mingw-w64-gnutls

MEDIUM

maintainer Martchus 13 votes scanned 2026-10-20 13:28:00.015066

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=(https://www.gnupg.org/ftp/gcrypt/gnutls/v${pkgver%.*}/${_pkgname}-${pkgver}.tar.xz{,.sig}

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Martchus <martchus@gmx.net>
    
      2
    
      3pkgname=mingw-w64-gnutls
    
      4_pkgname=${pkgname#mingw-w64-}
    
      5pkgver=3.8.13
    
      6pkgrel=1
    
      7pkgdesc='A library which provides a secure layer over a reliable transport layer (mingw-w64)'
    
      8arch=('any')
    
      9url="https://www.gnutls.org/"
    
      10license=('GPL-3.0-or-later AND LGPL-2.1-or-later')
    
      11makedepends=('mingw-w64-configure' 'autogen')
    
      12checkdepends=('mingw-w64-wine')
    
      13depends=('mingw-w64-crt' 'mingw-w64-libtasn1' 'mingw-w64-readline' 'mingw-w64-zlib' 'mingw-w64-nettle' 'mingw-w64-p11-kit' 'mingw-w64-libunistring')
    
      14options=(staticlibs !strip !buildflags)
    
      15optdepends=("mingw-w64-openssl: libgnutls-openssl")
    
      16source=(https://www.gnupg.org/ftp/gcrypt/gnutls/v${pkgver%.*}/${_pkgname}-${pkgver}.tar.xz{,.sig}
    
      17        gnutls-fix-external-libtasn1-detection.patch)
    
      18sha256sums=('ffed8ec1bf09c2426d4f14aae377de4753b53e537d685e604e99a8b16ca9c97e'
    
      19            'SKIP'
    
      20            '8525da75852a516be0cb05df0a770daf19ce0583033260d6cac03a1e40fd2072')
    
      21# validpgpkeys=('462225C3B46F34879FC8496CD605848ED7E69871') # "Daiki Ueno <ueno@unixuser.org>"
    
      22# validpgpkeys=('5D46CB0F763405A7053556F47A75A648B3F9220C') # "Zoltan Fridrich <zfridric@redhat.com>"
    
      23validpgpkeys=('E987AB7F7E89667776D05B3BB0E9DD20B29F1432') # Alexander Sosedkin <monk@unboiled.info>
    
      24
    
      25_architectures=${MINGW_W64_ARCHS:-x86_64-w64-mingw32}
    
      26
    
      27prepare() {
    
      28  cd "${srcdir}/gnutls-${pkgver}"
    
      29  patch -p0 -i ../gnutls-fix-external-libtasn1-detection.patch
    
      30  sed 's/gnutls_srp.c//g' -i lib/Makefile.in
    
      31  sed 's/gnutls_srp.lo//g' -i lib/Makefile.in
    
      32  rm -f lib/minitasn1/*.c lib/minitasn1/*.h
    
      33  sed -i 's/gettime(/benchmark_gettime(/' 'src/benchmark.'{h,c}
    
      34}
    
      35
    
      36build() {
    
      37  cd "${srcdir}/gnutls-${pkgver}"
    
      38  for _arch in ${_architectures}; do
    
      39    mkdir -p build-${_arch} && pushd build-${_arch}
    
      40    export CFLAGS=-fpermissive CXXFLAGS=-fpermissive
    
      41    ${_arch}-configure \
    
      42      --disable-doc \
    
      43      --disable-gtk-doc \
    
      44      --disable-srp-authentication \
    
      45      --disable-rpath \
    
      46      --disable-non-suiteb-curves \
    
      47      --disable-gtk-doc \
    
      48      --disable-full-test-suite \
    
      49      --with-libiconv-prefix=/usr/$_arch \
    
      50      --enable-openssl-compatibility \
    
      51      --enable-nls \
    
      52      --enable-cxx \
    
      53      --without-tpm
    
      54    make
    
      55    popd
    
      56  done
    
      57}
    
      58
    
      59check() {
    
      60  for _arch in ${_architectures}; do
    
      61    cd "${srcdir}/gnutls-${pkgver}/build-${_arch}"
    
      62    export WINEPATH=/usr/${_arch}/bin
    
      63    msg2 'Skipping check due to undefined reference errors'
    
      64    # disable parallel tests:
    
      65    # FAIL: serv-udp.sh
    
      66    #WINEDEBUG=all make -C tests -j1 check
    
      67  done
    
      68}
    
      69
    
      70package() {
    
      71  for _arch in ${_architectures}; do
    
      72    cd "${srcdir}/gnutls-${pkgver}/build-${_arch}"
    
      73    make DESTDIR="$pkgdir" install
    
      74
    
      75    ${_arch}-strip --strip-all "$pkgdir"/usr/${_arch}/bin/*.exe
    
      76    ${_arch}-strip --strip-unneeded "$pkgdir"/usr/${_arch}/bin/*.dll
    
      77    ${_arch}-strip -g "$pkgdir"/usr/${_arch}/lib/*.a
    
      78  done
    
      79}
    
      80

Changes since previous scan

--- PKGBUILD @ 2026-07-21 00:24
+++ PKGBUILD @ 2026-10-20 13:28
@@ -2,7 +2,7 @@
 
 pkgname=mingw-w64-gnutls
 _pkgname=${pkgname#mingw-w64-}
-pkgver=3.8.12
+pkgver=3.8.13
 pkgrel=1
 pkgdesc='A library which provides a secure layer over a reliable transport layer (mingw-w64)'
 arch=('any')
@@ -15,13 +15,14 @@
 optdepends=("mingw-w64-openssl: libgnutls-openssl")
 source=(https://www.gnupg.org/ftp/gcrypt/gnutls/v${pkgver%.*}/${_pkgname}-${pkgver}.tar.xz{,.sig}
         gnutls-fix-external-libtasn1-detection.patch)
-sha256sums=('a7b341421bfd459acf7a374ca4af3b9e06608dcd7bd792b2bf470bea012b8e51'
+sha256sums=('ffed8ec1bf09c2426d4f14aae377de4753b53e537d685e604e99a8b16ca9c97e'
             'SKIP'
             '8525da75852a516be0cb05df0a770daf19ce0583033260d6cac03a1e40fd2072')
-#validpgpkeys=('462225C3B46F34879FC8496CD605848ED7E69871') # "Daiki Ueno <ueno@unixuser.org>"
-validpgpkeys=('5D46CB0F763405A7053556F47A75A648B3F9220C') # "Zoltan Fridrich <zfridric@redhat.com>"
+# validpgpkeys=('462225C3B46F34879FC8496CD605848ED7E69871') # "Daiki Ueno <ueno@unixuser.org>"
+# validpgpkeys=('5D46CB0F763405A7053556F47A75A648B3F9220C') # "Zoltan Fridrich <zfridric@redhat.com>"
+validpgpkeys=('E987AB7F7E89667776D05B3BB0E9DD20B29F1432') # Alexander Sosedkin <monk@unboiled.info>
 
-_architectures='i686-w64-mingw32 x86_64-w64-mingw32'
+_architectures=${MINGW_W64_ARCHS:-x86_64-w64-mingw32}
 
 prepare() {
   cd "${srcdir}/gnutls-${pkgver}"

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-20 13:28:00	Medium	1
2026-07-21 00:24:15	Clean	2
2026-07-20 09:14:00	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1