brother-mfc-j5930dw
maintainer severach
· 1 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads official Brother printer driver RPMs from brother.com's download subdomain, which is a legitimate source for proprietary drivers;虽host未在白名单，但属厂商官方发布渠道，且安装内容为非可执行的打印驱动文件，无远程代码执行风险
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official Brother printer driver RPMs from brother.com's download subdomain, which is a legitimate source for proprietary drivers;虽host未在白名单，但属厂商官方发布渠道，且安装内容为非可执行的打印驱动文件，无远程代码执行风险
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:44
"http://download.brother.com/welcome/dlf103006/${_brotherlnd}lpr-${pkgver}-${_brpkgrel}.i386.rpm"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Luca P <meti at lplab.net>
2
# Contributor: Chakib Benziane chakib.benz+aur aATt gmail dott com
3
# Category: system
4
5
# The cups binary is 64 bit. Until Brother releases source for the 32 bit lpr
6
# binary blobs, 64 bit users must enable multilib.
7
8
# This has not been tested with non cups lprng.
9
10
# NOTE 1: Remember to add user to lp group using
11
# gpasswd -a USER lp
12
# NOTE 2: Remember to logout after adding groups
13
# NOTE 3: Set each printer default Media Size to Letter with
14
# lpadmin -p BR5910 -o media=Letter
15
16
_brotheru='MFC-J5930DW'
17
_brotherl="${_brotheru,,}" # mfc-0000dw
18
_brotherlnd="${_brotherl//-/}" # mfc0000dw
19
_brotherund="${_brotheru//-/}" # MFC0000DW
20
pkgname="brother-${_brotherl}"
21
pkgver='1.0.1'
22
_brpkgrel='0'
23
pkgrel='1'
24
pkgdesc="LPR and CUPS driver for the Brother ${_brotheru} printer"
25
arch=('i686' 'x86_64')
26
url='http://solutions.brother.com/linux/en_us/'
27
license=('custom:Brother Industries')
28
depends=('cups' 'ghostscript' 'psutils' 'a2ps' 'sed' 'grep')
29
depends_x86_64=('lib32-glibc')
30
# We look at the scripts and find these programs from which we decide on the depends above.
31
# gs: lpr rendering
32
# pdf2ps: cups rendering
33
# a2ps: rendering ascii text files
34
# (not) pstops: pdf resizing
35
# psnup: printing n-up pages
36
# sed grep awk
37
# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=670055
38
# Printing a text file fails when Liberation is the only TrueType font available
39
optdepends=('ttf-dejavu: printing text files from lpr'
40
'brscan4: Scanner support')
41
#install="${pkgname}.install"
42
# The cups wrapper uses the lpr driver.
43
source=(
44
"http://download.brother.com/welcome/dlf103006/${_brotherlnd}lpr-${pkgver}-${_brpkgrel}.i386.rpm"
45
"http://download.brother.com/welcome/dlf103030/${_brotherlnd}cupswrapper-${pkgver}-${_brpkgrel}.i386.rpm"
46
'cupswrapper-license.txt'
47
'lpr-license.txt'
48
)
49
sha256sums=('e4fb55da5f3b2acf81498b9629fb96f97fb7dcf6b677b15e547c9cb8557e136b'
50
'a5719c502c236961f08cb26b43ea727f8962153afeb717ca996d631b81015521'
51
'2c6aa6a641332e5c87e971ac2a8beae13b059747bdba331bbd515914770d72d9'
52
'9d85a8aafdaac8fac80e04234ad2acf5642bbf0b91ee582d2a89519a55f6dd67')
53
54
build() {
55
set -u
56
# setup cups-directories
57
install -dm755 "${srcdir}/usr/lib/cups/filter"
58
install -dm755 "${srcdir}/usr/share/cups/model"
59
install -dm755 "${srcdir}/usr/share/cups/model/Brother"
60
#install -dm755 "${srcdir}/usr/share/ppd" # For cups we don't need the ppd file here.
61
62
63
set +u
64
}
65
66
package() {
67
local _dir
68
# /var/spool is not used anywhere in this package. Maybe it's needed for non cups lprng.
69
for _dir in 'usr' 'opt'; do # 'var'
70
if [ -d "${srcdir}/${_dir}" ]; then
71
cp -pR "${srcdir}/${_dir}" "${pkgdir}"
72
fi
73
done
74
cp "${srcdir}/opt/brother/Printers/mfcj5930dw/cupswrapper/brother_mfcj5930dw_printer_en.ppd" "${pkgdir}/usr/share/cups/model/Brother/brother_mfcj5930dw_printer_en.ppd"
75
chmod 644 "${pkgdir}/usr/share/cups/model/Brother/brother_mfcj5930dw_printer_en.ppd"
76
ln -s "/opt/brother/Printers/mfcj5930dw/cupswrapper/brother_lpdwrapper_mfcj5930dw" "${pkgdir}/usr/lib/cups/filter/brother_lpdwrapper_mfcj5930dw"
77
78
# /etc/printcap is managed by cups. This eliminates any need for a printcap helper.
79
rm -f "`find "${pkgdir}" -type f -name 'setupPrintcap*'`"
80
# Ensure we got a ppd and a filter for CUPS
81
test "$(find "${pkgdir}/usr/share/cups/model" -type f -name '*.ppd')"
82
#test "$(find "${pkgdir}/usr/lib/cups/filter/" -type f)"
83
84
# Ensure there are no forbidden paths
85
! grep -alqr "/sbin" "${pkgdir}" || echo "${}"
86
! grep -alqr "/usr/tmp" "${pkgdir}" || echo "${}"
87
88
}
89
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |