jdk

LOW
maintainer dbermond 1087 votes scanned 2026-10-05 23:40:58.404909
View on AUR

Triggered rules

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:19 source=("https://download.oracle.com/java/${_majver}/archive/jdk-${pkgver}_linux-x64_bin.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer : Daniel Bermond <dbermond@archlinux.org>
2# Contributor: Det <nimetonmaili g-mail>
3
4pkgbase=jdk
5pkgname=('jre' 'jdk' 'jdk-doc')
6pkgver=27
7_build=35
8_hash=55ce5470a6294008af0057ff4626d0e5
9_majver="${pkgver%%.*}"
10pkgrel=1
11pkgdesc='Oracle Java'
12arch=('x86_64')
13url='https://www.oracle.com/java/'
14license=('LicenseRef-Custom')
15makedepends=(
16 'python-html2text'
17 # to satisfy pkgcheck:
18 'alsa-lib')
19source=("https://download.oracle.com/java/${_majver}/archive/jdk-${pkgver}_linux-x64_bin.tar.gz"
20 "https://download.oracle.com/otn_software/java/jdk/${pkgver}+${_build}/${_hash}/jdk-${pkgver}_doc-all.zip"
21 "jdk-${_majver}_doc-license.html"::"https://download.oracle.com/otndocs/jcp/java_se-${_majver}-final-spec/license.html"
22 'java.desktop'
23 'jconsole.desktop'
24 'jshell.desktop'
25 'java_16.png'
26 'java_48.png'
27 'LICENSE')
28noextract=("jdk-${pkgver}_doc-all.zip")
29sha256sums=('0c7bb6c33c7fcc46674054cab734e3ca027ba05323c6c6ecbc8786f76a45b155'
30 '767e992ce20e86a0452570ff9c0e0ee3bafb7a05ca99d5555634a9552011c0be'
31 '64c4284265aa0d7f0499dbb8eb9cc1d86ad75570e92e8b31675e6dc806ef001e'
32 'd3db8fd5b469110709dc4986b3ef8d858bfeb77851a32ff0d1c7df7e0a0e075f'
33 '72bbb9357debef6f03e5ee9a26189cd3e1a4f2c670595742b7f25b0b47caf044'
34 '848acd359383b9d0a496a33f9146a25f31ec1343d1bde6896fff6b640da1b863'
35 'd27fec1d74f7a3081c3d175ed184d15383666dc7f02cc0f7126f11549879c6ed'
36 '7cf8ca096e6d6e425b3434446b0835537d0fc7fe64b3ccba7a55f7bd86c7e176'
37 '20becfcac0bdeaa29a76e6966d727f8cc79381354cbd5d530cdec823954df19f')
38
39DLAGENTS=('https::/usr/bin/curl -fLC - --retry 3 --retry-delay 3 -b oraclelicense=a -o %o %u')
40
41_jre_deps=(
42 'ca-certificates-utils'
43 'freetype2'
44 'glibc'
45 'java-runtime-common'
46 'libx11'
47 'libxext'
48 'libxi'
49 'libxtst'
50 'libxrender'
51 'zlib')
52_jre_optdeps=(
53 'alsa-lib: for basic sound support'
54 'gtk3: for the Gtk+ 3 look and feel - desktop usage')
55_jre_provides=("java-runtime=${_majver}" "java-runtime-jdk${_majver}"
56 "jre${_majver}-jdk=${pkgver}-${pkgrel}"
57 "java-runtime-headless=${_majver}" "java-runtime-headless-jdk=${_majver}"
58 "jre${_majver}-jdk-headless=${pkgver}-${pkgrel}")
59_jre_backup=("etc/java-${pkgbase}/jaxp.properties"
60 "etc/java-${pkgbase}/jaxp-strict.properties.template"
61 "etc/java-${pkgbase}/logging.properties"
62 "etc/java-${pkgbase}/management/jmxremote.access"
63 "etc/java-${pkgbase}/management/jmxremote.password.template"
64 "etc/java-${pkgbase}/management/management.properties"
65 "etc/java-${pkgbase}/net.properties"
66 "etc/java-${pkgbase}/security/java.security"
67 "etc/java-${pkgbase}/security/policy/README.txt"
68 "etc/java-${pkgbase}/security/policy/limited/default_US_export.policy"
69 "etc/java-${pkgbase}/security/policy/limited/default_local.policy"
70 "etc/java-${pkgbase}/security/policy/limited/exempt_local.policy"
71 "etc/java-${pkgbase}/security/policy/unlimited/default_US_export.policy"
72 "etc/java-${pkgbase}/security/policy/unlimited/default_local.policy"
73 "etc/java-${pkgbase}/sound.properties")
74
75prepare() {
76 mkdir -p "jdk-doc-${pkgver}"
77 bsdtar -x -f "jdk-${pkgver}_doc-all.zip" -C "jdk-doc-${pkgver}" --strip-components='1'
78 html2text "jdk-${_majver}_doc-license.html" > LICENSE-doc
79}
80
81_package_jre() {
82 cd "jdk-${pkgver}"
83 local _jvmdir="/usr/lib/jvm/java-${_majver}-jdk"
84
85 install -d -m755 "${pkgdir}/etc"
86 install -d -m755 "${pkgdir}/${_jvmdir}"
87 install -d -m755 "${pkgdir}/usr/share/licenses/${pkgname}"
88
89 # conf
90 cp -a conf "${pkgdir}/etc/java-${pkgbase}"
91 ln -s "../../../../etc/java-${pkgbase}" "${pkgdir}/${_jvmdir}/conf"
92
93 # bin
94 install -D -m755 bin/{java,jfr,jwebserver,keytool,rmiregistry} -t "${pkgdir}/${_jvmdir}/bin"
95
96 # libs
97 cp -a lib "${pkgdir}/${_jvmdir}"
98 rm "${pkgdir}/${_jvmdir}/lib/"{ct.sym,libattach.so,libsaproc.so,src.zip}
99
100 # man pages
101 local _file
102 for _file in man/man1/{java,jfr,keytool,rmiregistry}.1
103 do
104 install -D -m644 "$_file" "${pkgdir}/usr/share/${_file%.1}-jdk${_majver}.1"
105 done
106
107 install -D -m644 release -t "${pkgdir}/${_jvmdir}"
108
109 # link JKS keystore from ca-certificates-utils
110 rm "${pkgdir}/${_jvmdir}/lib/security/cacerts"
111 ln -s /etc/ssl/certs/java/cacerts "${pkgdir}${_jvmdir}/lib/security/cacerts"
112
113 # legal/licenses
114 cp -a legal/* "${pkgdir}/usr/share/licenses/${pkgname}"
115 ln -s "$pkgname" "${pkgdir}/usr/share/licenses/java-${pkgname}"
116 ln -s "../../../share/licenses/${pkgname}" "${pkgdir}/${_jvmdir}/legal"
117 install -D -m644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}"
118}
119
120package_jre() {
121 pkgdesc+=' Runtime Environment'
122 depends=("${_jre_deps[@]}")
123 optdepends=("${_jre_optdeps[@]}")
124 provides=("${_jre_provides[@]}")
125 conflicts=('jdk')
126 backup=("${_jre_backup[@]}")
127 install=jre.install
128
129 _package_jre
130}
131
132package_jdk() {
133 pkgdesc+=' Development Kit'
134 depends=('java-environment-common' "${_jre_deps[@]}" 'zlib' 'hicolor-icon-theme')
135 optdepends=("${_jre_optdeps[@]}")
136 provides=("java-environment=${_majver}" "java-environment-jdk=${_majver}"
137 "jdk${_majver}-jdk=${pkgver}-${pkgrel}" "jre=${_majver}" "${_jre_provides[@]}")
138 conflicts=('jre')
139 backup=("${_jre_backup[@]}")
140 install=jdk.install
141
142 _package_jre
143
144 cd "${srcdir}/jdk-${pkgver}"
145 local _jvmdir="/usr/lib/jvm/java-${_majver}-jdk"
146
147 # bin
148 install -D -m755 bin/* -t "${pkgdir}/${_jvmdir}/bin"
149
150 # libs
151 install -D -m644 lib/ct.sym -t "${pkgdir}/${_jvmdir}/lib"
152 install -D -m644 lib/libattach.so -t "${pkgdir}/${_jvmdir}/lib"
153 install -D -m644 lib/libsaproc.so -t "${pkgdir}/${_jvmdir}/lib"
154
155 cp -a include "${pkgdir}/${_jvmdir}"
156 cp -a jmods "${pkgdir}/${_jvmdir}"
157
158 install -D -m644 lib/src.zip -t "${pkgdir}/${_jvmdir}/lib"
159
160 # desktop and icons
161 install -D -m644 "${srcdir}/java.desktop" "${pkgdir}/usr/share/applications/java-java-jdk.desktop"
162 install -D -m644 "${srcdir}/jconsole.desktop" "${pkgdir}/usr/share/applications/jconsole-java-jdk.desktop"
163 install -D -m644 "${srcdir}/jshell.desktop" "${pkgdir}/usr/share/applications/jshell-java-jdk.desktop"
164 install -D -m644 "${srcdir}/java_16.png" "${pkgdir}/usr/share/icons/hicolor/16x16/apps/java-jdk.png"
165 install -D -m644 "${srcdir}/java_48.png" "${pkgdir}/usr/share/icons/hicolor/48x48/apps/java-jdk.png"
166
167 # man pages
168 local _file
169 while read -r -d '' _file
170 do
171 install -D -m644 "$_file" "${pkgdir}/usr/share/${_file%.1}-jdk${_majver}.1"
172 done < <(find man/man1 -type f -print0)
173}
174
175package_jdk-doc() {
176 pkgdesc+=' documentation'
177 arch=('any')
178
179 install -d -m755 "${pkgdir}/usr/share"/{doc,licenses}
180 cp -dr --no-preserve='ownership' "jdk-doc-${pkgver}" "${pkgdir}/usr/share/doc/java-jdk"
181 mv "${pkgdir}/usr/share/doc/java-jdk/legal" "${pkgdir}/usr/share/licenses/${pkgname}"
182 install -D -m644 LICENSE-doc "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
183 ln -s "../../licenses/${pkgname}" "${pkgdir}/usr/share/doc/java-jdk/legal"
184}
185

Changes since previous scan

--- PKGBUILD @ 2026-08-13 00:17
+++ PKGBUILD @ 2026-10-05 23:40
@@ -3,9 +3,9 @@
pkgbase=jdk
pkgname=('jre' 'jdk' 'jdk-doc')
-pkgver=26.0.2
-_build=10
-_hash=818d462d89b645c7a1aad49066c454e5
+pkgver=27
+_build=35
+_hash=55ce5470a6294008af0057ff4626d0e5
_majver="${pkgver%%.*}"
pkgrel=1
pkgdesc='Oracle Java'
@@ -26,12 +26,12 @@
'java_48.png'
'LICENSE')
noextract=("jdk-${pkgver}_doc-all.zip")
-sha256sums=('11de2bce72e7f07b9e80afa9bdd950b42f3a5c69cf4969e44389d50f466959e2'
- 'b6600b90e3d177d8b02a278761ac2ec59742682a722bad281421013844e0e875'
- '27984b214d135bc4f6fb04c2d2cb85de8b9ad55f7b5752bf128f58c62e11ddcc'
- '0a0c33a4cebf59d365a95869f0513a8f2b54ed69db7c8b8220f364b4a3069726'
- '25aa549dfc515ca177e416bc1635db85655db2d2e9c77ea153b8768e11953b16'
- '3e59f0f2e134b87deedb10469a331f974d5b575d748633dcc1e3000f798a9c89'
+sha256sums=('0c7bb6c33c7fcc46674054cab734e3ca027ba05323c6c6ecbc8786f76a45b155'
+ '767e992ce20e86a0452570ff9c0e0ee3bafb7a05ca99d5555634a9552011c0be'
+ '64c4284265aa0d7f0499dbb8eb9cc1d86ad75570e92e8b31675e6dc806ef001e'
+ 'd3db8fd5b469110709dc4986b3ef8d858bfeb77851a32ff0d1c7df7e0a0e075f'
+ '72bbb9357debef6f03e5ee9a26189cd3e1a4f2c670595742b7f25b0b47caf044'
+ '848acd359383b9d0a496a33f9146a25f31ec1343d1bde6896fff6b640da1b863'
'd27fec1d74f7a3081c3d175ed184d15383666dc7f02cc0f7126f11549879c6ed'
'7cf8ca096e6d6e425b3434446b0835537d0fc7fe64b3ccba7a55f7bd86c7e176'
'20becfcac0bdeaa29a76e6966d727f8cc79381354cbd5d530cdec823954df19f')

Scan history

Scanned at (UTC)SeverityRules
2026-10-05 23:40:58 Low 1
2026-08-13 00:17:07 Clean 2
2026-08-12 01:22:13 Low 1
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion