jdk11

MEDIUM
maintainer severach 6 votes scanned 2026-10-17 19:19:13.554222
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:46 "https://download.oracle.com/otn-pub/java/jdk/${pkgver}+${_build}/${_hash}/${_srcfil}"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Chris Severance aur.severach AatT spamgourmet.com
2# Contributor: Daniel Bermond < gmail-com: danielbermond >
3# Contributor: Det <nimetonmaili g-mail>
4
5set -u
6pkgname='jdk11'
7#pkgver='11.0.3'; _build='12'; _hash='37f5e150db5247ab9333b11c1dddcd30'
8#pkgver='11.0.4'; _build='10'; _hash='cf1bbcbf431a474eb9fc550051f4ee78'
9#pkgver='11.0.5'; _build='10'; _hash='e51269e04165492b90fa15af5b4eb1a5'
10#pkgver='11.0.6'; _build='8'; _hash='90eb79fb590d45c8971362673c5ab495'
11#pkgver='11.0.7'; _build='8'; _hash='8c7daf89330c48f0b9e32f57169f7bac'
12#pkgver='11.0.8'; _build='10'; _hash='dc5cf74f97104e8eac863698146a7ac3'
13#pkgver='11.0.9'; _build='7'; _hash='eec35ebefb3f4133bd045b891f05db94'
14#pkgver='11.0.10'; _build='8'; _hash='020c4a6d33b74f6a9d2bc6fbf189da81'
15#pkgver='11.0.11'; _build='9'; _hash='ab2da78f32ed489abb3ff52fd0a02b1c'
16#pkgver='11.0.12'; _build='8'; _hash='f411702ca7704a54a79ead0c2e0942a3'
17#pkgver='11.0.13'; _build='10'; _hash='bdde8881e2e3437baa70044f884d2d67'
18#pkgver='11.0.14'; _build='8'; _hash='7e5bbbfffe8b45e59d52a96aacab2f04'
19#pkgver='11.0.15.1'; _build='2'; _hash='d76aabb62f1c47aa8588b9ae5a8a5b46'
20#pkgver='11.0.17'; _build='10'; _hash='8bd089539add49a9b99e2f27eb0c4329'
21#pkgver='11.0.19'; _build='9'; _hash='56a39267b45342398c37a72026d961ab'
22#pkgver='11.0.20'; _build='9'; _hash='78ca14fd6c8e40f8a74a1b7660c79db8'
23#pkgver='11.0.21'; _build='9'; _hash='8819d0447e4d41b3bd1d9e1007728d17'
24#pkgver='11.0.25'; _build='9'; _hash='60e5d03cc24a4e1c8ab5d29303dbe066'
25#pkgver='11.0.26'; _build='7'; _hash='720377fa814b4b4491dea5837af261de'
26#pkgver='11.0.28'; _build='12'; _hash='b9df5b5128bc4f4fac0e12c356ea6ae3'
27#pkgver='11.0.31'; _build='9'; _hash='ec89b195d0be4df08da18c8c76ca2174'
28pkgver='11.0.32'; _build='7'; _hash='b8446df132c84ab496cc1dd7b984d37d'
29_major="${pkgver%%.*}"
30pkgrel='1'
31pkgdesc="Oracle Java ${_major} Development Kit"
32pkgdesc+=' LTS'
33arch=('x86_64')
34url='https://www.oracle.com/java/technologies/javase/jdk11-archive-downloads.html'
35license=('custom')
36depends=('java-environment-common' "jre${_major}>=${pkgver}" 'zlib' 'hicolor-icon-theme')
37provides=(
38 "java-environment=${_major}"
39 "java-environment-jdk=${_major}"
40 "jdk=${pkgver}"
41)
42options=('!strip') # JDK debug-symbols
43install="${pkgname}.install"
44_srcfil="jdk-${pkgver}_linux-x64_bin.tar.gz"
45source=(
46 "https://download.oracle.com/otn-pub/java/jdk/${pkgver}+${_build}/${_hash}/${_srcfil}" # Now /otn/, Oracle sso required
47 'java.desktop'
48 'jconsole.desktop'
49 'jshell.desktop'
50 'java_16.png'
51 'java_48.png'
52 'readme.sh'
53)
54# from oracle-sqldeveloper
55DLAGENTS+=("manual::${startdir:-}/readme.sh %o %u")
56source[0]="manual://${_srcfil}"
57if [ ! -z "${HOME:-}" ]; then # block mksrcinfo
58 XDG_DOWNLOAD_DIR="$(xdg-user-dir DOWNLOAD 2>/dev/null)" || :
59 if [ -z "${XDG_DOWNLOAD_DIR}" ]; then
60 XDG_DOWNLOAD_DIR=~/'Downloads'
61 fi
62 if [ -s "${XDG_DOWNLOAD_DIR}/${_srcfil}" ] && [ ! -e "${_srcfil}" ]; then
63 if type msg > /dev/null 2>&1; then
64 set +u
65 msg "Scooping files from ${XDG_DOWNLOAD_DIR}" 1>&2
66 msg2 "${_srcfil}" 1>&2
67 set -u
68 ln -sr "${XDG_DOWNLOAD_DIR}/${_srcfil}"
69 fi
70 fi
71fi
72unset _srcfil
73unset XDG_DOWNLOAD_DIR
74
75md5sums=('45ad07cbf79f48aea2f4af349995fed2'
76 '985d0d81ece57d0ea633ccc1d3fd78ed'
77 'fbd4ddd9069e48a65da6e0cb33db9bc1'
78 'e59149780f4d1124f6e339611da9c70b'
79 '6181f1ef1e5aeb637ef4cd593106beef'
80 '1db7eb33e844d1a41bce196ab622da40'
81 '51c8839211cc53f09c9b11a8e28ed1ef')
82sha256sums=('a5c7180ade318db23972bcb9bd2f90d66efe507213c0079acc71ca8206690dd8'
83 '1052634cdcbf50ca14b864b58f3afa53de1706bdc9c593667c29974146212c54'
84 '9a84d1b4dd969e867b2dbb6df0d0c44814729e0f1d0c61ab6c54d676eae83b3b'
85 '73d686fd6e478a887a51451d7ada7c045f31ce299f65f45e50a793820ee99d85'
86 'd27fec1d74f7a3081c3d175ed184d15383666dc7f02cc0f7126f11549879c6ed'
87 '7cf8ca096e6d6e425b3434446b0835537d0fc7fe64b3ccba7a55f7bd86c7e176'
88 'f1081b08cfbb467277e95b3794191c9963398579733fa8832425b308b5917711')
89
90DLAGENTS=("${DLAGENTS[@]// -gqb \"\"/ -gq}")
91DLAGENTS=("${DLAGENTS[@]//curl -/curl -b 'oraclelicense=a' -}")
92
93package() {
94 local -; set -u
95 cd "jdk-${pkgver}"
96
97 local _jvmdir="/usr/lib/jvm/java-${_major}-jdk"
98
99 install -d -m755 "${pkgdir}/${_jvmdir}"
100 install -d -m755 "${pkgdir}/usr/share/licenses/${pkgname}"
101
102 # bin
103 cp -a 'bin' "${pkgdir}/${_jvmdir}"
104 rm "${pkgdir}/${_jvmdir}/bin/"{java,jjs,jrunscript,keytool,pack200}
105 rm "${pkgdir}/${_jvmdir}/bin/"{rmid,rmiregistry,unpack200}
106
107 # libs
108 install -D -m644 'lib/ct.sym' -t "${pkgdir}/${_jvmdir}/lib"
109 install -D -m644 'lib/libattach.so' -t "${pkgdir}/${_jvmdir}/lib"
110 install -D -m644 'lib/libsaproc.so' -t "${pkgdir}/${_jvmdir}/lib"
111 cp -a 'lib/jfr' "${pkgdir}/${_jvmdir}/lib"
112
113 cp -a 'include' "${pkgdir}/${_jvmdir}"
114 cp -a 'jmods' "${pkgdir}/${_jvmdir}"
115
116 install -D -m644 'lib/src.zip' -t "${pkgdir}/${_jvmdir}/lib"
117
118 # desktop and icons
119 install -D -m644 "${srcdir}/java.desktop" "${pkgdir}/usr/share/applications/java-java${_major}-jdk.desktop"
120 install -D -m644 "${srcdir}/jconsole.desktop" "${pkgdir}/usr/share/applications/jconsole-java${_major}-jdk.desktop"
121 install -D -m644 "${srcdir}/jshell.desktop" "${pkgdir}/usr/share/applications/jshell-java${_major}-jdk.desktop"
122 install -D -m644 "${srcdir}/java_16.png" "${pkgdir}/usr/share/icons/hicolor/16x16/apps/java${_major}-jdk.png"
123 install -D -m644 "${srcdir}/java_48.png" "${pkgdir}/usr/share/icons/hicolor/48x48/apps/java${_major}-jdk.png"
124
125 # legal/licenses
126 cp -a legal/* "${pkgdir}/usr/share/licenses/${pkgname}"
127 ln -s "${pkgname}" "${pkgdir}/usr/share/licenses/java${_major}-${pkgname}"
128}
129set +u
130

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-17 19:19
@@ -24,13 +24,14 @@
#pkgver='11.0.25'; _build='9'; _hash='60e5d03cc24a4e1c8ab5d29303dbe066'
#pkgver='11.0.26'; _build='7'; _hash='720377fa814b4b4491dea5837af261de'
#pkgver='11.0.28'; _build='12'; _hash='b9df5b5128bc4f4fac0e12c356ea6ae3'
-pkgver='11.0.31'; _build='9'; _hash='ec89b195d0be4df08da18c8c76ca2174'
+#pkgver='11.0.31'; _build='9'; _hash='ec89b195d0be4df08da18c8c76ca2174'
+pkgver='11.0.32'; _build='7'; _hash='b8446df132c84ab496cc1dd7b984d37d'
_major="${pkgver%%.*}"
pkgrel='1'
pkgdesc="Oracle Java ${_major} Development Kit"
pkgdesc+=' LTS'
arch=('x86_64')
-url='https://www.oracle.com/java/technologies/downloads'
+url='https://www.oracle.com/java/technologies/javase/jdk11-archive-downloads.html'
license=('custom')
depends=('java-environment-common' "jre${_major}>=${pkgver}" 'zlib' 'hicolor-icon-theme')
provides=(
@@ -71,14 +72,14 @@
unset _srcfil
unset XDG_DOWNLOAD_DIR
-md5sums=('ec4dc4ed666eabc9c04978a4142b5937'
+md5sums=('45ad07cbf79f48aea2f4af349995fed2'
'985d0d81ece57d0ea633ccc1d3fd78ed'
'fbd4ddd9069e48a65da6e0cb33db9bc1'
'e59149780f4d1124f6e339611da9c70b'
'6181f1ef1e5aeb637ef4cd593106beef'
'1db7eb33e844d1a41bce196ab622da40'
'51c8839211cc53f09c9b11a8e28ed1ef')
-sha256sums=('f779a84f3a003841a07eafb8566e4c48707be7f71a48b97bf05f846f45f03161'
+sha256sums=('a5c7180ade318db23972bcb9bd2f90d66efe507213c0079acc71ca8206690dd8'
'1052634cdcbf50ca14b864b58f3afa53de1706bdc9c593667c29974146212c54'
'9a84d1b4dd969e867b2dbb6df0d0c44814729e0f1d0c61ab6c54d676eae83b3b'
'73d686fd6e478a887a51451d7ada7c045f31ce299f65f45e50a793820ee99d85'

Scan history

Scanned at (UTC)SeverityRules
2026-10-17 19:19:13 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 18:55:24 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion