brother-hll2375dw
maintainer fettouhi
· 3 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads a Brother printer driver RPM from the official brother.com domain, which is a legitimate source for this hardware; the download host is not whitelisted but is plausibly official, and the payload is a driver package intended for installation, not an obfuscated or executable payload run during build.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a Brother printer driver RPM from the official brother.com domain, which is a legitimate source for this hardware; the download host is not whitelisted but is plausibly official, and the payload is a driver package intended for installation, not an obfuscated or executable payload run during build.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:12
source=(http://download.brother.com/welcome/dlf103533/hll2375dwpdrv-$pkgver-1.i386.rpm)
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: KopfKrieg <archlinux at absolem dot cc>
2
# Contributor: Daniel Wyatt <Daniel.Wyatt at gmail dot com>
3
# Contributor: André Fettouhi <a.fettouhi at gmail dot com>
4
pkgname=brother-hll2375dw
5
pkgver=4.0.0
6
pkgrel=2
7
pkgdesc='Brother HL-L2375DW CUPS driver'
8
arch=('i686' 'x86_64')
9
url='http://www.brother.com'
10
license=('GPL')
11
depends=('cups' 'perl')
12
source=(http://download.brother.com/welcome/dlf103533/hll2375dwpdrv-$pkgver-1.i386.rpm)
13
sha256sums=('ce32797b7f344d2cd7dec958a65a35887ab604a5e47f108de096e8caeb098a85')
14
15
package() {
16
# using /usr/share instead of /opt
17
mkdir -p "$pkgdir/usr/share"
18
cp -R "$srcdir/opt/brother" "$pkgdir/usr/share"
19
sed -i 's|\\\/opt\\\/|\\\/usr\\\/|' "$pkgdir/usr/share/brother/Printers/HLL2375DW/cupswrapper/lpdwrapper"
20
sed -i 's|\\\/opt\\\/|\\\/usr\\\/|' "$pkgdir/usr/share/brother/Printers/HLL2375DW/lpd/lpdfilter"
21
22
# symlink for lpdwrapper so it correctly figures out the printer model from the path
23
install -d "$pkgdir/usr/lib/cups/filter/"
24
ln -s "/usr/share/brother/Printers/HLL2375DW/cupswrapper/lpdwrapper" "$pkgdir/usr/lib/cups/filter/brother_lpdwrapper_HLL2375DW"
25
26
# symlink for the PPD
27
install -d "$pkgdir/usr/share/cups/model/"
28
ln -s "/usr/share/brother/Printers/HLL2375DW/cupswrapper/brother-HLL2375DW-cups-en.ppd" "$pkgdir/usr/share/cups/model/"
29
30
# a couple architecture-specific symlinks
31
ln -s "/usr/share/brother/Printers/HLL2375DW/lpd/$CARCH/brprintconflsr3" "$pkgdir/usr/share/brother/Printers/HLL2375DW/lpd/"
32
ln -s "/usr/share/brother/Printers/HLL2375DW/lpd/$CARCH/rawtobr3" "$pkgdir/usr/share/brother/Printers/HLL2375DW/lpd/"
33
34
# symlink for inf because it tries to execute it there
35
ln -s "/usr/share/brother/Printers/HLL2375DW/inf" "$pkgdir/usr/share/brother/Printers/HLL2375DW/lpd/"
36
}
37
38
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |