Comment
The change replaces a large set of ROCm package sources with five HTTPS .deb downloads from AMD’s official repo and removes many older conflicts/source entries. From a security perspective, this is not inherently suspicious: the URLs are HTTPS, point to an official vendor domain, and the files are pinned by sha256 sums. However, the package is now relying on prebuilt binary .deb artifacts from an external repository, which reduces transparency and shifts trust to AMD’s packaging. I do not see evidence in this diff of build-time network fetching beyond declared sources, privilege escalation, or install-script persistence. Overall this looks like a packaging/source refresh rather than a malicious change.
@@ -52,64 +33,24 @@ pkgbase = opencl-amd
conflicts = hsa-rocr
conflicts = rocminfo
conflicts = hip-runtime-amd
- conflicts = rocm-device-libs
- conflicts = rocm-language-runtime
conflicts = rocm-hip-runtime
conflicts = rocm-ocl-icd
conflicts = rocm-opencl-icd-loader
conflicts = rocm-opencl
conflicts = rocm-opencl-runtime
- conflicts = rocm-dbgapi
- conflicts = rocm-debug-agent
- conflicts = rocm-gdb
- conflicts = rocprofiler
- conflicts = rocprofiler-plugins
conflicts = rocprofiler-register
- conflicts = roctracer
conflicts = hsa-amd-aqlprofile
- conflicts = rocm-openmp
- conflicts = openmp-extras-runtime
conflicts = rocm-cmake
conflicts = rocm-smi-lib
- conflicts = amdsmi
- conflicts = amd-smi-lib
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/a/amd-smi-lib/amd-smi-lib_26.2.2.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/c/comgr/comgr_3.0.0.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/h/hsa-amd-aqlprofile/hsa-amd-aqlprofile_1.0.0.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/h/hsa-rocr/hsa-rocr_1.18.0.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/h/hsa-rocr-dev/hsa-rocr-dev_1.18.0.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/h/hip-runtime-amd/hip-runtime-amd_7.2.53211.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/r/rocm-core/rocm-core_7.2.3.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/r/rocminfo/rocminfo_1.0.0.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/r/rocm-opencl/rocm-opencl_2.0.0.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/r/rocm-opencl-dev/rocm-opencl-dev_2.0.0.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/r/rocm-smi-lib/rocm-smi-lib_7.8.0.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/r/rocm-device-libs/rocm-device-libs_1.0.0.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/r/rocprofiler/rocprofiler_2.0.70203.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/r/rocprofiler-dev/rocprofiler-dev_2.0.70203.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/r/rocprofiler-plugins/rocprofiler-plugins_2.0.70203.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/r/rocprofiler-register/rocprofiler-register_0.6.0.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/r/rocm-dbgapi/rocm-dbgapi_0.77.4.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/r/rocm-debug-agent/rocm-debug-agent_2.1.0.70203-90~24.04_amd64.deb
- source = https://repo.radeon.com/rocm/apt/7.2.3/pool/main/r/rocm-gdb/rocm-gdb_16.3.70203-90~24.04_amd64.deb
- sha256sums = 3148f477df52f1c02e20b76d450090a357b9d1d28d463b23acfd9adf433aaef0
- sha256sums = 8b06233cf94891404a1485f435045edafa842441e3d6358b1fa5f9783ea540c2
- sha256sums = bef36b3785c2687cf3a8692a4337adcd2907fad1441e861985689fbf159a6b2f
- sha256sums = 6c8ac83309637e162ed26eb8c97fdf347e6fc6d9700914d75650e85397c1821e
- sha256sums = c609150ac4e1a3fa281110c6bc66cf425956599dae84f375fd693d7104b11378
- sha256sums = a23c99e2f0ebf7c1287417a6dca63643670d54fd94380122674fba80686edeea
- sha256sums = 372cce4b73ba244a1b93147f1e3fde111e41506e59ea0d04a23d284666f6d0e2
- sha256sums = 4e06521d158ed07775239ec684d8e3c9cb59edb406891c9a18358ec7bc3247c0
- sha256sums = a741d6b2465153b965afca82d2a2d95894790f392c8354d5152c83613d4da4af
- sha256sums = 9b7745d0d4ee7013cbcd6a269b1fa1862cb4ae346abe10184fc28a0834dc90a4
- sha256sums = 2997c3db8b5871861371fa61bd4380fed4ed8c9df095d08375694d562aa4e0a9
- sha256sums = a650e69a9fdd4e658217bea3bebeb477cade8107f3cf6e921cf821e592cc8035
- sha256sums = dbf225f1438bab3e6ab2f2b960307d9fdf4269836dd9b86125a4bdadd2c5cdb9
- sha256sums = 4dc709135b9ab3febb57a93ce57a1533b5c6059902ed278512a0d8139f1a7d9b
- sha256sums = b9651471e7d14f53d8a91ec16aa55656e0cb141f3637a9b4677c04d01d63628e
- sha256sums = ebb06aec60237fd853ca42b2c2fceab2739db8f1ba9c08afc625dc9d1a4f91ef
- sha256sums = 53dcabcc2aeafefcaeaa1148b08b041a35791d78626061cfa4252743fc12ad58
- sha256sums = 27b8273d43a9bb696f6c0e4fecef043a80a1e2a9d9e62b3132ec36ce5b35df2e
- sha256sums = 29cc9ea655ade19c0b5fd31eea42f2e6c0ca07acb77edc3ecd5e158118cd729d
+ source = https://repo.amd.com/rocm/packages-multi-arch/ubuntu2604/pool/main/amdrocm-sysdeps7.14_7.14.0-3_amd64.deb
+ source = https://repo.amd.com/rocm/packages-multi-arch/ubuntu2604/pool/main/amdrocm-llvm7.14_7.14.0-3_amd64.deb
+ source = https://repo.amd.com/rocm/packages-multi-arch/ubuntu2604/pool/main/amdrocm-runtime7.14_7.14.0-3_amd64.deb
+ source = https://repo.amd.com/rocm/packages-multi-arch/ubuntu2604/pool/main/amdrocm-base7.14_7.14.0-3_amd64.deb
+ source = https://repo.amd.com/rocm/packages-multi-arch/ubuntu2604/pool/main/amdrocm-opencl7.14_7.14.0-3_amd64.deb
+ sha256sums = c28c1863f3f5006fb60976e5dde098fa8ae8fe8e4b65f02116586d68fc261a00
+ sha256sums = e1f1e278f87e35d6d52b2fceb01e083a1ef6e2ed808eb30701f6e7cf0a332d98
+ sha256sums = 19d6547f447dcfab9890d3608c5aa9b35647ab293bfb5ffbc829402e6fcc7233
+ sha256sums = 23a5667f15b45fcc1b06197eed8800d8d6757e7fd7f8806557eb7e9d80715358
+ sha256sums = 5bc27da187b44592ed04e674a00668dbe8b73bb9a87d820c31a366905dcac772
pkgname = opencl-amd