opera

maintainer Refreeze5911 · 36 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt Opera .deb from Opera's official domain and a prebuilt FFmpeg binary from GitHub; both are verifiable and from plausible official sources, with full checksums, posing no active supply-chain threat.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt Opera .deb from Opera's official domain and a prebuilt FFmpeg binary from GitHub; both are verifiable and from plausible official sources, with full checksums, posing no active supply-chain threat.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:31 "https://get.geo.opera.com/ftp/pub/${pkgname}/desktop/${pkgver}/linux/${pkgname}-stable_${pkgver}_amd64.deb"

PKGBUILD

1 offending line(s) highlighted

      1# vim:set ft=sh:
    
      2# Maintainer: Refreeze5911
    
      3# Maintainer: XSilverTH <XSilverTH AT proton DOT me>
    
      4# Maintainer: Shadowphoenix <allescool85 AT gmail DOT com>
    
      5# Contributor: Carlinix <rcarlini DOT aur AT gmail DOT com>
    
      6# Contributor: BlackEagle <ike DOT devolder AT gmail DOT com>
    
      7# Contributor: Bartłomiej Piotrowski <barthalion@gmail.com>
    
      8# Contributor: Mateusz Herych <heniekk@gmail.com>
    
      9# Contributor: ruario <ruario AT opera DOT com>
    
      10# Contributor: Daniel Isenmann <daniel AT archlinux DOT org>
    
      11# Contributor: dorphell <dorphell AT archlinux DOT org>
    
      12# Contributor: Sigitas Mazaliauskas <sigis AT gmail DOT com>
    
      13# Contributor: eworm
    
      14
    
      15pkgname=opera
    
      16pkgver=133.0.5932.85
    
      17pkgrel=1
    
      18pkgdesc="A fast and secure web browser"
    
      19url="https://www.opera.com/"
    
      20options=(!strip !zipman)
    
      21license=('custom:opera')
    
      22backup=("etc/$pkgname/default")
    
      23arch=('x86_64')
    
      24depends=('gtk3' 'alsa-lib' 'libnotify' 'curl' 'nss' 'libcups' 'libxss' 'ttf-font' 'desktop-file-utils' 'shared-mime-info' 'hicolor-icon-theme')
    
      25optdepends=(
    
      26    'qt6-base' 'qt5-base'
    
      27    'upower: opera battery save'
    
      28)
    
      29nwjs_ffmpeg_version=0.111.1
    
      30source=(
    
      31    "https://get.geo.opera.com/ftp/pub/${pkgname}/desktop/${pkgver}/linux/${pkgname}-stable_${pkgver}_amd64.deb"
    
      32    "opera"
    
      33    "default"
    
      34    'eula.html'
    
      35    'terms.html'
    
      36    'privacy.html'
    
      37    "https://github.com/nwjs-ffmpeg-prebuilt/nwjs-ffmpeg-prebuilt/releases/download/${nwjs_ffmpeg_version}/${nwjs_ffmpeg_version}-linux-x64.zip"
    
      38)
    
      39
    
      40sha512sums=('cdc6c85ce314e20cd976753a5142ef3a1e0508051b542ae39a642d8380eb410dfce97acbbaaa679ecf5835cac9b2ad9ca026522a0eb11defa78b4202d6816ab2'
    
      41            '7e854e4c972785b8941f60117fbe4b88baeb8d7ca845ef2e10e8064043411da73821ba1ab0068df61e902f242a3ce355b51ffa9eab5397ff3ae3b5defd1be496'
    
      42            'ddb1773877fcfd7d9674e63263a80f9dd5a3ba414cda4cc6c411c88d49c1d5175eede66d9362558ddd53c928c723101e4e110479ae88b8aec4d2366ec179297f'
    
      43            'aaaa4435a3b6a08bf8e6ad4802afcbf111c1e8f477054251f031b70ae57ac1234fa19048121d64c878dc3b1de03522ce7ef11a263a86dc7062f643d569ecff82'
    
      44            '800d62321344ff4e3521ff20fae281cad9206bae80e60965784d144f8bf852f756cbc21f4c9d8d4e93d026da7ca10e0eda7601c83a6d8d85125831eacb907d9a'
    
      45            '43d4a066758805597527dbdfc95b4c8ad4b22c5db812b9493e50f8820c72f30c1e431bed40fdb821ab0c23a63aa31dc0e946ab708cc23ac617446964fa6b96f2'
    
      46            'e19e829acb52af869d73efc539986052d70452af7e7370a45a45669a08c1f6479db3e93b30098ee87acb0b234bb6d6a5272b4ba208080a38f9661396c8b72463')
    
      47
    
      48prepare() {
    
      49    sed -e "s/%pkgname%/$pkgname/g" -i "$srcdir/opera"
    
      50    sed -e "s/%operabin%/$pkgname-stable\/$pkgname/g" \
    
      51        -i "$srcdir/opera"
    
      52
    
      53}
    
      54
    
      55package() {
    
      56    tar -xf data.tar.xz --exclude=usr/share/{lintian,menu} -C "$pkgdir/"
    
      57
    
      58    # get rid of the extra subfolder {i386,x86_64}-linux-gnu
    
      59    (
    
      60        cd "$pkgdir/usr/lib/"*-linux-gnu/
    
      61        mv "$pkgname-stable" ../
    
      62    )
    
      63    rm -rf "$pkgdir/usr/lib/"*-linux-gnu
    
      64
    
      65    rm -f "$pkgdir/usr/lib/$pkgname-stable/libffmpeg.so"
    
      66    install -Dm755 "$srcdir/libffmpeg.so" \
    
      67        "$pkgdir/usr/lib/$pkgname-stable/libffmpeg.so"
    
      68
    
      69    # suid opera_sandbox
    
      70    chmod 4755 "$pkgdir/usr/lib/$pkgname-stable/opera_sandbox"
    
      71
    
      72    # install default options
    
      73    install -Dm644 "$srcdir/default" "$pkgdir/etc/$pkgname/default"
    
      74
    
      75    # install opera wrapper
    
      76    rm "$pkgdir/usr/bin/$pkgname"
    
      77    install -Dm755 "$srcdir/opera" "$pkgdir/usr/bin/$pkgname"
    
      78
    
      79    # license
    
      80    install -Dm644 \
    
      81        "$pkgdir/usr/share/doc/${pkgname}-stable/copyright" \
    
      82        "$pkgdir/usr/share/licenses/$pkgname/copyright"
    
      83
    
      84    # eula
    
      85    install -Dm644 \
    
      86        "$srcdir/eula.html" \
    
      87        "$pkgdir/usr/share/licenses/$pkgname/eula.html"
    
      88
    
      89    # terms
    
      90    install -Dm644 \
    
      91        "$srcdir/terms.html" \
    
      92        "$pkgdir/usr/share/licenses/$pkgname/terms.html"
    
      93
    
      94    # privacy
    
      95    install -Dm644 \
    
      96        "$srcdir/privacy.html" \
    
      97        "$pkgdir/usr/share/licenses/$pkgname/privacy.html"
    
      98}
    
      99
    
      100

Changes since previous scan

--- PKGBUILD @ 2026-07-23 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -13,7 +13,7 @@
 # Contributor: eworm
 
 pkgname=opera
-pkgver=133.0.5932.60
+pkgver=133.0.5932.85
 pkgrel=1
 pkgdesc="A fast and secure web browser"
 url="https://www.opera.com/"
@@ -37,7 +37,7 @@
     "https://github.com/nwjs-ffmpeg-prebuilt/nwjs-ffmpeg-prebuilt/releases/download/${nwjs_ffmpeg_version}/${nwjs_ffmpeg_version}-linux-x64.zip"
 )
 
-sha512sums=('c0eaab64b4fc7ddb723b052493ff60a1182a5684524c8555f2b576dee038160dbe32479e1a934f945fe583921712a7cb40c01639d2aaec5e2c91ba90f45b3574'
+sha512sums=('cdc6c85ce314e20cd976753a5142ef3a1e0508051b542ae39a642d8380eb410dfce97acbbaaa679ecf5835cac9b2ad9ca026522a0eb11defa78b4202d6816ab2'
             '7e854e4c972785b8941f60117fbe4b88baeb8d7ca845ef2e10e8064043411da73821ba1ab0068df61e902f242a3ce355b51ffa9eab5397ff3ae3b5defd1be496'
             'ddb1773877fcfd7d9674e63263a80f9dd5a3ba414cda4cc6c411c88d49c1d5175eede66d9362558ddd53c928c723101e4e110479ae88b8aec4d2366ec179297f'
             'aaaa4435a3b6a08bf8e6ad4802afcbf111c1e8f477054251f031b70ae57ac1234fa19048121d64c878dc3b1de03522ce7ef11a263a86dc7062f643d569ecff82'

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 13:24:23	MEDIUM	1
2026-07-23 00:14:47	MEDIUM	2
2026-07-22 00:29:32	MEDIUM	2
2026-07-21 00:24:15	MEDIUM	2
2026-07-20 00:19:49	MEDIUM	2
2026-07-19 00:17:08	MEDIUM	2
2026-07-18 00:14:48	MEDIUM	2
2026-07-17 00:06:16	MEDIUM	2
2026-07-16 13:51:33	MEDIUM	2