jdk-lts-doc
LOW
maintainer dbermond
10 votes
base
jdk-lts
scanned 2026-10-02 00:00:32.890515
Why flagged
The package downloads official Oracle JDK/JRE binaries and documentation from Oracle's own domain (download.oracle.com), which is the legitimate source; despite the static analyzer flag for a non-standard host, this is a normal and expected source for Oracle Java, and no untrusted or executable code is introduced beyond the official vendor binaries.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official Oracle JDK/JRE binaries and documentation from Oracle's own domain (download.oracle.com), which is the legitimate source; despite the static analyzer flag for a non-standard host, this is a normal and expected source for Oracle Java, and no untrusted or executable code is introduced beyond the official vendor binaries.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:18
source=("https://download.oracle.com/java/${_majver}/archive/jdk-${pkgver}_linux-x64_bin.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer : Daniel Bermond <dbermond@archlinux.org>
2
3
pkgbase=jdk-lts
4
pkgname=('jre-lts' 'jdk-lts' 'jdk-lts-doc')
5
pkgver=25.0.4
6
_build=7
7
_hash=eda28b422d69454c901d71e19e354064
8
_majver="${pkgver%%.*}"
9
pkgrel=1
10
pkgdesc='Oracle Java'
11
arch=('x86_64')
12
url='https://www.oracle.com/java/'
13
license=('LicenseRef-Custom')
14
makedepends=(
15
'python-html2text'
16
# to satisfy pkgcheck:
17
'alsa-lib')
18
source=("https://download.oracle.com/java/${_majver}/archive/jdk-${pkgver}_linux-x64_bin.tar.gz"
19
"https://download.oracle.com/otn_software/java/jdk/${pkgver}+${_build}/${_hash}/jdk-${pkgver}_doc-all.zip"
20
"jdk-${_majver}_doc-license.html"::"https://download.oracle.com/otndocs/jcp/java_se-${_majver}-final-spec/license.html"
21
'java.desktop'
22
'jconsole.desktop'
23
'jshell.desktop'
24
'java_16.png'
25
'java_48.png'
26
'LICENSE')
27
noextract=("jdk-${pkgver}_doc-all.zip")
28
sha256sums=('0d3e87de2516557a170e2df4f6a4872b1749ea3174dd7c9e555cb5170e618301'
29
'74673f5f6116845322fe3f3d0929ce6f047a7d992b652da1af5492cb929e9b81'
30
'238ad31acf952842a3161837b70ddc1debb4a9d52f8248bcd7732bed5685976a'
31
'fcfed2eb57f8c7948a84905827c2ec0b6ff0ff70b47a338b6329be2bf4905589'
32
'9e3a89d09f130fbbb92e1e997045ce0c268aee749ab415fa780cb3c156d22246'
33
'bd2aa445563299478cefe7e9a318165e4be550ac87739aa881d039fdea8084d6'
34
'd27fec1d74f7a3081c3d175ed184d15383666dc7f02cc0f7126f11549879c6ed'
35
'7cf8ca096e6d6e425b3434446b0835537d0fc7fe64b3ccba7a55f7bd86c7e176'
36
'20becfcac0bdeaa29a76e6966d727f8cc79381354cbd5d530cdec823954df19f')
37
38
DLAGENTS=('https::/usr/bin/curl -fLC - --retry 3 --retry-delay 3 -b oraclelicense=a -o %o %u')
39
40
_jre_deps=(
41
'ca-certificates-utils'
42
'freetype2'
43
'glibc'
44
'java-runtime-common'
45
'libx11'
46
'libxext'
47
'libxi'
48
'libxtst'
49
'libxrender'
50
'zlib')
51
_jre_optdeps=(
52
'alsa-lib: for basic sound support'
53
'gtk3: for the Gtk+ 3 look and feel - desktop usage')
54
_jre_provides=("java-runtime=${_majver}" "java-runtime-jdk${_majver}"
55
"jre${_majver}-jdk=${pkgver}-${pkgrel}"
56
"java-runtime-headless=${_majver}" "java-runtime-headless-jdk=${_majver}"
57
"jre${_majver}-jdk-headless=${pkgver}-${pkgrel}")
58
_jre_backup=("etc/java-${pkgbase}/jaxp.properties"
59
"etc/java-${pkgbase}/jaxp-strict.properties.template"
60
"etc/java-${pkgbase}/logging.properties"
61
"etc/java-${pkgbase}/management/jmxremote.access"
62
"etc/java-${pkgbase}/management/jmxremote.password.template"
63
"etc/java-${pkgbase}/management/management.properties"
64
"etc/java-${pkgbase}/net.properties"
65
"etc/java-${pkgbase}/sdp/sdp.conf.template"
66
"etc/java-${pkgbase}/security/java.security"
67
"etc/java-${pkgbase}/security/policy/README.txt"
68
"etc/java-${pkgbase}/security/policy/limited/default_US_export.policy"
69
"etc/java-${pkgbase}/security/policy/limited/default_local.policy"
70
"etc/java-${pkgbase}/security/policy/limited/exempt_local.policy"
71
"etc/java-${pkgbase}/security/policy/unlimited/default_US_export.policy"
72
"etc/java-${pkgbase}/security/policy/unlimited/default_local.policy"
73
"etc/java-${pkgbase}/sound.properties")
74
75
prepare() {
76
mkdir -p "jdk-doc-${pkgver}"
77
bsdtar -x -f "jdk-${pkgver}_doc-all.zip" -C "jdk-doc-${pkgver}" --strip-components='1'
78
html2text "jdk-${_majver}_doc-license.html" > LICENSE-doc
79
}
80
81
_package_jre() {
82
cd "jdk-${pkgver}"
83
local _jvmdir="/usr/lib/jvm/java-${_majver}-jdk"
84
85
install -d -m755 "${pkgdir}/etc"
86
install -d -m755 "${pkgdir}/${_jvmdir}"
87
install -d -m755 "${pkgdir}/usr/share/licenses/${pkgname}"
88
89
# conf
90
cp -a conf "${pkgdir}/etc/java-${pkgbase}"
91
ln -s "../../../../etc/java-${pkgbase}" "${pkgdir}/${_jvmdir}/conf"
92
93
# bin
94
install -D -m755 bin/{java,jfr,jrunscript,jwebserver} -t "${pkgdir}/${_jvmdir}/bin"
95
install -D -m755 bin/{keytool,rmiregistry} -t "${pkgdir}/${_jvmdir}/bin"
96
97
# libs
98
cp -a lib "${pkgdir}/${_jvmdir}"
99
rm "${pkgdir}/${_jvmdir}/lib/"{ct.sym,libattach.so,libsaproc.so,src.zip}
100
101
# man pages
102
local _file
103
for _file in man/man1/{java,jfr,jrunscript,keytool,rmiregistry}.1
104
do
105
install -D -m644 "$_file" "${pkgdir}/usr/share/${_file%.1}-jdk${_majver}.1"
106
done
107
108
install -D -m644 release -t "${pkgdir}/${_jvmdir}"
109
110
# link JKS keystore from ca-certificates-utils
111
rm "${pkgdir}/${_jvmdir}/lib/security/cacerts"
112
ln -s /etc/ssl/certs/java/cacerts "${pkgdir}${_jvmdir}/lib/security/cacerts"
113
114
# legal/licenses
115
cp -a legal/* "${pkgdir}/usr/share/licenses/${pkgname}"
116
ln -s "$pkgname" "${pkgdir}/usr/share/licenses/java-${pkgname}"
117
ln -s "../../../share/licenses/${pkgname}" "${pkgdir}/${_jvmdir}/legal"
118
install -D -m644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}"
119
}
120
121
package_jre-lts() {
122
pkgdesc+=' Runtime Environment (LTS release)'
123
depends=("${_jre_deps[@]}")
124
optdepends=("${_jre_optdeps[@]}")
125
provides=("jre=${_majver}" "${_jre_provides[@]}")
126
conflicts=('jdk-lts')
127
backup=("${_jre_backup[@]}")
128
install=jre.install
129
130
_package_jre
131
}
132
133
package_jdk-lts() {
134
pkgdesc+=' Development Kit (LTS release)'
135
depends=('java-environment-common' "${_jre_deps[@]}" 'zlib' 'hicolor-icon-theme')
136
optdepends=("${_jre_optdeps[@]}")
137
provides=("java-environment=${_majver}" "java-environment-jdk=${_majver}"
138
"jdk${_majver}-jdk=${pkgver}-${pkgrel}" "jre=${_majver}" 'jre-lts' "${_jre_provides[@]}")
139
conflicts=('jre-lts')
140
backup=("${_jre_backup[@]}")
141
install=jdk.install
142
143
_package_jre
144
145
cd "${srcdir}/jdk-${pkgver}"
146
local _jvmdir="/usr/lib/jvm/java-${_majver}-jdk"
147
148
# bin
149
install -D -m755 bin/* -t "${pkgdir}/${_jvmdir}/bin"
150
151
# libs
152
install -D -m644 lib/ct.sym -t "${pkgdir}/${_jvmdir}/lib"
153
install -D -m644 lib/libattach.so -t "${pkgdir}/${_jvmdir}/lib"
154
install -D -m644 lib/libsaproc.so -t "${pkgdir}/${_jvmdir}/lib"
155
156
cp -a include "${pkgdir}/${_jvmdir}"
157
cp -a jmods "${pkgdir}/${_jvmdir}"
158
159
install -D -m644 lib/src.zip -t "${pkgdir}/${_jvmdir}/lib"
160
161
# desktop and icons
162
install -D -m644 "${srcdir}/java.desktop" "${pkgdir}/usr/share/applications/java-java${_majver}-jdk.desktop"
163
install -D -m644 "${srcdir}/jconsole.desktop" "${pkgdir}/usr/share/applications/jconsole-java${_majver}-jdk.desktop"
164
install -D -m644 "${srcdir}/jshell.desktop" "${pkgdir}/usr/share/applications/jshell-java${_majver}-jdk.desktop"
165
install -D -m644 "${srcdir}/java_16.png" "${pkgdir}/usr/share/icons/hicolor/16x16/apps/java${_majver}-jdk.png"
166
install -D -m644 "${srcdir}/java_48.png" "${pkgdir}/usr/share/icons/hicolor/48x48/apps/java${_majver}-jdk.png"
167
168
# man pages
169
local _file
170
while read -r -d '' _file
171
do
172
install -D -m644 "$_file" "${pkgdir}/usr/share/${_file%.1}-jdk${_majver}.1"
173
done < <(find man/man1 -type f -print0)
174
}
175
176
package_jdk-lts-doc() {
177
pkgdesc+=' documentation (LTS release)'
178
arch=('any')
179
180
install -d -m755 "${pkgdir}/usr/share"/{doc,licenses}
181
cp -dr --no-preserve='ownership' "jdk-doc-${pkgver}" "${pkgdir}/usr/share/doc/java${_majver}-jdk"
182
mv "${pkgdir}/usr/share/doc/java${_majver}-jdk/legal" "${pkgdir}/usr/share/licenses/${pkgname}"
183
install -D -m644 LICENSE-doc "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
184
ln -s "../../licenses/${pkgname}" "${pkgdir}/usr/share/doc/java${_majver}-jdk/legal"
185
}
186
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |
| 2026-09-27 00:07:07 | Low | 2 |
| 2026-09-26 00:12:15 | Low | 2 |
| 2026-09-25 00:03:36 | Low | 2 |
| 2026-09-24 00:24:14 | Low | 2 |
| 2026-09-23 00:28:13 | Low | 2 |
| 2026-09-22 00:15:14 | Low | 2 |
| 2026-09-21 00:26:32 | Low | 2 |
| 2026-09-20 00:25:31 | Low | 2 |
| 2026-09-19 00:25:36 | Low | 2 |
| 2026-09-18 00:17:11 | Low | 2 |
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |