rxvt-unicode-truecolor-wide-glyphs
LOW
maintainer mrdotx
20 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from the project's official host (schmorp.de), which is not on the whitelist but is the legitimate upstream for rxvt-unicode; the package builds from source with verifiable signatures, posing no supply-chain risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official host (schmorp.de), which is not on the whitelist but is the legitimate upstream for rxvt-unicode; the package builds from source with verifiable signatures, posing no supply-chain risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:42
"https://dist.schmorp.de/$_pkgname/Attic/$_archive.tar.bz2"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: mrdotx <klassiker@gmx.de>
2
# Contributor: ferdig <ferdinand.goldmann@jku.at>
3
_pkgname=rxvt-unicode
4
pkgname=rxvt-unicode-truecolor-wide-glyphs
5
pkgdesc='Unicode enabled rxvt-clone terminal emulator (urxvt) with true color, enhanced glyphs and improved font rendering support'
6
pkgver=9.31
7
pkgrel=14
8
url='https://software.schmorp.de/pkg/rxvt-unicode.html'
9
arch=('i686' 'x86_64')
10
license=('GPL-3.0-only')
11
# WORKAROUND: using gcc15 because some features (e.g., daemon/client)
12
# don't work when compiled with gcc16
13
makedepends=(
14
'signify'
15
'gcc15'
16
)
17
depends=(
18
'libxft'
19
'libxt'
20
'libxext'
21
'libxmu'
22
'perl'
23
'startup-notification'
24
'libnsl'
25
'libptytty'
26
)
27
optdepends=('gtk2-perl: to use the urxvt-tabbed')
28
provides=(
29
'rxvt-unicode'
30
'rxvt-unicode-terminfo'
31
'urxvt-resize-font'
32
'urxvt-keyboard-select'
33
)
34
conflicts=(
35
'rxvt-unicode'
36
'rxvt-unicode-terminfo'
37
'urxvt-resize-font'
38
'urxvt-perls'
39
)
40
_archive="$_pkgname-$pkgver"
41
source=(
42
"https://dist.schmorp.de/$_pkgname/Attic/$_archive.tar.bz2"
43
"$_archive.tar.bz2.signature::https://dist.schmorp.de/$_pkgname/Attic/$_archive.tar.bz2.sig"
44
'dist.schmorp.de.pub::https://dist.schmorp.de/signing-key.pub'
45
'urxvt.desktop'
46
'urxvtc.desktop'
47
'urxvt-tabbed.desktop'
48
'resize-font'
49
'keyboard-select'
50
'7-bit-queries.patch'
51
'lines-rewrap.patch'
52
'24-bit-color.patch'
53
'enable-wide-glyphs.patch'
54
'improve-font-rendering.patch'
55
'osc-110-112-reset.patch'
56
'linear-interpolation.patch'
57
)
58
b2sums=('439a8c33b7260e0f2fd68b8a4409773c06c3bb7623b5dfbbb0742cc198c9fd25e8a247907878639db5fac3dcd3b6be3d839347787bcf08ca602ae246607f750b'
59
'1c58b1d53c72dbfae4f9302f5903365f84e85b2a1e9846d9dd9c712a7900e73a94621a41bee6dd75d690df8ae95d1d987d93ca4355eb8d8c423c57680df0edcf'
60
'6d6bd90b77e67ccb876f0c78c710c9e1b82767a19aeadaac9310e5628b791586fc8475ad5179eaa2fee386ae80aae916226167ec92c5af309bba4052238326c8'
61
'eff2407a1551d57d7a9e9000a9bad760afd4d9b7a0fa15c375ec821d185561a99c3761319c1cbed5cdd512b39faf339fb78387220eae161c9a33a859fc4733d2'
62
'2c4bc054e89b1bbd9ebce18cee64728b5ebb3aa915ce3ec7957e1a95da34c26ea757d324041b6c65db5902b60d0009176ff6aabc5093c5b2665c4b6997a3f60f'
63
'71072f1f262b0759f0251654b7563e0dc5b3f73bc3705321d4e75230c51692541a8f5aa289657714baeab93a9e7b404a0b3ce0eecafb116c389a640209916916'
64
'7f760beda37d781ae5bfff280fb912b3210ed4e60c82d279706feb023e5e10e9c5abe8eaa9bef6d7da460df39808c56de91ee2d5ffc63ea0c2e402810fa3dfb5'
65
'9e3c03390d44a53b933fd6e11f3b644c43f377d3848975d9a5d1b964b042aca08995c968ada22b143bdc014691282242c8e718820f16086b35588242eb71a15b'
66
'74a5a77d3c76783448e4765a18c0dd7cda5823ce4e6fad747739496202eb991d8a8ac6a26e23492b9902f920b30f32cd533384bd27ef352c82cccb943cd8e5c0'
67
'136ffb38a0a5820a413ddf85a88556d57dc5ab9944454596402692f336cbc5ec96180534eba04f0921dfb9dcbe59a0849197842e12c65eab59ef0741e6ee3b91'
68
'564371ab9873c5bf12a95e0a2807a166eb472ae37f1fe6b5e6afd8335ca106f40dbce152fa9df11531df74d75a734cb32be57921223bbd0e7db85f4e27bd0f13'
69
'88c07389328c12b5c639b226d9a41d1d15eddeb7212431653832d53b0b786ef1be1dd7f32023ea19078b103217299fda8333668f73246b660a0e07aaa54ad108'
70
'4365664301075347df66c38ce994ef8700043a2ab09770f3e9caf8c98ba7673ab93507029782cc34efcd6c1cc203b6ea9139a7a411a8f3398f4f43f3bfb58519'
71
'8da9911519554ba63ad32e56a492039d075861f5516a56a334cf6c988d3fc890e82c1fe362da385d44cba4620b6dcedba36c28a2360173cfc14f2b6300775452'
72
'e9ccbb27af3f8e8c8e94f996a36afcbaa400524610a6c1eeee3cb518918322f46bcfeb260188b0b6820f4658baa5eac0cbb0ce4866fb9bdeceb63e725a298794')
73
74
prepare() {
75
mv -v "$_archive.tar.bz2.signature" "$_archive.tar.bz2.sig"
76
signify -V -p "dist.schmorp.de.pub" -m "$_archive.tar.bz2"
77
78
cd "$_archive"
79
80
# WORKAROUND: force gcc15 for building and linking
81
export CC=gcc-15
82
export CXX=g++-15
83
84
# WORKAROUND: multiple-char sequence for 7-bit queries
85
# https://lists.schmorp.de/pipermail/rxvt-unicode/2023q1/002640.html
86
patch -p1 -i ../7-bit-queries.patch
87
88
# WORKAROUND: prompt position (revert lines-rewrap update in screen.C to 9.30)
89
# https://lists.schmorp.de/pipermail/rxvt-unicode/2023q2/002661.html
90
# https://wiki.archlinux.org/title/Rxvt-unicode#Wrong_shell_prompt_placement_after_upgrading_to_9.31
91
patch -p1 -i ../lines-rewrap.patch
92
93
################################################################
94
# #
95
# If someone has better solutions for the rewritten patches, #
96
# please contact me! #
97
# #
98
################################################################
99
100
# the repo with original 24-bit-color.patch is no longer available:
101
# https://gist.githubusercontent.com/dan-santana/63271adf12171e0fc0bc/raw/70c6343d1c0b3bca0aba4f587ed501e6cbd98d00/24-bit-color.patch
102
# patch rewritten to work with version ≥ 9.26
103
patch -p1 -i ../24-bit-color.patch
104
105
# https://aur.archlinux.org/packages/rxvt-unicode-cvs-patched-wideglyphs
106
patch -p1 -i ../enable-wide-glyphs.patch
107
108
# https://gist.githubusercontent.com/emonkak/28bbc5474697695321452b6d9bf1d0bd/raw/a888c37ae10376598e663cf989132648f89219c0/rxvt-unicode-9.22-improve-font-endering.patch
109
# patch rewritten to work with version ≥ 9.29
110
patch -p1 -i ../improve-font-rendering.patch
111
112
# WORKAROUND: reset the terminal bg/fg/cursor colors via OSC 110/111/112
113
# https://patch-diff.githubusercontent.com/raw/exg/rxvt-unicode/pull/6.patch
114
patch -p1 -i ../osc-110-112-reset.patch
115
116
# WORKAROUND: prevent lerp errors during compilation
117
# in c++20 (default in gcc16) lerp is declared globally (std::lerp) as float,
118
# unlike rxvt lerp which uses int
119
patch -p1 -i ../linear-interpolation.patch
120
}
121
122
build() {
123
cd "$_archive"
124
125
################################################################
126
# #
127
# This is an opinionated build. If you miss features, feel #
128
# free to enable them below before you build the package. #
129
# (e.g. --enable-pixbuf and --enable-fading) #
130
# #
131
################################################################
132
133
# disable smart-resize (FS#34807)
134
# do not specify --with-terminfo (FS#46424)
135
# do not specify --disable-frills (FS#77474)
136
# workaround ncurses --disable-root-access (FS#79143)
137
export TIC="/usr/bin/tic -o $srcdir/terminfo"
138
./configure \
139
--prefix=/usr \
140
--enable-xft \
141
--enable-font-styles \
142
--enable-xim \
143
--enable-unicode3 \
144
--enable-combining \
145
--disable-fallback \
146
--disable-pixbuf \
147
--disable-startup-notification \
148
--enable-transparency \
149
--disable-fading \
150
--disable-rxvt-scroll \
151
--disable-next-scroll \
152
--disable-xterm-scroll \
153
--enable-frills \
154
--disable-iso14755 \
155
--disable-keepscrolling \
156
--enable-selectionscrolling \
157
--enable-mousewheel \
158
--disable-slipwheeling \
159
--disable-smart-resize \
160
--enable-text-blink \
161
--enable-pointer-blank \
162
--enable-perl \
163
--enable-256-color \
164
--enable-24-bit-color \
165
--enable-wide-glyphs
166
make
167
168
# compile terminfo to custom directory (quick fix ncurses CVE-2023-29491)
169
tic -x -o "terminfo" doc/etc/rxvt-unicode.terminfo
170
}
171
172
package() {
173
# install freedesktop menu
174
for _f in urxvt urxvtc urxvt-tabbed; do
175
install -Dm 644 $_f.desktop "$pkgdir/usr/share/applications/$_f.desktop"
176
done
177
178
# install perl script resize-font (https://github.com/simmel/urxvt-resize-font)
179
install -Dm 644 resize-font "$pkgdir/usr/lib/urxvt/perl/resize-font"
180
181
# install perl script keyboard-select (https://github.com/muennich/urxvt-perls)
182
install -Dm 644 keyboard-select "$pkgdir/usr/lib/urxvt/perl/keyboard-select"
183
184
cd "$_archive"
185
186
# install the compiled terminfos from custom directory (quick fix ncurses CVE-2023-29491)
187
install -Dm 644 terminfo/r/rxvt-unicode "$pkgdir/usr/share/terminfo/r/rxvt-unicode"
188
install -Dm 644 terminfo/r/rxvt-unicode-256color "$pkgdir/usr/share/terminfo/r/rxvt-unicode-256color"
189
190
make DESTDIR="$pkgdir" install
191
192
# install the tabbing wrapper (requires gtk2-perl)
193
sed -i 's/\"rxvt\"/"urxvt"/' doc/rxvt-tabbed
194
install -Dm 755 doc/rxvt-tabbed "$pkgdir/usr/bin/urxvt-tabbed"
195
}
196
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |