xerox-phaser-3020

maintainer krant · 7 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a driver tarball from an archived official Xerox URL via web.archive.org, which is a common practice for unavailable original sources; the package installs only data files and libraries for CUPS, posing no execution risk beyond normal driver functionality.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a driver tarball from an archived official Xerox URL via web.archive.org, which is a common practice for unavailable original sources; the package installs only data files and libraries for CUPS, posing no execution risk beyond normal driver functionality.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:11 source=("https://web.archive.org/web/20260207213159/https://download.support.xerox.com/pub/drivers/3020/drivers/linux/en_GB/Xerox_Phaser_3020_Linux-Driver.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: krant <aleksey.vasilenko@gmail.com>
    
      2
    
      3pkgname=xerox-phaser-3020
    
      4pkgver=1.00.25
    
      5pkgrel=2
    
      6pkgdesc="Driver for the Xerox Phaser 3020. Also supports Phaser 3052, 3117, 3140, 3155, 3160, 3200MFP, 3250, 3260, 3300MFP, 3320, 3435, 3600, 6110MFP, WorkCentre 3025, 3210, 3215, 3220, 3225, 3315, 3325, 3550, 4118, PE120, PE220, FaxCentre 2218"
    
      7url="https://www.support.xerox.com/support/phaser-3020"
    
      8license=('custom')
    
      9arch=('x86_64' 'i686' 'armv7h')
    
      10depends=('libusb-compat' 'cups' 'ghostscript')
    
      11source=("https://web.archive.org/web/20260207213159/https://download.support.xerox.com/pub/drivers/3020/drivers/linux/en_GB/Xerox_Phaser_3020_Linux-Driver.tar.gz")
    
      12sha256sums=('a7a77b4609576a6ab0ff5a55ff36cab72759e59fb1b82226b0c0187deecdd5b4')
    
      13
    
      14package() {
    
      15    archdir="$CARCH"
    
      16    if [ "$CARCH" == "i686" ]; then
    
      17        archdir="i386"
    
      18    elif [ "$CARCH" == "armv7h" ]; then
    
      19        archdir="arm"
    
      20    fi
    
      21
    
      22    mkdir -p "$pkgdir"/usr/lib
    
      23    cp "$srcdir"/uld/$archdir/libscmssc.so "$pkgdir"/usr/lib
    
      24
    
      25    mkdir -p "$pkgdir"/usr/lib/cups/backend
    
      26    cp "$srcdir"/uld/$archdir/smfpnetdiscovery "$pkgdir"/usr/lib/cups/backend
    
      27
    
      28    mkdir -p "$pkgdir"/usr/lib/cups/filter
    
      29    cp "$srcdir"/uld/$archdir/pstosecps   "$pkgdir"/usr/lib/cups/filter
    
      30    cp "$srcdir"/uld/$archdir/rastertospl "$pkgdir"/usr/lib/cups/filter
    
      31
    
      32    mkdir -p "$pkgdir"/usr/share/ppd/xerox
    
      33    cp -ar "$srcdir"/uld/noarch/share/ppd/. "$pkgdir"/usr/share/ppd/xerox
    
      34    rm "$pkgdir"/usr/share/ppd/xerox/*_fr.ppd
    
      35}
    
      36

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2