rxvt-unicode-truecolor-wide-glyphs
LOW
maintainer mrdotx
20 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a legitimate project release from the author's own domain, with signature verification; the non-whitelisted host is the official distribution point, and the build process applies only well-documented patches to the source.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a legitimate project release from the author's own domain, with signature verification; the non-whitelisted host is the official distribution point, and the build process applies only well-documented patches to the source.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:39
"https://dist.schmorp.de/$_pkgname/Attic/$_archive.tar.bz2"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: mrdotx <klassiker@gmx.de>
2
# Contributor: ferdig <ferdinand.goldmann@jku.at>
3
_pkgname=rxvt-unicode
4
pkgname=rxvt-unicode-truecolor-wide-glyphs
5
pkgdesc='Unicode enabled rxvt-clone terminal emulator (urxvt) with true color, enhanced glyphs and improved font rendering support'
6
pkgver=9.31
7
pkgrel=16
8
url='https://software.schmorp.de/pkg/rxvt-unicode.html'
9
arch=('i686' 'x86_64')
10
license=('GPL-3.0-only')
11
makedepends=(
12
'signify'
13
)
14
depends=(
15
'libxft'
16
'libxt'
17
'libxext'
18
'libxmu'
19
'perl'
20
'startup-notification'
21
'libnsl'
22
'libptytty'
23
)
24
optdepends=('gtk2-perl: to use the urxvt-tabbed')
25
provides=(
26
'rxvt-unicode'
27
'rxvt-unicode-terminfo'
28
'urxvt-resize-font'
29
'urxvt-keyboard-select'
30
)
31
conflicts=(
32
'rxvt-unicode'
33
'rxvt-unicode-terminfo'
34
'urxvt-resize-font'
35
'urxvt-perls'
36
)
37
_archive="$_pkgname-$pkgver"
38
source=(
39
"https://dist.schmorp.de/$_pkgname/Attic/$_archive.tar.bz2"
40
"$_archive.tar.bz2.signature::https://dist.schmorp.de/$_pkgname/Attic/$_archive.tar.bz2.sig"
41
'dist.schmorp.de.pub::https://dist.schmorp.de/signing-key.pub'
42
'urxvt.desktop'
43
'urxvtc.desktop'
44
'urxvt-tabbed.desktop'
45
'resize-font'
46
'keyboard-select'
47
'7-bit-queries.patch'
48
'lines-rewrap.patch'
49
'24-bit-color.patch'
50
'enable-wide-glyphs.patch'
51
'improve-font-rendering.patch'
52
'osc-110-112-reset.patch'
53
'linear-interpolation.patch'
54
)
55
b2sums=('439a8c33b7260e0f2fd68b8a4409773c06c3bb7623b5dfbbb0742cc198c9fd25e8a247907878639db5fac3dcd3b6be3d839347787bcf08ca602ae246607f750b'
56
'1c58b1d53c72dbfae4f9302f5903365f84e85b2a1e9846d9dd9c712a7900e73a94621a41bee6dd75d690df8ae95d1d987d93ca4355eb8d8c423c57680df0edcf'
57
'6d6bd90b77e67ccb876f0c78c710c9e1b82767a19aeadaac9310e5628b791586fc8475ad5179eaa2fee386ae80aae916226167ec92c5af309bba4052238326c8'
58
'eff2407a1551d57d7a9e9000a9bad760afd4d9b7a0fa15c375ec821d185561a99c3761319c1cbed5cdd512b39faf339fb78387220eae161c9a33a859fc4733d2'
59
'2c4bc054e89b1bbd9ebce18cee64728b5ebb3aa915ce3ec7957e1a95da34c26ea757d324041b6c65db5902b60d0009176ff6aabc5093c5b2665c4b6997a3f60f'
60
'71072f1f262b0759f0251654b7563e0dc5b3f73bc3705321d4e75230c51692541a8f5aa289657714baeab93a9e7b404a0b3ce0eecafb116c389a640209916916'
61
'7f760beda37d781ae5bfff280fb912b3210ed4e60c82d279706feb023e5e10e9c5abe8eaa9bef6d7da460df39808c56de91ee2d5ffc63ea0c2e402810fa3dfb5'
62
'9e3c03390d44a53b933fd6e11f3b644c43f377d3848975d9a5d1b964b042aca08995c968ada22b143bdc014691282242c8e718820f16086b35588242eb71a15b'
63
'74a5a77d3c76783448e4765a18c0dd7cda5823ce4e6fad747739496202eb991d8a8ac6a26e23492b9902f920b30f32cd533384bd27ef352c82cccb943cd8e5c0'
64
'136ffb38a0a5820a413ddf85a88556d57dc5ab9944454596402692f336cbc5ec96180534eba04f0921dfb9dcbe59a0849197842e12c65eab59ef0741e6ee3b91'
65
'564371ab9873c5bf12a95e0a2807a166eb472ae37f1fe6b5e6afd8335ca106f40dbce152fa9df11531df74d75a734cb32be57921223bbd0e7db85f4e27bd0f13'
66
'88c07389328c12b5c639b226d9a41d1d15eddeb7212431653832d53b0b786ef1be1dd7f32023ea19078b103217299fda8333668f73246b660a0e07aaa54ad108'
67
'4365664301075347df66c38ce994ef8700043a2ab09770f3e9caf8c98ba7673ab93507029782cc34efcd6c1cc203b6ea9139a7a411a8f3398f4f43f3bfb58519'
68
'8da9911519554ba63ad32e56a492039d075861f5516a56a334cf6c988d3fc890e82c1fe362da385d44cba4620b6dcedba36c28a2360173cfc14f2b6300775452'
69
'e9ccbb27af3f8e8c8e94f996a36afcbaa400524610a6c1eeee3cb518918322f46bcfeb260188b0b6820f4658baa5eac0cbb0ce4866fb9bdeceb63e725a298794')
70
71
prepare() {
72
mv -v "$_archive.tar.bz2.signature" "$_archive.tar.bz2.sig"
73
signify -V -p "dist.schmorp.de.pub" -m "$_archive.tar.bz2"
74
75
cd "$_archive"
76
77
# WORKAROUND: multiple-char sequence for 7-bit queries
78
# https://lists.schmorp.de/pipermail/rxvt-unicode/2023q1/002640.html
79
patch -p1 -i ../7-bit-queries.patch
80
81
# WORKAROUND: prompt position (revert lines-rewrap update in screen.C to 9.30)
82
# https://lists.schmorp.de/pipermail/rxvt-unicode/2023q2/002661.html
83
# https://wiki.archlinux.org/title/Rxvt-unicode#Wrong_shell_prompt_placement_after_upgrading_to_9.31
84
patch -p1 -i ../lines-rewrap.patch
85
86
################################################################
87
# #
88
# If someone has better solutions for the rewritten patches, #
89
# please contact me! #
90
# #
91
################################################################
92
93
# the repo with original 24-bit-color.patch is no longer available:
94
# https://gist.githubusercontent.com/dan-santana/63271adf12171e0fc0bc/raw/70c6343d1c0b3bca0aba4f587ed501e6cbd98d00/24-bit-color.patch
95
# patch rewritten to work with version ≥ 9.26
96
patch -p1 -i ../24-bit-color.patch
97
98
# https://aur.archlinux.org/packages/rxvt-unicode-cvs-patched-wideglyphs
99
patch -p1 -i ../enable-wide-glyphs.patch
100
101
# https://gist.githubusercontent.com/emonkak/28bbc5474697695321452b6d9bf1d0bd/raw/a888c37ae10376598e663cf989132648f89219c0/rxvt-unicode-9.22-improve-font-endering.patch
102
# patch rewritten to work with version ≥ 9.29
103
patch -p1 -i ../improve-font-rendering.patch
104
105
# WORKAROUND: reset the terminal bg/fg/cursor colors via OSC 110/111/112
106
# https://patch-diff.githubusercontent.com/raw/exg/rxvt-unicode/pull/6.patch
107
patch -p1 -i ../osc-110-112-reset.patch
108
109
# WORKAROUND: prevent lerp errors during compilation
110
# in c++20 (default in gcc16) lerp is declared globally (std::lerp) as float,
111
# unlike rxvt lerp which uses int
112
patch -p1 -i ../linear-interpolation.patch
113
}
114
115
build() {
116
cd "$_archive"
117
118
# With >=GCC-16 memsets before constructor invocation are optimized away.
119
# Together with LTO this breaks internal assumptions about object initialization,
120
# leading to segfaults.
121
# WORKAROUND: Disable those optimizations.
122
export CXXFLAGS+=" -fno-lifetime-dse"
123
124
################################################################
125
# #
126
# This is an opinionated build. If you miss features, feel #
127
# free to enable them below before you build the package. #
128
# (e.g. --enable-pixbuf and --enable-fading) #
129
# #
130
################################################################
131
132
# WORKAROUND: disable --smart-resize (FS#34807)
133
# WORKAROUND: do not specify --with-terminfo (FS#46424)
134
# WORKAROUND: do not specify --disable-frills (FS#77474)
135
# WORKAROUND: ncurses --disable-root-access (FS#79143)
136
export TIC="/usr/bin/tic -o $srcdir/terminfo"
137
./configure \
138
--prefix=/usr \
139
--enable-xft \
140
--enable-font-styles \
141
--enable-xim \
142
--enable-unicode3 \
143
--enable-combining \
144
--disable-fallback \
145
--disable-pixbuf \
146
--disable-startup-notification \
147
--enable-transparency \
148
--disable-fading \
149
--disable-rxvt-scroll \
150
--disable-next-scroll \
151
--disable-xterm-scroll \
152
--enable-frills \
153
--disable-iso14755 \
154
--disable-keepscrolling \
155
--enable-selectionscrolling \
156
--enable-mousewheel \
157
--disable-slipwheeling \
158
--disable-smart-resize \
159
--enable-text-blink \
160
--enable-pointer-blank \
161
--enable-perl \
162
--enable-256-color \
163
--enable-24-bit-color \
164
--enable-wide-glyphs
165
make
166
167
# compile terminfo to custom directory (quick fix ncurses CVE-2023-29491)
168
tic -x -o "terminfo" doc/etc/rxvt-unicode.terminfo
169
}
170
171
package() {
172
# install freedesktop menu
173
for _f in urxvt urxvtc urxvt-tabbed; do
174
install -Dm 644 $_f.desktop "$pkgdir/usr/share/applications/$_f.desktop"
175
done
176
177
# install perl script resize-font (https://github.com/simmel/urxvt-resize-font)
178
install -Dm 644 resize-font "$pkgdir/usr/lib/urxvt/perl/resize-font"
179
180
# install perl script keyboard-select (https://github.com/muennich/urxvt-perls)
181
install -Dm 644 keyboard-select "$pkgdir/usr/lib/urxvt/perl/keyboard-select"
182
183
cd "$_archive"
184
185
# install the compiled terminfos from custom directory (quick fix ncurses CVE-2023-29491)
186
install -Dm 644 terminfo/r/rxvt-unicode "$pkgdir/usr/share/terminfo/r/rxvt-unicode"
187
install -Dm 644 terminfo/r/rxvt-unicode-256color "$pkgdir/usr/share/terminfo/r/rxvt-unicode-256color"
188
189
make DESTDIR="$pkgdir" install
190
191
# install the tabbing wrapper (requires gtk2-perl)
192
sed -i 's/\"rxvt\"/"urxvt"/' doc/rxvt-tabbed
193
install -Dm 755 doc/rxvt-tabbed "$pkgdir/usr/bin/urxvt-tabbed"
194
}
195
Changes since previous scan
--- PKGBUILD @ 2026-10-22 00:13+++ PKGBUILD @ 2026-11-01 00:21@@ -4,15 +4,12 @@ pkgname=rxvt-unicode-truecolor-wide-glyphs pkgdesc='Unicode enabled rxvt-clone terminal emulator (urxvt) with true color, enhanced glyphs and improved font rendering support' pkgver=9.31-pkgrel=15+pkgrel=16 url='https://software.schmorp.de/pkg/rxvt-unicode.html' arch=('i686' 'x86_64') license=('GPL-3.0-only')-# WORKAROUND: using gcc15 because some features (e.g., daemon/client)-# don't work when compiled with gcc16 makedepends=( 'signify'- 'gcc15' ) depends=( 'libxft'@@ -77,10 +74,6 @@ cd "$_archive" - # WORKAROUND: force gcc15 for building and linking- export CC=gcc-15- export CXX=g++-15- # WORKAROUND: multiple-char sequence for 7-bit queries # https://lists.schmorp.de/pipermail/rxvt-unicode/2023q1/002640.html patch -p1 -i ../7-bit-queries.patch@@ -122,6 +115,12 @@ build() { cd "$_archive" + # With >=GCC-16 memsets before constructor invocation are optimized away.+ # Together with LTO this breaks internal assumptions about object initialization,+ # leading to segfaults.+ # WORKAROUND: Disable those optimizations.+ export CXXFLAGS+=" -fno-lifetime-dse"+ ################################################################ # # # This is an opinionated build. If you miss features, feel #@@ -130,10 +129,10 @@ # # ################################################################ - # disable smart-resize (FS#34807)- # do not specify --with-terminfo (FS#46424)- # do not specify --disable-frills (FS#77474)- # workaround ncurses --disable-root-access (FS#79143)+ # WORKAROUND: disable --smart-resize (FS#34807)+ # WORKAROUND: do not specify --with-terminfo (FS#46424)+ # WORKAROUND: do not specify --disable-frills (FS#77474)+ # WORKAROUND: ncurses --disable-root-access (FS#79143) export TIC="/usr/bin/tic -o $srcdir/terminfo" ./configure \ --prefix=/usr \Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 11:34:35 | Medium | 1 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 09:25:06 | Medium | 1 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |