Arch Linux User Repository

Seems that somebody has made malicious requests to merge this package into "ffmpeg-full", as well as to orphan this image. Please note that this is NOT a valid request, and that you should not install whatever ffmpeg-full is.

Hopefully AUR will deny these requests, but please be alert and double check when updating packages.

@ratbox

The releases on the AUR are done automatically every hour. The issue is that sometimes the zen team does a release, then the script runs and updates the AUR package. And then they undo/remove the release. If this happens again simply wait another hour and the script will automatically update the AUR repo with the newest published version.

Thank you for understanding

For those coming from https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/7EZTJXLIAQLARQNTMEW2HBWZYE626IFJ/, note that the malware is from zen-browser-PATCHED-bin. This package has not been compromised.

zen-browser-1.15.3b-1-x86_64.tar.xz still fails:

[thomas@roamer ~]$ LANG=C yay zen-browser-bin
1 aur/zen-browser-bin 1.15.3b-1 (+207 31.74) (Installed: 1.15.2b-1)
    Performance oriented Firefox-based web browser
==> Packages to install (eg: 1 2 3, 1-3 or ^4)
==> 1
AUR Explicit (1): zen-browser-bin-1.15.3b-1
:: PKGBUILD up to date, skipping download: zen-browser-bin
  1 zen-browser-bin                  (Installed) (Build Files Exist)
==> Packages to cleanBuild?
==> [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)
==> I
:: Deleting (1/1): /home/thomas/.cache/yay/zen-browser-bin
HEAD is now at b766f6a chore: Update to version 1.15.3b
Removing src/
Removing zen-browser-1.15.3b-1-x86_64.tar.xz
  1 zen-browser-bin                  (Installed) (Build Files Exist)
==> Diffs to show?
==> [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)
==> 
==> Making package: zen-browser-bin 1.15.3b-1 (Mi 03 Sep 2025 22:13:22 CEST)
==> Retrieving sources...
  -> Found zen-browser.sh
  -> Found zen.desktop
  -> Found policies.json
  -> Downloading zen-browser-1.15.3b-1-x86_64.tar.xz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 78.2M  100 78.2M    0     0  24.8M      0  0:00:03  0:00:03 --:--:-- 28.1M
==> WARNING: Skipping verification of source file PGP signatures.
==> Validating source files with sha256sums...
    zen-browser.sh ... Passed
    zen.desktop ... Passed
    policies.json ... Passed
==> Validating source_x86_64 files with sha256sums...
    zen-browser-1.15.3b-1-x86_64.tar.xz ... FAILED
==> ERROR: One or more files did not pass the validity check!
 -> error downloading sources: /home/thomas/.cache/yay/zen-browser-bin 
         context: exit status 1 


:: (1/1) Parsing SRCINFO: zen-browser-bin
==> Making package: zen-browser-bin 1.15.3b-1 (Mi 03 Sep 2025 22:13:26 CEST)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found zen-browser.sh
  -> Found zen.desktop
  -> Found policies.json
  -> Found zen-browser-1.15.3b-1-x86_64.tar.xz
==> Validating source files with sha256sums...
    zen-browser.sh ... Passed
    zen.desktop ... Passed
    policies.json ... Passed
==> Validating source_x86_64 files with sha256sums...
    zen-browser-1.15.3b-1-x86_64.tar.xz ... FAILED
==> ERROR: One or more files did not pass the validity check!
 -> error making: zen-browser-bin-exit status 1
 -> Failed to install the following packages. Manual intervention is required:
zen-browser-bin - exit status 1

Just double checked the sha256sums and they seem to be correct.

Try running a clean build

With the current version 1.15.3b-1 the validity check fails for me.

Validating source_x86_64 files with sha256sums...
    zen-browser-1.15.3b-1-x86_64.tar.xz ... FAILED

Could you add x-scheme-handler/mailto to the MimeType list in the desktop file? Actually, it may be best to just copy what firefox uses https://gitlab.archlinux.org/archlinux/packaging/packages/firefox/-/blob/f9e329eec6527527c387979e624088aaa03486fb/firefox.desktop#L11:

MimeType=application/json;application/pdf;application/rdf+xml;application/rss+xml;application/x-xpinstall;application/xhtml+xml;application/xml;audio/flac;audio/ogg;audio/webm;image/avif;image/gif;image/jpeg;image/png;image/svg+xml;image/webp;text/html;text/xml;video/ogg;video/webm;x-scheme-handler/chrome;x-scheme-handler/http;x-scheme-handler/https;x-scheme-handler/mailto;

==> ERROR: Error when uploading 'https://github.com/zen-browser/desktop/releases/download/1.15.3b/zen.linux-x86_64.tar.xz ' Interruption... error: couldn't download the sources for "zen-browser-bin-1.15.3b-1": error: failed to build packages: zen-browser-bin-1.15.3b-1

404 issue

@Larvey the PKGBUILD is missing pkgbase, which should be set to zen-browser, and should be used for the installation directory (i.e. /opt/zen-browser instead of /opt/zen-browser-bin).

Drop dbus-glib

Firefox removed this dependency in v120

See: https://bugzilla.mozilla.org/show_bug.cgi?id=1532281

@ratbox

The releases on the AUR are done automatically every hour. The issue is that sometimes the zen team does a release, then the script runs and updates the AUR package. And then they undo/remove the release. If this happens again simply wait another hour and the script will automatically update the AUR repo with the newest published version.

Thank you for understanding

Trying to update this package returned ==> ERROR: Failure while downloading https://github.com/zen-browser/desktop/releases/download/1.14.10b/zen.linux-x86_64.tar.xz.

What I figured out is that the latest release on the GitHub is 1.14.9b, and the included sources tries to add tar.xz files from 1.14.10 which doesn't exist (yet).

Are you fine to switch to /usr/lib/zen from /opt similar with firefox (probably namcap friendly)?

zen-browser.sh should be replaced with symlink to avoid overhead of shell which also allow to simplify desktop entry.