kyocera_universal

LOW

maintainer HartmutS 9 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package downloads a driver archive from Kyocera's official domain (kyoceradocumentsolutions.us), which is plausibly the project's own source; despite the non-whitelisted host, this is a normal AUR practice for building printer drivers, and no untrusted executable code or obfuscated payloads are involved.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a driver archive from Kyocera's official domain (kyoceradocumentsolutions.us), which is plausibly the project's own source; despite the non-whitelisted host, this is a normal AUR practice for building printer drivers, and no untrusted executable code or obfuscated payloads are involved.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:29 source=("https://www.kyoceradocumentsolutions.us/content/dam/download-center-americas-cf/us/drivers/drivers/${toDwnld}")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Hartmut Seichter <hartmut [at] gmail [dot] com>
    
      2# Contributors:
    
      3# - Julian Eckhardt <julian [at] eckhardt [dot] fi>
    
      4# - Paulo Marcos <contato-myghi63 [at] protonmail [dot] com>
    
      5# - Dominik Wetzel <dimonok [at] web [dot] de>
    
      6# - Arne v.Irmer < 	archlinux [at] a-vi [dot] de >
    
      7# - and others ...
    
      8#
    
      9
    
      10pkgname=kyocera_universal
    
      11pkgver=10.1.20240521
    
      12pkgrel=1
    
      13
    
      14major=$(cut -d '.' -f 1 <<< $pkgver)
    
      15minor=$(cut -d '.' -f 2 <<< $pkgver)
    
      16date=$(cut -d '.' -f 3 <<< $pkgver)
    
      17
    
      18pkgdesc="Kyocera Printing Package for many Kyocera printers (stripped of kdialog${major})."
    
      19arch=('x86_64' 'i686')
    
      20url="https://www.kyocera.com/"
    
      21license=('other')
    
      22depends=('cups-filters' 'dbus' 'gcc-libs' 'glibc' 'krb5' 'libcups' 'libgcrypt' 'python-reportlab' 'python-setuptools' 'python-pypdf' 'zlib')
    
      23makedepends=('unzip' 'wget')
    
      24provides=('kyocera-cups')
    
      25conflicts=('kyocera-cups')
    
      26
    
      27DLAGENTS=("https::/usr/bin/wget")
    
      28toDwnld="KyoceraLinuxPackages_${date}_tar_gz.download.gz"
    
      29source=("https://www.kyoceradocumentsolutions.us/content/dam/download-center-americas-cf/us/drivers/drivers/${toDwnld}")
    
      30install=kyodialog-bin.install
    
      31
    
      32sha256sums=('14235a8e4dbe9f2fdff481252e2cc64431f59a7dcf2497ef54852fb30211568f')
    
      33
    
      34if [ "$arch" == "x86_64" ]; then
    
      35  _arch="amd64"
    
      36else
    
      37  _arch="i386"
    
      38fi
    
      39
    
      40###########################
    
      41# CHOOSE YOUR REGION HERE #
    
      42###########################
    
      43# Region="EU"
    
      44Region="Global"
    
      45
    
      46prepare() {
    
      47  cd $srcdir
    
      48  tar xzf ${toDwnld} -C .
    
      49  ar xv Debian/${Region}/kyodialog_${_arch}/kyodialog_${major}.${minor}-0_${_arch}.deb
    
      50  tar xzf data.tar.gz -C .
    
      51}
    
      52
    
      53package() {
    
      54  # Remove unnecessary stuff and move ppd files to appropriate folders
    
      55  cd $srcdir
    
      56
    
      57  version=${major}
    
      58  KYOCERA_DIR=usr/share/kyocera${version}
    
      59  if [ ! -d $KYOCERA_DIR ]; then
    
      60    version=${major}.${minor}
    
      61    KYOCERA_DIR=usr/share/kyocera${version}
    
      62  fi
    
      63  rm -r usr/share/applications
    
      64
    
      65  ALTERNATE_PPD_DIRECTORY=usr/share/cups/model
    
      66  PRIMARY_PPD_DIRECTORY=usr/share/ppd/kyocera
    
      67
    
      68  TEMP_PPD_DIRECTORY=${KYOCERA_DIR}/ppd${version}
    
      69
    
      70  mkdir -p $PRIMARY_PPD_DIRECTORY
    
      71  mkdir -p $ALTERNATE_PPD_DIRECTORY
    
      72  mv $TEMP_PPD_DIRECTORY/* $PRIMARY_PPD_DIRECTORY
    
      73
    
      74  chmod 755 usr/bin/kyoPPDWrite_X
    
      75
    
      76  if [ ! -h $ALTERNATE_PPD_DIRECTORY/kyocera ]; then
    
      77      ln -s /$PRIMARY_PPD_DIRECTORY $ALTERNATE_PPD_DIRECTORY/kyocera
    
      78  fi
    
      79
    
      80  rm -r ${KYOCERA_DIR}
    
      81
    
      82  rm usr/bin/kyodialog${version}
    
      83  install -D -m644 "usr/share/doc/kyodialog/copyright" "${pkgdir}/usr/share/licenses/${pkgname}/COPYRIGHT"
    
      84  rm -r ${srcdir}/usr/share/doc
    
      85  cd $pkgdir
    
      86  cp -r $srcdir/usr .
    
      87}
    
      88

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 00:28:03	Low	2
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	2
2026-10-05 00:08:03	Low	2
2026-10-04 00:18:08	Low	2
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2