Arch Linux User Repository

You have to import the maintainer's key. If you use an AUR helper, like yay, it should happen automatically. If for some reason it's not working, you can import it manually:

gpg --keyserver keyserver.ubuntu.com --recv-keys 2895A881D34270FABFE8F747B4F63339E65D6414

@Volker it's not my key, but upstream maintainer's, so I can't recreate it.

can you update this package?

There is a new 0.13.4 release. Here is a diff for it:

diff --git a/PKGBUILD b/PKGBUILD
index 5528987..d08ed82 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -6,7 +6,7 @@
 ## gpg --keyserver keyserver.ubuntu.com --recv-keys <KEY>

 pkgname=libredwg
-pkgver=0.13.3
+pkgver=0.13.4
 pkgrel=1
 pkgdesc="A free C library to handle DWG files"
 arch=('x86_64')
@@ -14,9 +14,9 @@ url="https://gnu.org/software/libredwg/"
 license=('GPL3')
 depends=('python' 'pcre2' 'perl' 'swig')
 provides=('python-libredwg')
-source=("$pkgname-$pkgver.tar.gz::https://ftp.gnu.org/gnu/$pkgname/$pkgname-$pkgver.tar.gz"
-        "$pkgname-$pkgver.tar.gz.sig::https://ftp.gnu.org/gnu/$pkgname/$pkgname-$pkgver.tar.gz.sig")
-sha256sums=('6fe6c273ecbb04d4a7646e1636ede4815b51f98f974cece649dab341d24feda2'
+source=("$pkgname-$pkgver.tar.gz::https://github.com/LibreDWG/$pkgname/releases/download/$pkgver/$pkgname-$pkgver.tar.gz"
+        "$pkgname-$pkgver.tar.gz.sig::https://github.com/LibreDWG/$pkgname/releases/download/$pkgver/$pkgname-$pkgver.tar.gz.sig")
+sha256sums=('cacff5510f46723462e854e15ecfa97cbc7475acb3eb7ae1ca6e4193ecc2267d'
             'SKIP')
 validpgpkeys=('2895A881D34270FABFE8F747B4F63339E65D6414') ## Reini Urban

I opened a ticket to let upstream know that the release files do not exist on the ftp.gnu.org server, so depending upon when you read this, the source=([...]) diff may be unnecessary.

Regarding the error about _POSIX_C_SOURCE, I created a patch file POSIX_C_SOURCE.patch (which removes the redundant declaration of _POSIX_C_SOURCE in config.h) with appropriate changes to PKGBUILD, here in one git-diff:

λ git diff --cached
diff --git a/PKGBUILD b/PKGBUILD
index 5528987..a1a4ae8 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -15,11 +15,17 @@ license=('GPL3')
depends=('python' 'pcre2' 'perl' 'swig')
provides=('python-libredwg')
source=("$pkgname-$pkgver.tar.gz::https://ftp.gnu.org/gnu/$pkgname/$pkgname-$pkgver.tar.gz"
-        "$pkgname-$pkgver.tar.gz.sig::https://ftp.gnu.org/gnu/$pkgname/$pkgname-$pkgver.tar.gz.sig")
+        "$pkgname-$pkgver.tar.gz.sig::https://ftp.gnu.org/gnu/$pkgname/$pkgname-$pkgver.tar.gz.sig"
+        "POSIX_C_SOURCE.patch")
sha256sums=('6fe6c273ecbb04d4a7646e1636ede4815b51f98f974cece649dab341d24feda2'
-            'SKIP')
+            'SKIP'
+            'f536235a4d5154a1bba66c62bb150a476a51835e688954055910893d3aa44d34')
validpgpkeys=('2895A881D34270FABFE8F747B4F63339E65D6414') ## Reini Urban

+prepare() {
+  cd "$pkgname-$pkgver"
+  patch -p1 < "../POSIX_C_SOURCE.patch"
+}
build() {
cd "$pkgname-$pkgver"
./configure --prefix=/usr
diff --git a/POSIX_C_SOURCE.patch b/POSIX_C_SOURCE.patch
new file mode 100644
index 0000000..df2b357
--- /dev/null
+++ b/POSIX_C_SOURCE.patch
@@ -0,0 +1,13 @@
+diff '--color=auto' -ur a/configure b/configure
+--- a/configure    2024-02-26 10:44:58.000000000 +0100
++++ b/configure    2026-04-23 17:46:41.537673273 +0200
+@@ -16417,9 +16417,6 @@
+
+     ;;
+ *)
+-
+-printf "%s\n" "#define _POSIX_C_SOURCE 200809L" >>confdefs.h
+-
+     ;;
+ esac
+ case "$host_os" in

@pespin The problem is from glibc 2.43, it defaults to POSIX standard 2024, as previous versions defaulted to 2008.

There is already an upstream PR about this: https://github.com/LibreDWG/libredwg/pull/1225

Compilation fails when building the package with yay:

make[4]: Entering directory '/home/user/.cache/yay/libredwg/src/libredwg-0.13.3/src'
  CC       dwg.lo
  CC       common.lo
  CC       codepages.lo
  CC       bits.lo
  CC       decode.lo
In file included from common.h:30,
                 from decode.c:41:
config.h:401:9: error: ‘_POSIX_C_SOURCE’ redefined [-Werror]
  401 | #define _POSIX_C_SOURCE 200809L
      |         ^~~~~~~~~~~~~~~
In file included from /usr/include/bits/libc-header-start.h:33,
                 from /usr/include/stdio.h:28,
                 from decode.c:33:
/usr/include/features.h:319:10: note: this is the location of the previous definition
  319 | # define _POSIX_C_SOURCE        202405L
      |          ^~~~~~~~~~~~~~~
cc1: all warnings being treated as errors
make[4]: *** [Makefile:734: decode.lo] Error 1

You have to import the maintainer's key. If you use an AUR helper, like yay, it should happen automatically. If for some reason it's not working, you can import it manually:

gpg --keyserver keyserver.ubuntu.com --recv-keys 2895A881D34270FABFE8F747B4F63339E65D6414

@Volker it's not my key, but upstream maintainer's, so I can't recreate it.

Sorry to tell, but my try to install the package failed with the same error as by Jino.

libredwg-0.13.3.tar.gz ... FEHLGESCHLAGEN (Unbekannter öffentlicher Schlüssel B4F63339E65D6414) ==> FEHLER: Eine oder mehrere PGP-Signaturen konnten nicht überprüft werden!

translates like Verifying source file signatures with gpg... libredwg-0.13.3.tar.gz ... %s is unable to verify the signature. gpg ==> ERROR: One or more PGP signatures could not be verified!

Please try to recreate the key.

Thanks in advance

@Jino Signatures are ok, checked rn, maybe the keyserver was down when you tried to install? Can you try again now?

I get the following error while trying to build and install:

Verifying source file signatures with gpg... libredwg-0.13.3.tar.gz ... %s is unable to verify the signature. gpg ==> ERROR: One or more PGP signatures could not be verified!