brother-mfc-l2720dw
maintainer shinob
· 3 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads official Brother driver RPMs from brother.com's download subdomain, which is the vendor's legitimate distribution channel; despite the static analyzer flag for a non-whitelisted host, this is a normal and expected source for proprietary drivers, and the files are verified via provided md5sums.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official Brother driver RPMs from brother.com's download subdomain, which is the vendor's legitimate distribution channel; despite the static analyzer flag for a non-whitelisted host, this is a normal and expected source for proprietary drivers, and the files are verified via provided md5sums.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:13
"http://download.brother.com/welcome/dlf101799/mfcl2720dwlpr-$pkgver-$pkgrel.i386.rpm"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: David Waldeck < mail at david-waldeck dot de
2
pkgname="brother-mfc-l2720dw"
3
pkgver="3.2.0"
4
pkgrel=1
5
pkgdesc="LPR and CUPS driver for the Brother MFC-l2720DW"
6
url="http://solutions.brother.com/linux/en_us/"
7
arch=("i686" "x86_64")
8
license=('custom:brother commercial license')
9
depends=("cups")
10
depends_x86_64=('lib32-glibc')
11
install="$pkgname.install"
12
source=(
13
"http://download.brother.com/welcome/dlf101799/mfcl2720dwlpr-$pkgver-$pkgrel.i386.rpm"
14
"http://download.brother.com/welcome/dlf101800/mfcl2720dwcupswrapper-$pkgver-$pkgrel.i386.rpm"
15
)
16
md5sums=(
17
'02590f6087f26e2a831ea60da218e81d'
18
'a215b945150a87583c4f832261811793'
19
)
20
prepare() {
21
# do not install in '/usr/local'
22
if [ -d $srcdir/usr/local/Brother ]; then
23
install -dm755 "$srcdir/usr/share"
24
mv "$srcdir/usr/local/Brother/" "$srcdir/usr/share/brother"
25
rm -rf "$srcdir/usr/local"
26
sed -i 's|/usr/local/Brother|/usr/share/brother|g' `grep -lr '/usr/local/Brother' ./`
27
fi
28
29
# create cups-directories
30
install -dm755 "$srcdir/usr/share/cups/model"
31
install -dm755 "$srcdir/usr/lib/cups/filter"
32
33
# copy ppd and filter file to their destination dirs
34
cd `find . -type d -name 'cupswrapper'`
35
cp *lpdwrapper* "$srcdir/usr/lib/cups/filter/"
36
cp *.ppd "$srcdir/usr/share/cups/model/"
37
38
# set the basedir to an absolute path in the perl-lpdwrapper-script
39
# the relative path,generated on the basis of the caller, does not work in this case
40
cd "$srcdir"
41
# get absolute printer path
42
_baseDir="\"/$(find opt -maxdepth 3 -depth -print -quit -type d)\""
43
# replace the dynamic basedir var with the absolute path
44
sed -i "s|\`readlink\ \$0\`|$_baseDir|" $srcdir/usr/lib/cups/filter/*lpdwrapper*
45
46
# /etc/printcap is managed by cups
47
rm "$(find $srcdir -type f -name 'setupPrintcap*')"
48
}
49
50
package() {
51
cp -R "$srcdir/usr" "$pkgdir"
52
cp -R "$srcdir/opt" "$pkgdir"
53
}
54
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |