previewqt (MEDIUM)

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=(https://previewqt.org/downloads/source/$pkgname-$pkgver.tar.gz)

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Lukas Spies <lukas (at) previewqt _dot_ org>
    
      2
    
      3pkgname=previewqt
    
      4pkgver=6.0
    
      5pkgrel=1
    
      6pkgdesc="Simple application for previewing all kinds of files, from images to videos, from documents to archives."
    
      7arch=('x86_64')
    
      8url="http://previewqt.org/"
    
      9license=('GPL2')
    
      10depends=('exiv2' 'imagemagick' 'qt6-imageformats' 'qt6-multimedia' 'qt6-svg' 'qt6-declarative' 'libraw' 'hicolor-icon-theme' 'libarchive' 'kimageformats' 'resvg' 'qt6-webview' 'syntax-highlighting' 'qt6-webview' 'libappimage' 'lcms2')
    
      11optdepends=('yt-dlp: Stream media directly from supported websites'
    
      12            'musescore: Preview MuseScore score sheets'
    
      13            'libreoffice-fresh: Preview office documents (fresh version)'
    
      14            'libreoffice-still: Preview office documents (still version)')
    
      15makedepends=('cmake' 'qt6-tools' 'extra-cmake-modules')
    
      16source=(https://previewqt.org/downloads/source/$pkgname-$pkgver.tar.gz)
    
      17sha256sums=('dfba52e0a04e6f51165f0bf09fa7d1cf7fee706362f7b66a487bad88bc0217fa')
    
      18
    
      19# NOTE
    
      20# To use GraphicsMagick instead of ImageMagick replace it in the depends array above and change
    
      21# '-DIMAGEMAGICK=ON -DGRAPHICSMAGICK=OFF' to '-DIMAGEMAGICK=OFF -DGRAPHICSMAGICK=ON' in the cmake call below.
    
      22
    
      23# NOTE
    
      24# These dependencies are currently disabled in the cmake call below:
    
      25# 'openslide' 'devil-ilut' 'libvips' 'mpv'
    
      26
    
      27prepare() {
    
      28  cd $srcdir/$pkgname-$pkgver
    
      29  cmake . -DCMAKE_INSTALL_PREFIX=/usr -DWITH_FREEIMAGE=OFF -DWITH_DEVIL=OFF -DWITH_POPPLER=OFF -DWITH_QTPDF=ON -DWITH_IMAGEMAGICK=ON -DWITH_GRAPHICSMAGICK=OFF -DWITH_LIBVIPS=OFF -DWITH_LIBMPV=OFF -DWITH_RESVG=ON -DWITH_EPUB=ON -DCMAKE_BUILD_TYPE=Release -DWITH_OPENSLIDE=OFF -DWITH_LIBREOFFICE=ON -DWITH_LIBREOFFICEKIT=OFF
    
      30}
    
      31
    
      32build() {
    
      33  cd $srcdir/$pkgname-$pkgver
    
      34  make
    
      35}
    
      36
    
      37package() {
    
      38  cd $srcdir/$pkgname-$pkgver
    
      39  make DESTDIR=$pkgdir install
    
      40}
    
      41

Changes since previous scan

--- PKGBUILD @ 2026-09-17 00:27
+++ PKGBUILD @ 2026-09-17 09:25
@@ -1,19 +1,20 @@
 # Maintainer: Lukas Spies <lukas (at) previewqt _dot_ org>
 
 pkgname=previewqt
-pkgver=5.0
-pkgrel=2
+pkgver=6.0
+pkgrel=1
 pkgdesc="Simple application for previewing all kinds of files, from images to videos, from documents to archives."
 arch=('x86_64')
 url="http://previewqt.org/"
 license=('GPL2')
-depends=('exiv2' 'imagemagick' 'qt6-imageformats' 'qt6-multimedia' 'qt6-svg' 'qt6-declarative' 'libraw' 'hicolor-icon-theme' 'libarchive' 'kimageformats' 'resvg' 'qt6-webview' 'syntax-highlighting' 'qt6-webview')
+depends=('exiv2' 'imagemagick' 'qt6-imageformats' 'qt6-multimedia' 'qt6-svg' 'qt6-declarative' 'libraw' 'hicolor-icon-theme' 'libarchive' 'kimageformats' 'resvg' 'qt6-webview' 'syntax-highlighting' 'qt6-webview' 'libappimage' 'lcms2')
 optdepends=('yt-dlp: Stream media directly from supported websites'
-            'libqpsd-git: PSB/PSD support'
-            'xcftools: XCF support')
+            'musescore: Preview MuseScore score sheets'
+            'libreoffice-fresh: Preview office documents (fresh version)'
+            'libreoffice-still: Preview office documents (still version)')
 makedepends=('cmake' 'qt6-tools' 'extra-cmake-modules')
 source=(https://previewqt.org/downloads/source/$pkgname-$pkgver.tar.gz)
-sha256sums=('0da4a03e2d75e5e1c1b92615034081449ab69e28bcec5ae2d3457be26693140d')
+sha256sums=('dfba52e0a04e6f51165f0bf09fa7d1cf7fee706362f7b66a487bad88bc0217fa')
 
 # NOTE
 # To use GraphicsMagick instead of ImageMagick replace it in the depends array above and change
@@ -21,11 +22,11 @@
 
 # NOTE
 # These dependencies are currently disabled in the cmake call below:
-# 'freeimage' 'devil-ilut' 'poppler-qt6' 'libvips' 'mpv'
+# 'openslide' 'devil-ilut' 'libvips' 'mpv'
 
 prepare() {
   cd $srcdir/$pkgname-$pkgver
-  cmake . -DCMAKE_INSTALL_PREFIX=/usr -DWITH_FREEIMAGE=OFF -DWITH_DEVIL=OFF -DWITH_POPPLER=OFF -DWITH_QTPDF=ON -DWITH_IMAGEMAGICK=ON -DWITH_GRAPHICSMAGICK=OFF -DWITH_LIBVIPS=OFF -DWITH_LIBMPV=OFF -DWITH_RESVG=ON -DWITH_EPUB=ON -DCMAKE_BUILD_TYPE=Release
+  cmake . -DCMAKE_INSTALL_PREFIX=/usr -DWITH_FREEIMAGE=OFF -DWITH_DEVIL=OFF -DWITH_POPPLER=OFF -DWITH_QTPDF=ON -DWITH_IMAGEMAGICK=ON -DWITH_GRAPHICSMAGICK=OFF -DWITH_LIBVIPS=OFF -DWITH_LIBMPV=OFF -DWITH_RESVG=ON -DWITH_EPUB=ON -DCMAKE_BUILD_TYPE=Release -DWITH_OPENSLIDE=OFF -DWITH_LIBREOFFICE=ON -DWITH_LIBREOFFICEKIT=OFF
 }
 
 build() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 09:25:44	Medium	1
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2