turboprint
maintainer rprice
· 53 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads prebuilt binaries from the official vendor's domain (zedonet.com), which is the copyright holder; despite the non-whitelisted host, the source is authentic and checksums are provided, limiting supply-chain risk to low.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt binaries from the official vendor's domain (zedonet.com), which is the copyright holder; despite the non-whitelisted host, the source is authentic and checksums are provided, limiting supply-chain risk to low.
2 higher static findings superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:44
source_i686=("https://www.zedonet.com/download/tp2/${_srcdir}.i586.tgz")
MEDIUM
Privileged / out-of-pacman install (sudoers, setuid, or self-update)
privileged_install
The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.
-
PKGBUILD:108
chmod 4755 "${pkgdir}/usr/share/turboprint/lib/pipeutility"
PKGBUILD
2 offending line(s) highlighted
1
# Maintainer: Chris Severance aur.severach aATt spamgourmet dott com
2
# Contributor: Tristelune tristelune aat archlinux.info
3
# Contributor: Daniel Cardenas thecubeisalie at gmail.com
4
5
# TODO: Get rid of /usr/local
6
# TODO: Use install_post instead of our own package() commands
7
# TODO: Change to supplied tpdaemon.service
8
9
# Copyright: TurboPrint for Linux is copyright (c) ZEDOnet GmbH, Sedanstrasse 8, 87600 Kaufbeuren, Germany.
10
# All rights reserved. You may not distribute the program files by any means, e.g. on WEB servers,
11
# CDs, Linux distributions, etc. without the prior written consent of ZEDOnet GmbH.
12
13
set -u
14
pkgname='turboprint'
15
_pkgver='2.58-1'
16
pkgver="${_pkgver//-/.}"
17
pkgrel='1'
18
pkgdesc='High-quality printer driver system for Linux'
19
arch=('i686' 'x86_64')
20
url='http://www.turboprint.info/'
21
license=('custom')
22
depends=('cups' 'ghostscript')
23
depends+=('at-spi2-core' 'glibc' 'gcc-libs' 'bash' 'pango' 'glib2' 'libcups' 'gdk-pixbuf2' 'gtk2' )
24
optdepends=(
25
'gimp: For GIMP plugin'
26
#'kdelibs: For KDE applet'
27
'gnome-panel-bonobo: For GNOME applet'
28
'libgnomeui: For GNOME applet'
29
'firefox: For browsing help'
30
)
31
backup=('etc/turboprint/system.cfg')
32
options=('!strip')
33
install="${pkgname}.install"
34
#_verwatch=('http://www.turboprint.info/history.html' '[0-9][0-9]-[a-z][a-z][a-z]-[0-9][0-9] - \([0-9\.]\+\).*' 'f')
35
source=('turboprint.desktop'
36
'turboprint-monitor.desktop'
37
'tprintdaemon.service'
38
'tpapplet.patch')
39
_srcdir="${pkgname}-${_pkgver}"
40
# ftp://ftp.zedonet.com/tp2/turboprint-2.44-1.x86_64.tgz
41
# ftp://ftp.zedonet.com/tp2/turboprint-2.44-1.i586.tgz
42
# http://www.turboprint.info/tp2/arm/turboprint-2.44-1.ARMhf.tgz
43
# ftp://ftp.zedonet.com/tp2/arm/turboprint-2.44-1.ARMhf.tgz
44
source_i686=("https://www.zedonet.com/download/tp2/${_srcdir}.i586.tgz")
45
source_x86_64=("https://www.zedonet.com/download/tp2/${_srcdir}.x86_64.tgz")
46
md5sums=('e3c504b2c1b7deb01d03fde710b117d7'
47
'60a1754b2abd30e75e51acd9576cda43'
48
'2640e1d95c3579d6cef590d18b4476df'
49
'1206069a3d461d97be48c251007975b1')
50
md5sums_i686=('5a3b555d5b347a35cdb502fe498ddcff')
51
md5sums_x86_64=('5aea3230efa797093de4ff73d09a97fd')
52
sha256sums=('c90e4f71a234dc0638d15305184daeed212ebf1f7efc2f5a2a09895ca09bea6d'
53
'de0c92b665150ceaf33c3cfd94b0afb422609194db9416aff59add5123bb8a2f'
54
'a6ba2b4bab8d2512e542427dd3473d1764a777ef0493031046dc7282dc05fdad'
55
'6123cfea355a0e308e1f5bab357450399670dde45d6ed367c13da38c53a871fb')
56
sha256sums_i686=('4cb8ebea5b1f2afd5f8154f5ec1c7411e7ea068920c6194d33a59dad29c8f03a')
57
sha256sums_x86_64=('e0f2f01e3e8052dfa54ecb8838e23db22a81cde757707295464c0041581e2ce0')
58
59
prepare() {
60
set -u
61
cd "${_srcdir}"
62
sed -e 's#^\(TPDAEMON_USER\)=.*$#\1=root#' -i 'system.cfg'
63
if ! grep -qe '^TP_CUPS=1' 'system.cfg'; then
64
echo 'TP_CUPS=1' >> 'system.cfg'
65
fi
66
set +u
67
68
patch -Np1 -i ../tpapplet.patch
69
}
70
71
package() {
72
set -u
73
cd "${_srcdir}"
74
RPM_BUILD_ROOT="${pkgdir}" sh -u 'lib/install-static' --rpm
75
76
# Install icons
77
install -Dpm644 'img/tpapplet.png' 'img/tpicon.png' 'img/tpmonitor.png' -t "${pkgdir}/usr/share/pixmaps"
78
79
# Install desktop entries
80
install -Dpm644 "${srcdir}/turboprint.desktop" "${srcdir}/turboprint-monitor.desktop" -t "${pkgdir}/usr/share/applications/"
81
82
# Install license
83
install -d "${pkgdir}/usr/share/licenses/${pkgname}"
84
ln -s "../../${pkgname}/locale/license_en.txt" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
85
86
# Install daemon
87
install -Dpm644 "${srcdir}/tprintdaemon.service" -t "${pkgdir}/usr/lib/systemd/system/"
88
89
# Install CUPS components
90
install -Dpm755 "${pkgdir}/usr/lib/turboprint"/{pstoturboprint,commandtoturboprint} -t "${pkgdir}/usr/lib/cups/filter/"
91
install -Dpm755 "${pkgdir}/usr/lib/turboprint/tpu" -t "${pkgdir}/usr/lib/cups/backend/"
92
93
# Install GIMP plugin
94
install -Dpm755 "${pkgdir}/usr/lib/turboprint/gimpplugin/gpturboprint" -t "${pkgdir}/usr/lib/gimp/2.0/plug-ins/"
95
install -Dpm644 "${pkgdir}/usr/lib/turboprint/gimpplugin/de.gmo" "${pkgdir}/usr/local/share/locale/de/LC_MESSAGES/gpturboprint.mo"
96
install -Dpm644 "${pkgdir}/usr/lib/turboprint/gimpplugin"/{papers,printers}.xml -t "${pkgdir}/usr/local/share/gpturboprint/1.1.11/xml/"
97
98
# Install KDE applet
99
install -Dpm644 "${pkgdir}/usr/lib/turboprint/kde42applet/plasma-applet-turboprint.desktop" -t "${pkgdir}/usr/share/kde4/services/"
100
install -Dpm755 "${pkgdir}/usr/lib/turboprint/kde42applet/plasma_applet_turboprint.so" -t "${pkgdir}/usr/lib/kde4/"
101
102
# Missing deps libpanel-applet-2.so.0 libgnomeui-2.so.0 libgnome-2.so.0
103
# Install GNOME applet
104
#install -Dpm644 "${pkgdir}/usr/lib/turboprint/gnomeapplet/tpmonapplet.server" -t "${pkgdir}/usr/lib/bonobo/servers/"
105
#install -Dpm755 "${pkgdir}/usr/lib/turboprint/gnomeapplet/tpgnomeapplet" -t "${pkgdir}/usr/bin/"
106
107
# Fix permissions
108
chmod 4755 "${pkgdir}/usr/share/turboprint/lib/pipeutility"
109
set +u
110
}
111
set +u
112
113
# vim:set ts=2 sw=2 et:
114
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 3 |
| 2026-08-02 00:16:08 | LOW | 3 |
| 2026-08-01 00:11:18 | LOW | 3 |
| 2026-07-31 00:14:10 | LOW | 3 |
| 2026-07-30 00:17:23 | LOW | 3 |
| 2026-07-29 00:25:53 | LOW | 3 |
| 2026-07-28 00:07:28 | LOW | 3 |
| 2026-07-27 00:24:32 | LOW | 3 |
| 2026-07-26 00:07:32 | LOW | 3 |
| 2026-07-25 00:13:44 | LOW | 3 |
| 2026-07-24 00:02:28 | LOW | 3 |
| 2026-07-23 00:14:47 | LOW | 3 |
| 2026-07-22 00:29:32 | LOW | 3 |
| 2026-07-21 00:24:15 | LOW | 3 |
| 2026-07-20 00:19:49 | LOW | 3 |
| 2026-07-19 00:17:08 | LOW | 3 |
| 2026-07-18 00:14:48 | LOW | 3 |
| 2026-07-17 00:06:16 | LOW | 3 |
| 2026-07-16 00:05:41 | LOW | 3 |
| 2026-07-15 00:09:25 | LOW | 3 |