cndrvcups-lt

maintainer zhou13 · 5 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a Canon printer driver from a known Canon distribution host (gdlp01.c-wss.com), which is plausibly official despite not being on a standard whitelist; the source is a prebuilt Debian package, but Canon's official drivers are commonly distributed this way, and the installation is limited to printer PPDs and related files, posing minimal risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a Canon printer driver from a known Canon distribution host (gdlp01.c-wss.com), which is plausibly official despite not being on a standard whitelist; the source is a prebuilt Debian package, but Canon's official drivers are commonly distributed this way, and the installation is limited to printer PPDs and related files, posing minimal risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:9 source=("http://gdlp01.c-wss.com/gds/0/0100005950/10/linux-UFRIILT-drv-v500-uken-18.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1pkgname=cndrvcups-lt
    
      2pkgver=5.00.18
    
      3pkgrel=0
    
      4pkgdesc='Canon UFR II /LIPSLX Printer Driver. It provides ppd files for LBP112, LBP113, LBP151, LBP6030, LBP6230, LBP7110C, and LBP8100 printers.'
    
      5
    
      6arch=('x86_64')
    
      7url='https://www.canon-europe.com/support/consumer_products/products/printers/laser/i-sensys_lbp6030.aspx?type=drivers&language=EN&os=Linux%20(64-bit)'
    
      8depends=('libglade' 'gcc-libs' 'libxml2' 'libjpeg-turbo' 'libgcrypt')
    
      9source=("http://gdlp01.c-wss.com/gds/0/0100005950/10/linux-UFRIILT-drv-v500-uken-18.tar.gz")
    
      10md5sums=('8bc3a4e3c372bb4d1b9af2cc012c720b')
    
      11
    
      12package() {
    
      13    # Concerning the 64 bit version only right now
    
      14    cd "${srcdir}/linux-UFRIILT-drv-v500-uken/64-bit_Driver/Debian"
    
      15    ar x cnrdrvcups-ufr2lt-uk_5.00-1_amd64.deb
    
      16    mkdir data
    
      17    tar -xzf data.tar.gz -C data
    
      18    cd data
    
      19    cp -r . "${pkgdir}"
    
      20}
    
      21

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2