opera

MEDIUM

maintainer Refreeze5911 36 votes scanned 2026-11-01 00:21:48.120785

View on AUR

Why flagged

The package downloads a prebuilt Debian binary from a non-standard host (get.geo.opera.com) which is not on the whitelist, posing a supply-chain risk if the host were compromised or the download redirected.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:31 "https://get.geo.opera.com/ftp/pub/${pkgname}/desktop/${pkgver}/linux/${pkgname}-stable_${pkgver}_amd64.deb"

Medium AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt Debian binary from a non-standard host (get.geo.opera.com) which is not on the whitelist, posing a supply-chain risk if the host were compromised or the download redirected.

PKGBUILD

1 offending line(s) highlighted

      1# vim:set ft=sh:
    
      2# Maintainer: Refreeze5911
    
      3# Maintainer: XSilverTH <XSilverTH AT proton DOT me>
    
      4# Maintainer: Shadowphoenix <allescool85 AT gmail DOT com>
    
      5# Contributor: Carlinix <rcarlini DOT aur AT gmail DOT com>
    
      6# Contributor: BlackEagle <ike DOT devolder AT gmail DOT com>
    
      7# Contributor: Bartłomiej Piotrowski <barthalion@gmail.com>
    
      8# Contributor: Mateusz Herych <heniekk@gmail.com>
    
      9# Contributor: ruario <ruario AT opera DOT com>
    
      10# Contributor: Daniel Isenmann <daniel AT archlinux DOT org>
    
      11# Contributor: dorphell <dorphell AT archlinux DOT org>
    
      12# Contributor: Sigitas Mazaliauskas <sigis AT gmail DOT com>
    
      13# Contributor: eworm
    
      14
    
      15pkgname=opera
    
      16pkgver=139.0.6053.15
    
      17pkgrel=3
    
      18pkgdesc="A fast and secure web browser"
    
      19url="https://www.opera.com/"
    
      20options=(!strip !zipman)
    
      21license=('custom:opera')
    
      22backup=("etc/$pkgname/default")
    
      23arch=('x86_64')
    
      24depends=('gtk3' 'alsa-lib' 'libnotify' 'curl' 'nss' 'libcups' 'libxss' 'ttf-font' 'desktop-file-utils' 'shared-mime-info' 'hicolor-icon-theme')
    
      25optdepends=(
    
      26    'qt6-base' 'qt5-base'
    
      27    'upower: opera battery save'
    
      28)
    
      29chromium_version=155.0.8059.85
    
      30source=(
    
      31    "https://get.geo.opera.com/ftp/pub/${pkgname}/desktop/${pkgver}/linux/${pkgname}-stable_${pkgver}_amd64.deb"
    
      32    "opera"
    
      33    "default"
    
      34    'eula.html'
    
      35    'terms.html'
    
      36    'privacy.html'
    
      37    "libffmpeg-${chromium_version}.so::https://github.com/ModLabsCC/chromium-ffmpeg-prebuilt/releases/download/chromium-${chromium_version}/libffmpeg.so"
    
      38)
    
      39
    
      40sha512sums=('c3688cc20910974ea51c94d68b67bb4e532ebbb203de7188f06f040eccc63891d42da19210274a2b2c11c4e8b5d1fab8caed785e5005979eb141c0895472036a'
    
      41            '7e854e4c972785b8941f60117fbe4b88baeb8d7ca845ef2e10e8064043411da73821ba1ab0068df61e902f242a3ce355b51ffa9eab5397ff3ae3b5defd1be496'
    
      42            'ddb1773877fcfd7d9674e63263a80f9dd5a3ba414cda4cc6c411c88d49c1d5175eede66d9362558ddd53c928c723101e4e110479ae88b8aec4d2366ec179297f'
    
      43            'aaaa4435a3b6a08bf8e6ad4802afcbf111c1e8f477054251f031b70ae57ac1234fa19048121d64c878dc3b1de03522ce7ef11a263a86dc7062f643d569ecff82'
    
      44            '800d62321344ff4e3521ff20fae281cad9206bae80e60965784d144f8bf852f756cbc21f4c9d8d4e93d026da7ca10e0eda7601c83a6d8d85125831eacb907d9a'
    
      45            '43d4a066758805597527dbdfc95b4c8ad4b22c5db812b9493e50f8820c72f30c1e431bed40fdb821ab0c23a63aa31dc0e946ab708cc23ac617446964fa6b96f2'
    
      46            'ebb33757b7a89efadbf648ea64ea259ef336713881fedaa06e92e0bb2a2085d02118ecbdb42e0c06e9485c06a0bc619a85885e3d417589fd7182ec181cb6cbed')
    
      47
    
      48prepare() {
    
      49    sed -e "s/%pkgname%/$pkgname/g" -i "$srcdir/opera"
    
      50    sed -e "s/%operabin%/$pkgname-stable\/$pkgname/g" \
    
      51        -i "$srcdir/opera"
    
      52
    
      53}
    
      54
    
      55package() {
    
      56    tar -xf data.tar.zst --exclude=usr/share/{lintian,menu} -C "$pkgdir/"
    
      57
    
      58    # get rid of the extra subfolder {i386,x86_64}-linux-gnu
    
      59    (
    
      60        cd "$pkgdir/usr/lib/"*-linux-gnu/
    
      61        mv "$pkgname-stable" ../
    
      62    )
    
      63    rm -rf "$pkgdir/usr/lib/"*-linux-gnu
    
      64
    
      65    rm -f "$pkgdir/usr/lib/$pkgname-stable/libffmpeg.so"
    
      66    install -Dm755 "$srcdir/libffmpeg-${chromium_version}.so" \
    
      67        "$pkgdir/usr/lib/$pkgname-stable/libffmpeg.so"
    
      68
    
      69    # suid opera_sandbox
    
      70    chmod 4755 "$pkgdir/usr/lib/$pkgname-stable/opera_sandbox"
    
      71
    
      72    # install default options
    
      73    install -Dm644 "$srcdir/default" "$pkgdir/etc/$pkgname/default"
    
      74
    
      75    # install opera wrapper
    
      76    rm "$pkgdir/usr/bin/$pkgname"
    
      77    install -Dm755 "$srcdir/opera" "$pkgdir/usr/bin/$pkgname"
    
      78
    
      79    # license
    
      80    install -Dm644 \
    
      81        "$pkgdir/usr/share/doc/${pkgname}-stable/copyright" \
    
      82        "$pkgdir/usr/share/licenses/$pkgname/copyright"
    
      83
    
      84    # eula
    
      85    install -Dm644 \
    
      86        "$srcdir/eula.html" \
    
      87        "$pkgdir/usr/share/licenses/$pkgname/eula.html"
    
      88
    
      89    # terms
    
      90    install -Dm644 \
    
      91        "$srcdir/terms.html" \
    
      92        "$pkgdir/usr/share/licenses/$pkgname/terms.html"
    
      93
    
      94    # privacy
    
      95    install -Dm644 \
    
      96        "$srcdir/privacy.html" \
    
      97        "$pkgdir/usr/share/licenses/$pkgname/privacy.html"
    
      98}
    
      99

Changes since previous scan

--- PKGBUILD @ 2026-10-27 00:23
+++ PKGBUILD @ 2026-11-01 00:21
@@ -13,7 +13,7 @@
 # Contributor: eworm
 
 pkgname=opera
-pkgver=137.0.6036.63
+pkgver=139.0.6053.15
 pkgrel=3
 pkgdesc="A fast and secure web browser"
 url="https://www.opera.com/"
@@ -26,7 +26,7 @@
     'qt6-base' 'qt5-base'
     'upower: opera battery save'
 )
-chromium_version=153.0.8010.55
+chromium_version=155.0.8059.85
 source=(
     "https://get.geo.opera.com/ftp/pub/${pkgname}/desktop/${pkgver}/linux/${pkgname}-stable_${pkgver}_amd64.deb"
     "opera"
@@ -37,13 +37,13 @@
     "libffmpeg-${chromium_version}.so::https://github.com/ModLabsCC/chromium-ffmpeg-prebuilt/releases/download/chromium-${chromium_version}/libffmpeg.so"
 )
 
-sha512sums=('2675e948c812faa970047d8fac494ad1a24a182379ef79d3e4cb511f95db20fd488c2a682e10fd72f3d32b258d817fbe97b18d747265bd99046ec89450ac645e'
+sha512sums=('c3688cc20910974ea51c94d68b67bb4e532ebbb203de7188f06f040eccc63891d42da19210274a2b2c11c4e8b5d1fab8caed785e5005979eb141c0895472036a'
             '7e854e4c972785b8941f60117fbe4b88baeb8d7ca845ef2e10e8064043411da73821ba1ab0068df61e902f242a3ce355b51ffa9eab5397ff3ae3b5defd1be496'
             'ddb1773877fcfd7d9674e63263a80f9dd5a3ba414cda4cc6c411c88d49c1d5175eede66d9362558ddd53c928c723101e4e110479ae88b8aec4d2366ec179297f'
             'aaaa4435a3b6a08bf8e6ad4802afcbf111c1e8f477054251f031b70ae57ac1234fa19048121d64c878dc3b1de03522ce7ef11a263a86dc7062f643d569ecff82'
             '800d62321344ff4e3521ff20fae281cad9206bae80e60965784d144f8bf852f756cbc21f4c9d8d4e93d026da7ca10e0eda7601c83a6d8d85125831eacb907d9a'
             '43d4a066758805597527dbdfc95b4c8ad4b22c5db812b9493e50f8820c72f30c1e431bed40fdb821ab0c23a63aa31dc0e946ab708cc23ac617446964fa6b96f2'
-            '82575caedb8114595f652e4fd8ef14e37d5039229fedb877374adb0da6d404a8fa45c7154243ab1bd686d064bd58bb6572d7fd9ebc62a5756fa1666c3847719e')
+            'ebb33757b7a89efadbf648ea64ea259ef336713881fedaa06e92e0bb2a2085d02118ecbdb42e0c06e9485c06a0bc619a85885e3d417589fd7182ec181cb6cbed')
 
 prepare() {
     sed -e "s/%pkgname%/$pkgname/g" -i "$srcdir/opera"

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 00:21:48	Medium	2
2026-10-31 00:07:41	Medium	2
2026-10-30 00:29:30	Medium	2
2026-10-29 15:52:51	Medium	2
2026-10-29 00:13:55	Medium	2
2026-10-28 00:06:54	Medium	2
2026-10-27 15:48:05	Medium	2
2026-10-27 00:23:28	Medium	2
2026-10-26 00:12:40	Medium	2
2026-10-25 00:20:48	Medium	2
2026-10-24 00:14:55	Medium	2
2026-10-23 00:02:19	Medium	2
2026-10-22 00:13:10	Medium	2
2026-10-21 00:12:50	Medium	2
2026-10-20 15:28:05	Medium	2
2026-10-20 00:10:31	Medium	2
2026-10-19 00:03:55	Medium	2
2026-10-18 00:06:55	Medium	2
2026-10-17 00:21:55	Medium	2
2026-10-16 00:12:47	Medium	2