spice-gstreamer

MEDIUM

maintainer dvratil 0 votes scanned 2026-10-05 23:40:58.404909

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 source=("https://www.spice-space.org/download/releases/spice-server/$_basename-$pkgver.tar.bz2"{,.sig})

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Daniel Vrátil <me@dvratil.cz>
    
      2# Contributor: Sven-Hendrik Haase <svenstaro@archlinux.org>
    
      3# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
    
      4# Contributor: Patryk Kowalczyk < patryk at kowalczyk dot ws>
    
      5
    
      6_basename=spice
    
      7pkgname=${_basename}-gstreamer
    
      8pkgver=0.16.0
    
      9pkgrel=1
    
      10pkgdesc="SPICE server with GStreamer support"
    
      11arch=('x86_64')
    
      12url="https://www.spice-space.org"
    
      13license=('LGPL2.1')
    
      14depends=('pixman' 'opus' 'libjpeg-turbo' 'glib2' 'libsasl' 'lz4' 'spice-protocol' 'libcacard' 'gstreamer')
    
      15makedepends=('meson' 'python-six' 'python-pyparsing')
    
      16checkdepends=('gdk-pixbuf2' 'glib-networking')
    
      17provides=('libspice-server.so' "$_basename")
    
      18conflicts=("$_basename")
    
      19source=("https://www.spice-space.org/download/releases/spice-server/$_basename-$pkgver.tar.bz2"{,.sig})
    
      20sha256sums=('0a6ec9528f05371261bbb2d46ff35e7b5c45ff89bb975a99af95a5f20ff4717d'
    
      21            'SKIP')
    
      22validpgpkeys=('206D3B352F566F3B0E6572E997D9123DE37A484F') # Victor Toso <victortoso@redhat.com>
    
      23
    
      24prepare() {
    
      25  cd ${_basename}-$pkgver
    
      26  sed -i "s/if not version_info.contains('git')/if version_info.length() >= 4/" server/meson.build
    
      27
    
      28  sed -i "/meson-dist/d" meson.build
    
      29}
    
      30
    
      31build() {
    
      32  arch-meson "${_basename}-$pkgver" build -D gstreamer=1.0
    
      33  ninja -C build
    
      34}
    
      35
    
      36check() {
    
      37  meson test -C build --print-errorlogs
    
      38}
    
      39
    
      40package() {
    
      41  DESTDIR="$pkgdir" meson install -C build
    
      42}
    
      43
    
      44

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-05 23:40
@@ -5,7 +5,7 @@
 
 _basename=spice
 pkgname=${_basename}-gstreamer
-pkgver=0.15.2
+pkgver=0.16.0
 pkgrel=1
 pkgdesc="SPICE server with GStreamer support"
 arch=('x86_64')
@@ -17,7 +17,7 @@
 provides=('libspice-server.so' "$_basename")
 conflicts=("$_basename")
 source=("https://www.spice-space.org/download/releases/spice-server/$_basename-$pkgver.tar.bz2"{,.sig})
-sha256sums=('6d9eb6117f03917471c4bc10004abecff48a79fb85eb85a1c45f023377015b81'
+sha256sums=('0a6ec9528f05371261bbb2d46ff35e7b5c45ff89bb975a99af95a5f20ff4717d'
             'SKIP')
 validpgpkeys=('206D3B352F566F3B0E6572E997D9123DE37A484F') # Victor Toso <victortoso@redhat.com>
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-05 23:40:58	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1