xsane-gimp

maintainer tonitch · 41 votes · base xsane · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from a Debian archive, which is a standard and trustworthy source for packaging; the package builds from official project source code with additional patches, posing no execution of untrusted remote code or supply-chain risks.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a Debian archive, which is a standard and trustworthy source for packaging; the package builds from official project source code with additional patches, posing no execution of untrusted remote code or supply-chain risks.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 "http://http.debian.net/debian/pool/main/x/$pkgname/${pkgname}_$pkgver.orig.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Peter Theobald <dev@petertheobald.de>
    
      2# Co-maintainer: Kristopher James Kent <kris@kjkent.dev>
    
      3# Contributor: Tobias Powalowski <tpowa@archlinux.org>
    
      4# Contributor: Sarah Hay <sarahhay@mb.sympatico.ca>
    
      5
    
      6pkgbase='xsane'
    
      7pkgname=('xsane' 'xsane-gimp')
    
      8pkgver='0.999'
    
      9pkgrel='9'
    
      10arch=('x86_64')
    
      11url='https://gitlab.com/sane-project/frontend/xsane'
    
      12license=('GPL2')
    
      13makedepends=('gtk2' 'lcms2' 'sane' 'zlib' 'libjpeg-turbo' 'gimp')
    
      14source=(
    
      15  "http://http.debian.net/debian/pool/main/x/$pkgname/${pkgname}_$pkgver.orig.tar.gz"
    
      16  'xsane-0.995-xdg-open.patch'
    
      17  '0165-xsane-0.999-lcms2.patch'
    
      18  '0001-lcms2_configure.patch'
    
      19  'xsane-preview-selection.patch'
    
      20  'configure-add-stdlib-to-conftest.patch'
    
      21  'fix-func_arg_mismatch.patch'
    
      22)
    
      23sha512sums=(
    
      24  '73ec961fce1a86b5d6f5bac0995d222785eb4b077dc8e72492b092d2bf4500455426e80e4d27233721cd38ec84f77fb9f92190a6afe45bdaf7ffd1ee50b431ed'
    
      25  'ed1c1b0fab10b456f7dc6befd6f91eb8d3e1bae0f1be3abf71d334d4a2ae8f8335ba37fdd73f336f7c5f45916df917dc77fd792e6b849a87bde95babc698bf39'
    
      26  '557913adab90b2ba051a2988bdbfc600ca6a33f099810f5f867c8d8b2c5a45b0468dd8a1a1593ff33d149b4a5917b24d716b54ae2605b3a2e19053e02e5b64c6'
    
      27  'a8b5e0466c1306b8df68d814a3f02bc74e4d470aa42b9e0eebad41d2e274ff74328a837dd9a0b5ca59e4df63ecbb53b268f6d4948a690d9346c5399bb5b3d1e4'
    
      28  '001b021ddf0f92e2bbab0211cfe92c54b785e94e7c92102caedd8d4ce34c833847157174a4d800d8859ba8d05300db74b8af352e5347d2883e17bca57454e96d'
    
      29  '04ea857a34a9400bc7c030563a942309d106893c6314dd099bf053227672fca9879314015be912538a7f89a414d3f0a24e7f45bfc51a0b621ed27dcc1c91a4e8'
    
      30  'ebf917385e180434167b45db0f31f967158548dd60624b1412f1ec40e4895284aa420e76c96c82f5cf9d198b306a06b27e65b548d117032521e5dd2c09df8b38'
    
      31)
    
      32
    
      33prepare() {
    
      34  cd "$srcdir/$pkgname-$pkgver"
    
      35  # Fix: use "xdg-open" instead of "netscape" to launch help browser - taken from Fedora
    
      36  patch -Np1 -i "$srcdir/xsane-0.995-xdg-open.patch"
    
      37  sed -i -e 's:png_ptr->jmpbuf:png_jmpbuf(png_ptr):' src/xsane-save.c
    
      38  patch -Np1 -i "$srcdir/0165-xsane-0.999-lcms2.patch"
    
      39  patch -Np1 -i "$srcdir/0001-lcms2_configure.patch"
    
      40  patch -p1 -i "$srcdir/xsane-preview-selection.patch" # Fix selection preview
    
      41  patch -p1 -i "$srcdir/configure-add-stdlib-to-conftest.patch" # Fix failing build of conftest by adding stdlib.h to test program
    
      42  patch -p1 -i "$srcdir/fix-func_arg_mismatch.patch" # Fixes build failure, patch provided by AUR user jprjr
    
      43}
    
      44
    
      45build() {
    
      46  cd "$srcdir/$pkgbase-$pkgver"
    
      47
    
      48  ./configure \
    
      49    --prefix=/usr \
    
      50    --mandir=/usr/share/man \
    
      51    --enable-gimp
    
      52  make
    
      53  mv src/xsane src/xsane-gimp
    
      54
    
      55  # Build again with GIMP disabled
    
      56  make clean
    
      57  ./configure \
    
      58    --prefix=/usr \
    
      59    --sbindir=/usr/bin \
    
      60    --mandir=/usr/share/man \
    
      61    --disable-gimp
    
      62  make
    
      63}
    
      64
    
      65package_xsane() {
    
      66  pkgdesc='A GTK-based X11 frontend for SANE and plugin for GIMP.'
    
      67  install="$pkgname.install"
    
      68  depends=('gtk2' 'lcms2' 'sane' 'zlib' 'libjpeg-turbo')  
    
      69  optdepends=('xsane-gimp: for GIMP plugin support')
    
      70  cd "$srcdir/$pkgbase-$pkgver"
    
      71  make DESTDIR="$pkgdir" install
    
      72}
    
      73
    
      74package_xsane-gimp() {
    
      75  pkgdesc='XSane GIMP plugin.'
    
      76  depends=('xsane' 'gimp')
    
      77  cd "$srcdir/$pkgbase-$pkgver"
    
      78  install -D -m755 src/xsane-gimp "$pkgdir/usr/bin/xsane-gimp"
    
      79
    
      80  # For making GIMP plugin available
    
      81  mkdir -p "$pkgdir/usr/lib/gimp/2.0/plug-ins"
    
      82  ln -sf /usr/bin/xsane-gimp "$pkgdir/usr/lib/gimp/2.0/plug-ins/xsane"
    
      83
    
      84  ## TODO: Is the below still relevant? How come it's commented? If not useful, let's remove?
    
      85  # http://cvs.fedoraproject.org/viewvc/rpms/xsane/devel/xsane.spec?revision=1.80&view=markup
    
      86  # when makepkg will allow splitted pkg install file support we might change add a xsane-gimp.install file with the commands that are used by fedora,
    
      87  # gentoo has something similar
    
      88  #%post gimp
    
      89  #107 	if [ -x "%{_sbindir}/gimp-plugin-mgr" ]; then
    
      90  #108 	%{_sbindir}/gimp-plugin-mgr --install xsane
    
      91  #109 	fi
    
      92  #110 	
    
      93  #111 	%preun gimp
    
      94  #112 	if [ $1 = 0 ]; then
    
      95  #113 	if [ -x "%{_sbindir}/gimp-plugin-mgr" ]; then
    
      96  #114 	%{_sbindir}/gimp-plugin-mgr --uninstall xsane
    
      97  #115 	fi
    
      98  #116 	fi
    
      99}
    
      100

Changes since previous scan

--- PKGBUILD @ 2026-07-16 00:05
+++ PKGBUILD @ 2026-08-03 00:08
@@ -6,11 +6,11 @@
 pkgbase='xsane'
 pkgname=('xsane' 'xsane-gimp')
 pkgver='0.999'
-pkgrel='8'
+pkgrel='9'
 arch=('x86_64')
 url='https://gitlab.com/sane-project/frontend/xsane'
 license=('GPL2')
-makedepends=('gtk2' 'lcms2' 'sane' 'zlib' 'libjpeg' 'gimp')
+makedepends=('gtk2' 'lcms2' 'sane' 'zlib' 'libjpeg-turbo' 'gimp')
 source=(
   "http://http.debian.net/debian/pool/main/x/$pkgname/${pkgname}_$pkgver.orig.tar.gz"
   'xsane-0.995-xdg-open.patch'
@@ -65,7 +65,7 @@
 package_xsane() {
   pkgdesc='A GTK-based X11 frontend for SANE and plugin for GIMP.'
   install="$pkgname.install"
-  depends=('gtk2' 'lcms2' 'sane' 'zlib' 'libjpeg')  
+  depends=('gtk2' 'lcms2' 'sane' 'zlib' 'libjpeg-turbo')  
   optdepends=('xsane-gimp: for GIMP plugin support')
   cd "$srcdir/$pkgbase-$pkgver"
   make DESTDIR="$pkgdir" install

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 09:51:03	MEDIUM	1
2026-07-16 00:05:41	LOW	2