@SpotlightKid: Nah, you're right, I don't remember how it ended up here (possibly a copy paste from the namcap output). Thanks for letting me know ;-)
Search Criteria
Package Details: guitarix-git 0.46.0.r4.g3964866a-1
Package Actions
Git Clone URL: | https://aur.archlinux.org/guitarix-git.git (read-only, click to copy) |
---|---|
Package Base: | guitarix-git |
Description: | virtual guitar amplifier for Jack/Linux |
Upstream URL: | https://guitarix.org |
Keywords: | amplifier emulation guitar lv2 pro-audio tube |
Licenses: | GPL3 |
Groups: | lv2-plugins, ladspa-plugins, pro-audio |
Conflicts: | guitarix |
Provides: | libgxw.so, libgxwmm.so, lv2-host |
Replaces: | guitarix2 |
Submitter: | None |
Maintainer: | Gimmeapill |
Last Packager: | Gimmeapill |
Votes: | 12 |
Popularity: | 0.000229 |
First Submitted: | 2012-04-13 09:51 (UTC) |
Last Updated: | 2024-05-15 17:38 (UTC) |
Dependencies (21)
- bluez-libs (bluez-gitAUR)
- boost-libs
- gtkmm3
- jackAUR (jack2-gitAUR, pipewire-jack-gitAUR, pipewire-full-jack-gitAUR, jack2, pipewire-jack)
- liblo (liblo-gitAUR, liblo-ipv6AUR)
- liblrdf
- libsndfile (libsndfile-gitAUR)
- lilv (lilv-gitAUR)
- ttf-roboto (ttf-roboto-fontconfigAUR, ttf-roboto-variableAUR, ttf-google-fonts-typewolfAUR)
- zita-convolver
- zita-resampler
- boost (boost-gitAUR) (make)
- eigen (eigen-gitAUR) (make)
- git (git-gitAUR, git-glAUR) (make)
- gperf (gperf-gitAUR) (make)
- intltool (make)
- ladspa (make)
- lv2 (lv2-gitAUR) (make)
- pkgconfig (pkgconf-gitAUR, pkg-config-gitAUR, pkgconf) (make)
- sassc (sassc-gitAUR) (make)
- waf (waf-gitAUR) (make)
Required by (61)
- aether.lv2 (requires lv2-host) (optional)
- aida-x-git (requires lv2-host)
- airwindows-consolidated-git (requires lv2-host) (optional)
- airwindows-lv2 (requires lv2-host) (optional)
- ams-lv2 (requires lv2-host)
- amsynth-git (requires lv2-host) (optional)
- avldrums-lv2-git (requires lv2-host)
- bchoppr-git (requires lv2-host) (optional)
- caps-lv2-git (requires lv2-host) (optional)
- cardinal-data-git (requires lv2-host) (optional)
- cardinal-git (requires lv2-host) (optional)
- cardinal-lv2-git (requires lv2-host)
- carla-git (requires lv2-host) (optional)
- chowmatrix-git (requires lv2-host) (optional)
- cloudreverb (requires lv2-host) (optional)
- dfjpverb (requires lv2-host) (optional)
- dfzitarev1 (requires lv2-host) (optional)
- die-plugins (requires lv2-host) (optional)
- die-plugins.lv2-git (requires lv2-host) (optional)
- dragonfly-reverb-git (requires lv2-host) (optional)
- dsp56300-emulator-lv2 (requires lv2-host)
- fatfrog.lv2 (requires lv2-host) (optional)
- fluida.lv2 (requires lv2-host) (optional)
- fogpad (requires lv2-host) (optional)
- geonkick-git (requires lv2-host) (optional)
- helm-synth-lv2 (requires lv2-host)
- helm-synth-lv2-git (requires lv2-host)
- ildaeil (requires lv2-host) (optional)
- ir.lv2 (requires lv2-host)
- kpp (requires lv2-host) (optional)
- linuxsampler-vst (requires lv2-host) (optional)
- littlefly.lv2 (requires lv2-host) (optional)
- lsp-plugins-lv2-git (requires lv2-host)
- lsp-plugins-noicons (requires lv2-host) (optional)
- mephisto.lv2-git (requires lv2-host) (optional)
- midimsg-lv2 (requires lv2-host)
- midiomatic (requires lv2-host) (optional)
- mod-mda-lv2-git (requires lv2-host) (optional)
- ninjas2-lv2 (requires lv2-host)
- pianoteq (requires lv2-host) (optional)
- pianoteq-stage-trial-bin (requires lv2-host) (optional)
- pianoteq-standard-trial-bin (requires lv2-host) (optional)
- pianoteq7 (requires lv2-host) (optional)
- rakarrack-plus (requires lv2-host) (optional)
- ratatouille.lv2 (requires lv2-host) (optional)
- rezonateur (requires lv2-host) (optional)
- sfizz-lv2-git (requires lv2-host)
- shiro-plugins-git (requires lv2-host) (optional)
- socalabs-wavetable-lv2-bin (requires lv2-host) (optional)
- stomptuner (requires lv2-host) (optional)
- stone-phaser (requires lv2-host) (optional)
- string-machine (requires lv2-host) (optional)
- surge (requires lv2-host) (optional)
- swh-plugins.lv2 (requires lv2-host) (optional)
- triceratops (requires lv2-host) (optional)
- vcf-lv2 (requires lv2-host) (optional)
- wolf-shaper-git (requires lv2-host) (optional)
- ykchorus (requires lv2-host) (optional)
- zam-plugins-git (requires lv2-host) (optional)
- zynaddsubfx-git (requires lv2-host) (optional)
Sources (1)
Gimmeapill commented on 2018-01-23 12:19 (UTC)
SpotlightKid commented on 2018-01-23 12:02 (UTC)
Shouldn't 'git' be in makedepends instead of depends? Or is it really needed at run-time?
Gimmeapill commented on 2017-12-03 20:10 (UTC) (edited on 2017-12-03 20:11 (UTC) by Gimmeapill)
This package will automatically retrieve and build the latest development snapshot of Guitarix from git.
It does not need to be updated on every release, so please do not flag out of date unless the build itself breaks or in case of an actual packaging issue.
If you are looking for the latest official release instead, see https://www.archlinux.org/packages/community/x86_64/guitarix2/
Gimmeapill commented on 2017-07-21 09:31 (UTC)
Gents, it looks like there's some trouble ahead, possibly related to an ffmpeg or gcc update: https://linuxmusicians.com/viewtopic.php?f=24&t=17329&p=83295#p83295
In case you notice unexpected sound changes with the latest builds, edit the pkgbuild and replace "--convolver-ffmpeg" with "--includeconvolver" (to bypass the Arch ffmpeg package). The AUR pkgbuild might be updated accordingly once we know more.
Gimmeapill commented on 2017-07-10 17:43 (UTC)
@SpotlightKid: Thanks for the heads up, I'll update shortly.
SpotlightKid commented on 2017-07-10 16:12 (UTC)
I seems the '--no-webkit' waf configure flag has been removed again already.
Gimmeapill commented on 2017-07-02 20:00 (UTC)
Hi Ralf, thanks for following up upstream, I was away for a few days.
The pkgbuild is now updated to explictly disable webkit with the "--no-webkit" flag even if webkitgtk2 is found on the system.
This should clear security concerns.
Not being able to download online presets from within guitarix is indeed an acceptable tradeoff until Hermann decides on a long term fix.
BR,
LX
Ralf_Mardorf commented on 2017-07-01 19:28 (UTC) (edited on 2017-07-01 19:40 (UTC) by Ralf_Mardorf)
Upstream added a "--no-webkit" configuration flag. If you should insist in a hared dependency against webkitgtk2, at least consider to add a commented out "--no-webkit" option.
Unfortunately making it an optional dependency, still would require to make it a build dependency ;).
Uncommenting the webkit flag still would require to remove it manually from the dependency list, but the commented out option at least would call attention.
Ralf_Mardorf commented on 2017-07-01 18:42 (UTC)
Update:
[rocketmouse@archlinux ~]$ sudo pacman -Rss gambas3-gb-qt4-webkit qtwebkit webkitgtk webkitgtk2 typhoon wxsvg dvdstyler xombrero
[sudo] password for rocketmouse:
checking dependencies...
Packages (10) ffmpeg0.10-0.10.16-3 xmlto-0.0.28-1 dvdstyler-3.0.3-1 gambas3-gb-qt4-webkit-3.9.2-1
qtwebkit-2.3.4-5 typhoon-0.8.94-2 webkitgtk-2.4.11-6 webkitgtk2-2.4.11-6 wxsvg-1.5.11-1
xombrero-1.6.4-5
[snip]
[rocketmouse@archlinux ~]$ cd /tmp/
[rocketmouse@archlinux tmp]$ cd /tmp/guitarix2/trunk/
[rocketmouse@archlinux trunk]$ makepkg -s
[snip]
Checking for webkit-1.0 : not found
[snip]
The configuration finished successfully and it started to build, but I manually interrupted it.
IMO it's no option to continue using vulnerably software and upstream is willing to fix the issue:
"[snip] the situation leads me to think about removing the internal browser and use the default browser on the host system instead [snip]" - https://sourceforge.net/p/guitarix/bugs/39/
FWIW I filed a deletion request against https://aur.archlinux.org/packages/webkitgtk2/ :
Ralf_Mardorf [1] filed a deletion request for webkitgtk [2]:
This software is a serious security risk. If necessary ask upstream to
fix hard dependencies to this software.
[1] https://aur.archlinux.org/account/Ralf_Mardorf/
[2] https://aur.archlinux.org/pkgbase/webkitgtk/
Regards,
Ralf
Ralf_Mardorf commented on 2017-07-01 17:47 (UTC) (edited on 2017-07-01 17:49 (UTC) by Ralf_Mardorf)
Hi,
for testing purpose, could you please remove webkitgtk2 from the PKGBUILD, perhaps completely or by changing it to webkit2gtk? I can't test it, since one of my packages requires webkitgtk2 [1].
However, the official guitarix2 PKGBUILD from the "extra" repository doesn't mention webkit at all, see my post at https://sourceforge.net/p/guitarix/bugs/39/ .
My guess is that migrating to webkit2gtk doesn't work, but likely removing webkitgtk2 is automatically noticed by the configuration check, to build without webkit.
Regards,
Ralf
[1]
[rocketmouse@archlinux ~]$ cd /tmp
[rocketmouse@archlinux tmp]$ yaourt -Qs webkit
local/gambas3-gb-qt4-webkit 3.9.2-1 (gambas3)
Qt4 toolkit webkit component
community/gambas3-gb-qt5-webkit 3.9.2-7 (gambas3)
Qt5 toolkit webkit component
extra/kdewebkit 5.35.0-1 (kf5)
KDE Integration for QtWebKit
extra/qt5-webkit 5.212.0alpha2-2 (qt qt5)
Classes for a WebKit2 based implementation and a new QML API
local/qtwebkit 2.3.4-5
An open source web browser engine (Qt port)
extra/webkit2gtk 2.16.5-1
GTK+ Web content engine library
local/webkitgtk 2.4.11-6
Legacy Web content engine for GTK+ 3
local/webkitgtk2 2.4.11-6
Legacy Web content engine for GTK+ 2
[rocketmouse@archlinux tmp]$ asp checkout guitarix2 > /dev/null
Cloning into '/tmp/guitarix2'...
done.
[rocketmouse@archlinux tmp]$ cd guitarix2/trunk/
[rocketmouse@archlinux trunk]$ makepkg -s
[snip]
Checking for webkit-1.0 : yes
[snip]
[rocketmouse@archlinux trunk]$ sudo pacman -Rss gambas3-gb-qt4-webkit qtwebkit webkitgtk webkitgtk2
[sudo] password for rocketmouse:
checking dependencies...
error: failed to prepare transaction (could not satisfy dependencies)
:: typhoon: removing webkitgtk breaks dependency 'webkitgtk3'
:: wxsvg: removing webkitgtk2 breaks dependency 'webkitgtk2'
:: xombrero: removing webkitgtk breaks dependency 'webkitgtk'
Pinned Comments
Gimmeapill commented on 2017-12-03 20:10 (UTC) (edited on 2017-12-03 20:11 (UTC) by Gimmeapill)
This package will automatically retrieve and build the latest development snapshot of Guitarix from git.
It does not need to be updated on every release, so please do not flag out of date unless the build itself breaks or in case of an actual packaging issue.
If you are looking for the latest official release instead, see https://www.archlinux.org/packages/community/x86_64/guitarix2/