcdir}/systemd-suspend-override.conf" "${pkgdir}/usr/lib/systemd/system/${_dir}/10-nvidia-no-freeze-session.conf"
278 done
279
280 # distro specific files must be installed in /usr/share/X11/xorg.conf.d
281 install -D -m644 "${srcdir}/nvidia-drm-outputclass.conf" "${pkgdir}/usr/share/X11/xorg.conf.d/10-nvidia-drm-outputclass.conf"
282
283 install -D -m644 "${srcdir}/nvidia-utils.sysusers" "${pkgdir}/usr/lib/sysusers.d/${pkgname}.conf"
284 install -D -m644 "${srcdir}/nvidia.rules" "${pkgdir}/usr/lib/udev/rules.d/60-nvidia.rules"
285
286 install -D -m644 <(printf '%s\n%s\n%s\n' 'blacklist nouveau' 'blacklist nova_core' 'blacklist nova_drm') "${pkgdir}/usr/lib/modprobe.d/${pkgname}.conf"
287 install -D -m644 <(printf '%s\n' 'nvidia-uvm') "${pkgdir}/usr/lib/modules-load.d/${pkgname}.conf"
288
289 # enable NVreg_UseKernelSuspendNotifiers and TemporaryFilePath
290 install -D -m644 "${srcdir}/nvidia-sleep.conf" -t "${pkgdir}/usr/lib/modprobe.d"
291
292 # Vulkan GTK renderer crash fix
293 # https://forums.developer.nvidia.com/t/580-65-06-gtk-4-apps-hang-when-attempting-to-exit-close/341308/5?u=ptr1337
294 install -D -m644 "${srcdir}/gsk-renderer.sh" -t "${pkgdir}/etc/profile.d"
295 # same fix but also for Gnome/GDM users
296 install -D -m644 "${srcdir}/10-gsk.conf" -t "${pkgdir}/usr/lib/environment.d"
297
298 # lists NVIDIA driver files for container runtimes like nvidia-container-toolkit
299 install -D -m644 sandboxutils-filelist.json -t "${pkgdir}/usr/share/nvidia/files.d"
300
301 _create_links
302}
303

Changes since previous scan

--- PKGBUILD @ 2026-07-10 00:20
+++ PKGBUILD @ 2026-08-18 00:03
@@ -5,7 +5,7 @@
pkgbase=nvidia-utils-beta
pkgname=('nvidia-utils-beta' 'opencl-nvidia-beta' 'nvidia-settings-beta')
-pkgver=610.43.02
+pkgver=610.57.04
pkgrel=1
pkgdesc='NVIDIA drivers utilities (beta version)'
arch=('x86_64')
@@ -23,7 +23,7 @@
'10-gsk.conf'
'gsk-renderer.sh'
'120-nvidia-settings-change-desktop-paths.patch')
-sha256sums=('3034a054bb4cdf7752ff8dc272564cb105513804bff53538945901b16ca77463'
+sha256sums=('b2e935c66b83bb00c0c857bc8e0ee0fd52de9286b40c9cc1eec29a7ce7eb116d'
'be99ff3def641bb900c2486cce96530394c5dc60548fc4642f19d3a4c784134d'
'19800e91ab96a8be828af1383cbbadeda9f65f709e52f1217b54d5f3f1282318'
'f77a5247a3ba63e9fad3a3b2822d0fcfa51e0f79b5a90bd79bf08ea34b64ab07'

Scan history

Scanned at (UTC)SeverityRules
2026-08-18 00:03:42 LOW 3
2026-08-17 00:18:29 LOW 3
2026-08-16 00:03:42 LOW 3
2026-08-15 00:26:13 LOW 3
2026-08-14 00:03:41 LOW 3
2026-08-13 00:17:07 LOW 3
2026-08-12 01:22:13 LOW 3
2026-07-10 00:20:30 CLEAN 3
2026-07-09 23:33:03 LOW 2
2026-06-19 19:07:35 CLEAN 2
2026-06-18 16:11:54 LOW 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion