opera

MEDIUM

maintainer Refreeze5911 36 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads a prebuilt Debian package from a non-standard host (get.geo.opera.com) which is not on the whitelist, posing a supply-chain risk if the host were compromised or the download redirected, though the checksums are verified.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:31 "https://get.geo.opera.com/ftp/pub/${pkgname}/desktop/${pkgver}/linux/${pkgname}-stable_${pkgver}_amd64.deb"

Medium AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 90%): The package downloads a prebuilt Debian package from a non-standard host (get.geo.opera.com) which is not on the whitelist, posing a supply-chain risk if the host were compromised or the download redirected, though the checksums are verified.

PKGBUILD

1 offending line(s) highlighted

      1# vim:set ft=sh:
    
      2# Maintainer: Refreeze5911
    
      3# Maintainer: XSilverTH <XSilverTH AT proton DOT me>
    
      4# Maintainer: Shadowphoenix <allescool85 AT gmail DOT com>
    
      5# Contributor: Carlinix <rcarlini DOT aur AT gmail DOT com>
    
      6# Contributor: BlackEagle <ike DOT devolder AT gmail DOT com>
    
      7# Contributor: Bartłomiej Piotrowski <barthalion@gmail.com>
    
      8# Contributor: Mateusz Herych <heniekk@gmail.com>
    
      9# Contributor: ruario <ruario AT opera DOT com>
    
      10# Contributor: Daniel Isenmann <daniel AT archlinux DOT org>
    
      11# Contributor: dorphell <dorphell AT archlinux DOT org>
    
      12# Contributor: Sigitas Mazaliauskas <sigis AT gmail DOT com>
    
      13# Contributor: eworm
    
      14
    
      15pkgname=opera
    
      16pkgver=135.0.5973.133
    
      17pkgrel=2
    
      18pkgdesc="A fast and secure web browser"
    
      19url="https://www.opera.com/"
    
      20options=(!strip !zipman)
    
      21license=('custom:opera')
    
      22backup=("etc/$pkgname/default")
    
      23arch=('x86_64')
    
      24depends=('gtk3' 'alsa-lib' 'libnotify' 'curl' 'nss' 'libcups' 'libxss' 'ttf-font' 'desktop-file-utils' 'shared-mime-info' 'hicolor-icon-theme')
    
      25optdepends=(
    
      26    'qt6-base' 'qt5-base'
    
      27    'upower: opera battery save'
    
      28)
    
      29chromium_version=151.0.7922.170
    
      30source=(
    
      31    "https://get.geo.opera.com/ftp/pub/${pkgname}/desktop/${pkgver}/linux/${pkgname}-stable_${pkgver}_amd64.deb"
    
      32    "opera"
    
      33    "default"
    
      34    'eula.html'
    
      35    'terms.html'
    
      36    'privacy.html'
    
      37    "https://github.com/ModLabsCC/chromium-ffmpeg-prebuilt/releases/download/chromium-${chromium_version}/libffmpeg.so"
    
      38)
    
      39
    
      40sha512sums=('6c15eceb5019ef368ebc9fc5f4b1484a589f48a66566d4841c140f4affba9cefa882c8c5e8b4d59e89d306b54e6151acb1ffbae10281ca28e8597c4026fd3c6f'
    
      41            '7e854e4c972785b8941f60117fbe4b88baeb8d7ca845ef2e10e8064043411da73821ba1ab0068df61e902f242a3ce355b51ffa9eab5397ff3ae3b5defd1be496'
    
      42            'ddb1773877fcfd7d9674e63263a80f9dd5a3ba414cda4cc6c411c88d49c1d5175eede66d9362558ddd53c928c723101e4e110479ae88b8aec4d2366ec179297f'
    
      43            'aaaa4435a3b6a08bf8e6ad4802afcbf111c1e8f477054251f031b70ae57ac1234fa19048121d64c878dc3b1de03522ce7ef11a263a86dc7062f643d569ecff82'
    
      44            '800d62321344ff4e3521ff20fae281cad9206bae80e60965784d144f8bf852f756cbc21f4c9d8d4e93d026da7ca10e0eda7601c83a6d8d85125831eacb907d9a'
    
      45            '43d4a066758805597527dbdfc95b4c8ad4b22c5db812b9493e50f8820c72f30c1e431bed40fdb821ab0c23a63aa31dc0e946ab708cc23ac617446964fa6b96f2'
    
      46            '0ee4b6b9832d0f9e67903e5b0a20696fbcbc5b6656f5aa0bb2b23e4aea04d6aad3c0ae8c21fe68a09816103c07e0ba48f804a4d65ac513721e7bf741e58a596b')
    
      47
    
      48prepare() {
    
      49    sed -e "s/%pkgname%/$pkgname/g" -i "$srcdir/opera"
    
      50    sed -e "s/%operabin%/$pkgname-stable\/$pkgname/g" \
    
      51        -i "$srcdir/opera"
    
      52
    
      53}
    
      54
    
      55package() {
    
      56    tar -xf data.tar.zst --exclude=usr/share/{lintian,menu} -C "$pkgdir/"
    
      57
    
      58    # get rid of the extra subfolder {i386,x86_64}-linux-gnu
    
      59    (
    
      60        cd "$pkgdir/usr/lib/"*-linux-gnu/
    
      61        mv "$pkgname-stable" ../
    
      62    )
    
      63    rm -rf "$pkgdir/usr/lib/"*-linux-gnu
    
      64
    
      65    rm -f "$pkgdir/usr/lib/$pkgname-stable/libffmpeg.so"
    
      66    install -Dm755 "$srcdir/libffmpeg.so" \
    
      67        "$pkgdir/usr/lib/$pkgname-stable/libffmpeg.so"
    
      68
    
      69    # suid opera_sandbox
    
      70    chmod 4755 "$pkgdir/usr/lib/$pkgname-stable/opera_sandbox"
    
      71
    
      72    # install default options
    
      73    install -Dm644 "$srcdir/default" "$pkgdir/etc/$pkgname/default"
    
      74
    
      75    # install opera wrapper
    
      76    rm "$pkgdir/usr/bin/$pkgname"
    
      77    install -Dm755 "$srcdir/opera" "$pkgdir/usr/bin/$pkgname"
    
      78
    
      79    # license
    
      80    install -Dm644 \
    
      81        "$pkgdir/usr/share/doc/${pkgname}-stable/copyright" \
    
      82        "$pkgdir/usr/share/licenses/$pkgname/copyright"
    
      83
    
      84    # eula
    
      85    install -Dm644 \
    
      86        "$srcdir/eula.html" \
    
      87        "$pkgdir/usr/share/licenses/$pkgname/eula.html"
    
      88
    
      89    # terms
    
      90    install -Dm644 \
    
      91        "$srcdir/terms.html" \
    
      92        "$pkgdir/usr/share/licenses/$pkgname/terms.html"
    
      93
    
      94    # privacy
    
      95    install -Dm644 \
    
      96        "$srcdir/privacy.html" \
    
      97        "$pkgdir/usr/share/licenses/$pkgname/privacy.html"
    
      98}
    
      99

Changes since previous scan

--- PKGBUILD @ 2026-09-15 00:25
+++ PKGBUILD @ 2026-09-17 00:27
@@ -13,7 +13,7 @@
 # Contributor: eworm
 
 pkgname=opera
-pkgver=135.0.5973.123
+pkgver=135.0.5973.133
 pkgrel=2
 pkgdesc="A fast and secure web browser"
 url="https://www.opera.com/"
@@ -37,7 +37,7 @@
     "https://github.com/ModLabsCC/chromium-ffmpeg-prebuilt/releases/download/chromium-${chromium_version}/libffmpeg.so"
 )
 
-sha512sums=('6ec5076f31e049b606972f21874d500a135bd40aec468a70bcaf72dbf56e64c4997540ee045bce1566eef77d55d9eb1c2bd87f6188173216071fd480db4659c4'
+sha512sums=('6c15eceb5019ef368ebc9fc5f4b1484a589f48a66566d4841c140f4affba9cefa882c8c5e8b4d59e89d306b54e6151acb1ffbae10281ca28e8597c4026fd3c6f'
             '7e854e4c972785b8941f60117fbe4b88baeb8d7ca845ef2e10e8064043411da73821ba1ab0068df61e902f242a3ce355b51ffa9eab5397ff3ae3b5defd1be496'
             'ddb1773877fcfd7d9674e63263a80f9dd5a3ba414cda4cc6c411c88d49c1d5175eede66d9362558ddd53c928c723101e4e110479ae88b8aec4d2366ec179297f'
             'aaaa4435a3b6a08bf8e6ad4802afcbf111c1e8f477054251f031b70ae57ac1234fa19048121d64c878dc3b1de03522ce7ef11a263a86dc7062f643d569ecff82'

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Medium	2
2026-09-16 00:03:17	Medium	2
2026-09-15 15:19:57	Medium	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 03:10:21	Medium	1
2026-09-12 00:25:17	Medium	2
2026-09-11 00:19:22	Medium	2
2026-09-10 15:20:39	Medium	2
2026-09-10 00:22:44	Medium	2
2026-09-09 00:04:09	Medium	2
2026-09-08 00:18:08	Medium	2
2026-09-07 00:30:15	Medium	2
2026-09-06 00:17:06	Medium	2
2026-09-05 00:16:27	Medium	2
2026-09-04 15:58:02	Medium	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 15:51:02	Medium	1