brother-mfc-9340cdw

maintainer twasiluk · 8 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads official Brother printer driver RPMs from brother.com and download.brother.com, which are the vendor's official domains; despite one host not being on a standard whitelist, the sources are legitimate and expected for this hardware, and the build process only extracts and relocates files without executing arbitrary remote code.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official Brother printer driver RPMs from brother.com and download.brother.com, which are the vendor's official domains; despite one host not being on a standard whitelist, the sources are legitimate and expected for this hardware, and the build process only extracts and relocates files without executing arbitrary remote code.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 source=("http://www.brother.com/pub/bsc/linux/dlf/mfc${_model}lpr-${pkgver//_/-}.i386.rpm"
PKGBUILD:20 "https://download.brother.com/welcome/dlf007028/mfc9340cdwcupswrapper-${_cupswrapper_ver}.i386.rpm"

PKGBUILD

2 offending line(s) highlighted

      1# Submitter: voidptr <aur at voidptr dot net>
    
      2# Contributor: Andrew Hacking <ahacking at gmail>
    
      3# Maintainer: Tom Wasiluk <tomasz at wasil dot uk>
    
      4# Co-maintainer: Cebtenzzre <cebtenzzre (at) gmail (dot) com>
    
      5
    
      6_model='9340cdw'
    
      7pkgname=brother-mfc-${_model}
    
      8pkgver=1.1.2_1
    
      9pkgrel=2
    
      10_cupswrapper_ver='1.1.4-0'
    
      11pkgdesc='LPR and CUPS driver for the Brother MFC-9340CDW'
    
      12url='http://welcome.solutions.brother.com/bsc/public_s/id/linux/en/index.html'
    
      13arch=(i686 x86_64)
    
      14license=('custom:Brother commercial license' GPL2)
    
      15install=brother-mfc-${_model}.install
    
      16depends=(cups ghostscript a2ps)
    
      17depends_x86_64=(lib32-glibc)
    
      18
    
      19source=("http://www.brother.com/pub/bsc/linux/dlf/mfc${_model}lpr-${pkgver//_/-}.i386.rpm"
    
      20        "https://download.brother.com/welcome/dlf007028/mfc9340cdwcupswrapper-${_cupswrapper_ver}.i386.rpm"
    
      21        'lpr-license.txt')
    
      22sha256sums=('f0ef7debe2ce49624c9fed63f5338267195430577afe1e97bdfb14bb35a325b1'
    
      23            '4290e37fa83cf2ad31e83fdf1a44e22fd7df4149fbda994bc930f201c1457e05'
    
      24            '9d85a8aafdaac8fac80e04234ad2acf5642bbf0b91ee582d2a89519a55f6dd67')
    
      25
    
      26prepare() {
    
      27  install -d usr/share/cups/model usr/lib/cups/filter
    
      28  wrapper=opt/brother/Printers/mfc${_model}/cupswrapper/cupswrappermfc${_model}
    
      29  sed -i '/^ *lpadmin/d;/^sleep/Q' "$wrapper"
    
      30  perl -i -spe 's#/(usr|opt)#$srcdir/$1#g;s#/model/Brother#/model#g' -- -srcdir="$srcdir" "$wrapper"
    
      31  ./"$wrapper"
    
      32  rm "$wrapper"
    
      33  perl -i -spe 's/$srcdir//' -- -srcdir="$srcdir" usr/lib/cups/filter/*lpdwrapper*
    
      34
    
      35  rm opt/brother/Printers/mfc${_model}/cupswrapper/brother_mfc9340cdw_printer_en.ppd
    
      36  # /etc/printcap is managed by cups
    
      37  rm opt/brother/Printers/mfc9340cdw/inf/setupPrintcap*
    
      38}
    
      39
    
      40package() {
    
      41  cp -R  usr/ opt/ "${pkgdir}/"
    
      42  install -Dm644 lpr-license.txt "${pkgdir}/usr/share/licenses/${pkgname}/lpr-license.txt"
    
      43}
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2