claws-mail-protectedheaders-git

maintainer dreieck · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The flagged non-standard host (web.archive.org) is used to fetch a patch file, but the patch is from an archived official project bug tracker; the source is otherwise the official git repository, and the patch is verified with a checksum, posing minimal risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The flagged non-standard host (web.archive.org) is used to fetch a patch file, but the patch is from an archived official project bug tracker; the source is otherwise the official git repository, and the patch is verified with a checksum, posing minimal risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:156 "${_pkgname}::git://git.claws-mail.org/claws.git#branch=${_gitbranch}"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:  dreieck (https://aur.archlinux.org/account/dreieck)
    
      2# Contributor: Christian Hesse
    
      3
    
      4_USE_CCACHE=false
    
      5if which ccache > /dev/null 2>&1; then
    
_USE_CCACHE=true
    
      7fi
    
      8_WITH_NETWORKMANAGER=false
    
      9# _WITH_NETWORKMANAGER=true
    
      10# _WITH_VALGRIND=false
    
      11_WITH_VALGRIND=true
    
      12# _TOOLKIT='gtk2'
    
      13_TOOLKIT='gtk3'
    
      14_PROTECTEDHEADERSPATCHVARIANT=nopicturesplease # Use the patch from https://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=4426#c39, or a newer one sent e.g. manually via email.
    
      15# _PROTECTEDHEADERSPATCHVARIANT=filippo          # Use the patch from https://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=4007#c4.
    
      16
    
      17_pkgname='claws-mail'
    
      18case "${_TOOLKIT}" in
    
'gtk2')
    
  _pkgvariant="${_TOOLKIT}"
    
  _gitbranch="${_TOOLKIT}"
    
;;
    
'gtk3')
    
  _pkgvariant="protectedheaders"
    
  _gitbranch='master'
    
;;
    
*)
    
  _pkgvariant="${_TOOLKIT}-protectedheaders"
    
  _gitbranch="${_TOOLKIT}"
    
;;
    
      31esac
    
      32
    
      33pkgname="${_pkgname}-${_pkgvariant}-git"
    
      34epoch=0
    
      35pkgver=4.3.1+206.r13691.20260203.450a0ac32
    
      36pkgrel=1
    
      37pkgdesc="A GTK based e-mail client. Latest git checkout, built against '${_TOOLKIT}'. Patched to use charset supersets to decode titles and to display protected headers."
    
      38arch=(
    
'i686'
    
'x86_64'
    
      41)
    
      42license=('GPL-3.0-or-later')
    
      43url='https://www.claws-mail.org/'
    
      44depends=(
    
'cairo'
    
'compface'
    
'dbus-glib'
    
'enchant'
    
'gdk-pixbuf2'
    
'glib2'
    
'glibc'
    
'gnutls'
    
'gpgme'
    
"${_TOOLKIT}"
    
'hicolor-icon-theme'
    
'libice'
    
'libetpan'
    
'libsm'
    
'libldap'
    
'librsvg'
    
'nettle'
    
'pango'
    
'startup-notification'
    
      64)
    
      65makedepends=(
    
'ayatana-ido'
    
'git'
    
'glib2-devel'
    
'python>=3'
    
'spamassassin'
    
# dependencies for plugins:
    
'bogofilter'
    
'dillo'
    
'gumbo-parser>=0.12'
    
'libayatana-appindicator'
    
'libcanberra'
    
'libdbusmenu-glib'
    
'libgdata'
    
'libgoa'
    
'libical'
    
'libnotify'
    
'libxml2'
    
'libytnef'
    
'poppler-glib'
    
# 'pygtk' # This requires python2 stuff to build. Most probably obsolete as (make) dependency.
    
# dependencies to build the docs:
    
'docbook-utils'
    
'lynx'
    
'texlive-bin'
    
'texlive-core'
    
'texlive-formatsextra'
    
      92)
    
      93optdepends=(
    
'claws-mail-theme-basicsvg: BasicSVG icon theme for Claws Mail.'
    
'claws-mail-tango-theme: Tango icon theme for Claws Mail.'
    
'papirus-claws-mail-theme: Papirus icon theme for Claws Mail.'
    
"claws-mail-plugin-reloader: Reload plugins from the 'tools' menu (for development)."
    
'bash:              for some extra tools.'
    
'at-spi2-core:      for many plugins.'
    
'bogofilter:        for bogofilter plugin.'
    
'curl:              for vcalendar, rssyl and spamreport plugins.'
    
'dbus:              for notification plugin.'
    
'libx11:            for notification plugin.'
    
'dillo:             for dillo html viewer plugin.'
    
'expat:             for rssyl plugin.'
    
'fontconfig:        for litehtml_viewer plugin.'
    
'freetype2:         for litehtml_viewer plugin.'
    
'gcc-libs:          for litehtml_viewer plugin.'
    
'gumbo-parser>=0.12: for litehtml_viewer plugin.'
    
'ghostscript:       for pdf viewer plugin.'
    
'harfbuzz:          for many plugins'
    
'jpilot:            for jpilot (palm pilot connection) plugin.'
    
'libarchive:        for archive plugin and various other plugins.'
    
'ayatana-ido:       for notification plugin.'
    
'libcanberra:       for notification plugin.'
    
'libdbusmenu-glib:  for notification plugin.'
    
'libayatana-appindicator: for notification plugon.'
    
'libgpg-error:      for GPG and S-MIME plugins.'
    
'libical:           for vcalendar plugin.'
    
'libnotify:         for notification plugin.'
    
'libytnef:          for tnef_parse plugin.'
    
'libxcrypt:         for perl plugin.'
    
'perl:              needed for some tools and perl plugin.'
    
'poppler-glib:      for pdf viewer plugin.'
    
'python2:           needed for some tools and python plugin.'
    
'python>=3:         for some tools/ plugins.'
    
'spamassassin:      for spamassassin plugin.'
    
'zlib:              for many plugins.'
    
'json-glib:         for gdata plugin.'
    
'libgdata:          for gdata plugin.'
    
'libgoa:            for gdata plugin.'
    
'libxml2:           for gdata plugin.'
    
      133)
    
      134replaces=(
    
'claws-mail-extra-plugins'
    
'sylpheed-claws'
    
      137)
    
      138conflicts=(
    
'claws'
    
"${_pkgname}"
    
"${_pkgname}-${_pkgvariant}"
    
"${_pkgname}-bash-completion"
    
'claws-mail-extra-plugins'
    
'sylpheed-claws'
    
      145)
    
      146provides=(
    
"claws=${pkgver}"
    
"${_pkgname}=${pkgver}"
    
"${_pkgname}-${_TOOLKIT}=${pkgver}"
    
"${_pkgname}-title-superset=${pkgver}"
    
"${_pkgname}-protectedheaders=${pkgver}"
    
"${_pkgname}-bash-completion"
    
"claws-mail-extra-plugins=${pkgver}"
    
      154)
    
      155source=(
    
"${_pkgname}::git://git.claws-mail.org/claws.git#branch=${_gitbranch}"
    
"0000_encoding.diff::https://aur.archlinux.org/cgit/aur.git/plain/0001_encoding.diff?h=claws-mail-title-superset" ## NOTE!, if this gets removed, adapt the `provides` array and the `$pkgdesc`!
    
      158)
    
      159sha256sums=(
    
'SKIP'                                                              # Main upstream git source
    
'79e2b664d039f5cc0cf642359923e3d100ffc4ab070fc54c02d5792b624e26f6'  # '0000_encoding.diff'
    
      162)
    
      163case "${_PROTECTEDHEADERSPATCHVARIANT}" in
    
'nopicturesplease')
    
  #source+=("0002_protectedheaders.patch::http://web.archive.org/web/20240721164745/https://www.thewildbeast.co.uk/claws-mail/bugzilla/attachment.cgi?id=2331")
    
  #sha256sums+=('383f4ea03102ed2c8f19365b9bf2b757969d1617fcfd0a8375126f388cc60301')
    
  #source+=('protected-headers.nopicturesplease.2026-01-21.6500e351c6889502e15a0b7365dba516142c9d65.patch')
    
  source+=('protected-headers.nopicturesplease.2026-02-06.450a0ac32ea2c7f621ee21a86d8d53d3766efc14.patch')
    
  sha256sums+=('f802afc82887fc0601f819cb05196ed9cc2dae08e9d482d9a0456ed79a1230b4')
    
  if [ "${_TOOLKIT}" == "gtk2" ]; then
    
    source+=("protectedheaders.patch.for-gtk2.patch")
    
    sha256sums+=('3b1e568398950eb93d879353cfd6d49d81f7e1790c24972f36846f22ef4106cb')
    
  fi
    
;;
    
'filippo')
    
  source+=("read_enc_subject.tar.gz::http://web.archive.org/web/20240721164805/https://www.thewildbeast.co.uk/claws-mail/bugzilla/attachment.cgi?id=2350")
    
  sha256sums+=('70b2595830dce73d85600190258389216b4aa613f88ebbedc6088a806c7b01f1')
    
;;
    
*)
    
  error "Please edit the 'PKGBUILD' to specify a valid provider of the protected headers patch (variable '_PROTECTEDHEADERSPATCHVARIANT' at the beginning of the 'PKGBUILD')."
    
  exit 1
    
;;
    
      183esac
    
      184
    
      185
    
      186if "${_USE_CCACHE}"; then
    
makedepends+=('ccache')
    
options+=('ccache')
    
      189fi
    
      190if [ "${_TOOLKIT}" == "gtk2" ]; then
    
_fancy_config_opts=('--disable-fancy-plugin')
    
      192else
    
makedepends+=(
    
  'libsoup3'
    
  'webkit2gtk-4.1'
    
)
    
optdepends+=(
    
  'libjavascriptcoregtk-4.1.so: for fancy webkit html viewer plugin.'
    
  'libwebkit2gtk-4.1.so:        for fancy webkit html viewer plugin.'
    
  'libsoup3:                    for fancy webkit html viewer plugin.'
    
)
    
_fancy_config_opts=('--enable-fancy-plugin')
    
      203fi
    
      204if "${_WITH_NETWORKMANAGER}"; then
    
makedepends+=('networkmanager')
    
optdepends+=('networkmanager:    for NetworkManager network connection query.')
    
_networkmanager_config_opts=('--enable-networkmanager')
    
      208else
    
_networkmanager_config_opts=('--disable-networkmanager')
    
      210fi
    
      211if "${_WITH_VALGRIND}"; then
    
makedepends+=('valgrind')
    
_valgrind_config_opts=('--enable-valgrind')
    
      214else
    
_valgrind_config_opts=('--disable-valgrind')
    
      216fi
    
      217
    
      218
    
      219prepare() {
    
cd "${srcdir}/${_pkgname}"
    
      221
    
#for _patch in "${srcdir}/....patch"; do
    
#  printf '%s\n' "   > Applying patch '$(basename "${_patch}")' ..."
    
#  patch -Np1 --follow-symlinks -i "${_patch}"
    
#done
    
rm -fv po/Makefile.in.in
    
      227
    
for _patch in "${srcdir}/0000_encoding.diff"; do
    
 printf '%s\n' "   > Applying patch '${_patch}' ..."
    
 patch -N -p1 --follow-symlinks -i "${_patch}"
    
done
    
      232
    
case "${_PROTECTEDHEADERSPATCHVARIANT}" in
    
 'nopicturesplease')
    
   cp  "${srcdir}/protected-headers.nopicturesplease.2026-02-06.450a0ac32ea2c7f621ee21a86d8d53d3766efc14.patch" "${srcdir}/0002_protectedheaders.patch"
    
   if [ "${_TOOLKIT}" == "gtk2" ]; then
    
     printf '%s\n' "   > Patching '0002_protectedheaders.patch' for GTK2 ..."
    
     patch -N --follow-symlinks -i "${srcdir}/protectedheaders.patch.for-gtk2.patch" -o "${srcdir}/0002_protectedheaders-${_TOOLKIT}.patch" "${srcdir}/0002_protectedheaders.patch"
    
   else
    
     cp "${srcdir}/0002_protectedheaders.patch" "${srcdir}/0002_protectedheaders-${_TOOLKIT}.patch"
    
   fi
    
   for _patch in "${srcdir}/0002_protectedheaders-${_TOOLKIT}.patch"; do
    
     printf '%s\n' "   > Applying patch '${_patch}' ..."
    
     patch -N -p1 --follow-symlinks -i "${_patch}"
    
   done
    
 ;;
    
 'filippo')
    
   for _patch in "${srcdir}"/{0001-PGP-MIME-fix-leak-of-MimeInfo-if-parsing-fails,0002-Substitute-Subject-header-when-decrypting,0003-TextView-move-header-extraction-to-textview_process_,0004-PGPMime-return-full-decrypted-message-instead-of-fir}.patch; do
    
     printf '%s\n' "   > Applying patch '${_patch}' ..."
    
     patch -N -p1 --follow-symlinks -i "${_patch}"
    
   done
    
 ;;
    
 *)
    
   error "Please edit the 'PKGBUILD' to specify a valid provider of the protected headers patch (variable '_PROTECTEDHEADERSPATCHVARIANT' at the beginning of the 'PKGBUILD')."
    
   return 1
    
 ;;
    
esac
    
      258
    
printf '%s\n' "   > Generating git log ..."
    
git log > "${srcdir}/git.log"
    
      261
    
# Generate ./configure
    
# if [ ! -e configure ]; then
    
printf '%s\n' "   > Generating './configure' ..."
    
NOCONFIGURE=1 ./autogen.sh
    
# fi
    
      267}
    
      268
    
      269pkgver() {
    
cd "${srcdir}/${_pkgname}"
    
      271
    
_ver="$(git describe --tags | sed -E -e 's|^[vV]||' -e 's|\-g[0-9a-f]*$||' | tr '-' '+')"
    
_rev="$(git rev-list --count HEAD)"
    
_date="$(git log -1 --date=format:"%Y%m%d" --format="%ad")"
    
_hash="$(git rev-parse --short HEAD)"
    
      276
    
if [ -z "${_ver}" ]; then
    
  error "Could not determine version."
    
  return 1
    
else
    
  printf '%s' "${_ver}.r${_rev}.${_date}.${_hash}"
    
fi
    
      283}
    
      284
    
      285build() {
    
cd "${srcdir}/${_pkgname}"
    
      287
    
## Silence some compiler warnings (and, just to be sure, do not treat them as errors as well):
    
local _NOWARNINGS _NOWARNINGS_CConly _NOWARNINGS_CXXonly _warning _CFLAGSADDITIONS _CFLAGSADDITIONS_CConly _CFLAGSADDITIONS_CXXonly
    
_NOWARNINGS=('deprecated-declarations' 'unused-result' 'lto-type-mismatch' 'discarded-qualifiers' 'attribute-warning')
    
_NOWARNINGS_CConly=('implicit-function-declaration')
    
_NOWARNINGS_CXXonly=()
    
_CFLAGSADDITIONS=''
    
_CFLAGSADDITIONS_CConly=''
    
_CFLAGSADDITIONS_CXXonly=''
    
for _warning in "${_NOWARNINGS_CConly[@]}"; do
    
  _CFLAGSADDITIONS_CConly+=" -Wno-${_warning} -Wno-error=${_warning}"
    
done
    
for _warning in "${_NOWARNINGS_CXXonly[@]}"; do
    
  _CFLAGSADDITIONS_CXXonly+=" -Wno-${_warning} -Wno-error=${_warning}"
    
done
    
for _warning in "${_NOWARNINGS[@]}"; do
    
  _CFLAGSADDITIONS+=" -Wno-${_warning} -Wno-error=${_warning}"
    
done
    
CFLAGS+="${_CFLAGSADDITIONS} ${_CFLAGSADDITIONS_CConly}"
    
CXXFLAGS+="${_CFLAGSADDITIONS} ${_CFLAGSADDITIONS_CXXonly}"
    
export CFLAGS
    
export CXXFLAGS
    
      309
    
#MAKEFLAGS+=' -j1'
    
#export MAKEFLAGS
    
      312
    
local  _configure_opts
    
_configure_opts=(
    
  --prefix=/usr
    
  --disable-static
    
  --enable-shared
    
  --enable-nls
    
  --enable-manual
    
  --enable-libsm
    
  --enable-ipv6
    
  --enable-gnutls
    
  --enable-enchant
    
  --enable-crash-dialog
    
  --disable-generic-umpc
    
  --enable-compface
    
  --enable-pthread
    
  --enable-startup-notification
    
  --enable-dbus
    
  --enable-ldap
    
  --enable-jpilot
    
  "${_networkmanager_config_opts[@]}"
    
  --enable-libetpan
    
  "${_valgrind_config_opts[@]}"
    
  --disable-alternate-addressbook # add --enable-alternate-addressbook to the options to use the new/alternate address book (which could break things!). Do not forget to add claws-contacts to the dependencies then
    
  --enable-svg
    
  --enable-deprecated
    
  --enable-acpi_notifier-plugin
    
  --enable-address_keeper-plugin
    
  --enable-archive-plugin
    
  --enable-att_remover-plugin
    
  --enable-attachwarner-plugin
    
  --enable-bogofilter-plugin
    
  --enable-bsfilter-plugin
    
  --enable-clamd-plugin
    
  --enable-dillo-plugin
    
  "${_fancy_config_opts[@]}"
    
  --enable-fetchinfo-plugin
    
  --enable-gdata-plugin
    
  --enable-libravatar-plugin
    
  --enable-litehtml_viewer-plugin
    
  --enable-mailmbox-plugin
    
  --enable-managesieve-plugin
    
  --enable-newmail-plugin
    
  --enable-notification-plugin
    
  --enable-pdf_viewer-plugin
    
  --enable-perl-plugin
    
  --enable-python-plugin
    
  --enable-pgpcore-plugin
    
  --enable-pgpmime-plugin
    
  --enable-pgpinline-plugin
    
  --enable-rssyl-plugin
    
  --enable-smime-plugin
    
  --enable-spamassassin-plugin
    
  --enable-spam_report-plugin
    
  --enable-tnef_parse-plugin
    
  --enable-vcalendar-plugin
    
  --enable-demo-plugin
    
)
    
      370
    
printf '%s\n' "   > Running './configure <options>' ..."
    
./configure "${_configure_opts[@]}"
    
printf '%s\n' "   > Running 'make' ..."
    
make
    
      375
    
# build extra tools
    
pushd tools 2>/dev/null
    
printf '%s\n' "   > Running 'make' in './tools/' ..."
    
make
    
popd 2>/dev/null
    
      381}
    
      382
    
      383package() {
    
cd "${srcdir}/${_pkgname}"
    
      385
    
printf '%s\n' "   > Runnung 'make install' ..."
    
make DESTDIR="${pkgdir}" install
    
      388
    
# install extra tools
    
printf '%s\n' "   > Installing extra tools ..."
    
# all executables and .conf files; only top directory
    
pushd tools 2>/dev/null
    
for _file in *.pl *.sh *.py tb2claws-mail update-po uudec uuooffice; do
    
  install -D -v -m755 "${_file}" "${pkgdir}/usr/lib/${_pkgname}/tools/${_file}"
    
done
    
for _file in *.txt *.conf README; do
    
  install -D -v -m644 "${_file}" "${pkgdir}/usr/lib/${_pkgname}/tools/${_file}"
    
done
    
for _dir in kdeservicemenu; do
    
  cp -arv "${_file}" "${pkgdir}/usr/lib/${_pkgname}"/tools/
    
done
    
popd 2>/dev/null
    
      403
    
# Install more information
    
printf '%s\n' "   > Installing extra documentation and license ..."
    
for _docfile in ABOUT-NLS AUTHORS ChangeLog* INSTALL NEWS README RELEASE_NOTES version; do
    
    install -D -v -m644 "${_docfile}" "${pkgdir}/usr/share/doc/${_pkgname}/${_docfile}"
    
done
    
install -D -v -m644 "${srcdir}/git.log" "${pkgdir}/usr/share/doc/${_pkgname}/git.log"
    
ln -svr "${pkgdir}/usr/lib/${_pkgname}/tools/README" "${pkgdir}/usr/share/doc/${_pkgname}/README-tools"
    
ln -svr "${pkgdir}/usr/share/licenses/${pkgname}/COPYING" "${pkgdir}/usr/share/doc/${_pkgname}/COPYING"
    
install -D -v -m644 'COPYING' "${pkgdir}/usr/share/licenses/${pkgname}/COPYING"
    
      413
    
# Install bash completion
    
printf '%s\n' "   > Installing bash completion ..."
    
install -D -v -m644 "tools/bash_completion/claws-mail" "${pkgdir}/usr/share/bash-completion/completions/${_pkgname}"
    
      417}
    
      418

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2