Project

General

Profile

Upstreaming #2809

Upstream pcr/searx changes

GNUtoo - over 1 year ago - . Updated over 1 year ago.

Status:
open
Priority:
bug
Assignee:

History

#1

Updated by GNUtoo over 1 year ago

  • Assignee set to GNUtoo

The SearX AUR package has several issues:

  • There is a security issue: The default Searx configuration has a field with a passphrase/key that the user is supposed to change. The AUR package generates that key at build time. As users probably don't read the PKGBUILD, they are probably not aware of it. So if they share their package not knowing that, they might have some security issue.
  • The license is AGPLv3 not AGPL

edit1: fix list formating

Also available in: Atom PDF