jre11

MEDIUM

maintainer severach 2 votes scanned 2026-10-17 19:19:13.554222

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:68 "https://download.oracle.com/otn-pub/java/jdk/${pkgver}+${_build}/${_hash}/${_srcfil}"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:  Chris Severance aur.severach AatT spamgourmet.com
    
      2# Contributor: Daniel Bermond < gmail-com: danielbermond >
    
      3# Contributor: Det <nimetonmaili g-mail>
    
      4
    
      5set -u
    
      6pkgname='jre11'
    
      7#pkgver='11.0.3'; _build='12'; _hash='37f5e150db5247ab9333b11c1dddcd30'
    
      8#pkgver='11.0.4'; _build='10'; _hash='cf1bbcbf431a474eb9fc550051f4ee78'
    
      9#pkgver='11.0.5'; _build='10'; _hash='e51269e04165492b90fa15af5b4eb1a5'
    
      10#pkgver='11.0.6'; _build='8'; _hash='90eb79fb590d45c8971362673c5ab495'
    
      11#pkgver='11.0.7'; _build='8'; _hash='8c7daf89330c48f0b9e32f57169f7bac'
    
      12#pkgver='11.0.8'; _build='10'; _hash='dc5cf74f97104e8eac863698146a7ac3'
    
      13#pkgver='11.0.9'; _build='7'; _hash='eec35ebefb3f4133bd045b891f05db94'
    
      14#pkgver='11.0.10'; _build='8'; _hash='020c4a6d33b74f6a9d2bc6fbf189da81'
    
      15#pkgver='11.0.11'; _build='9'; _hash='ab2da78f32ed489abb3ff52fd0a02b1c'
    
      16#pkgver='11.0.12'; _build='8'; _hash='f411702ca7704a54a79ead0c2e0942a3'
    
      17#pkgver='11.0.13'; _build='10'; _hash='bdde8881e2e3437baa70044f884d2d67'
    
      18#pkgver='11.0.14'; _build='8'; _hash='7e5bbbfffe8b45e59d52a96aacab2f04'
    
      19#pkgver='11.0.15.1'; _build='2'; _hash='d76aabb62f1c47aa8588b9ae5a8a5b46'
    
      20#pkgver='11.0.17'; _build='10'; _hash='8bd089539add49a9b99e2f27eb0c4329'
    
      21#pkgver='11.0.19'; _build='9'; _hash='56a39267b45342398c37a72026d961ab'
    
      22#pkgver='11.0.20'; _build='9'; _hash='78ca14fd6c8e40f8a74a1b7660c79db8'
    
      23#pkgver='11.0.21'; _build='9'; _hash='8819d0447e4d41b3bd1d9e1007728d17'
    
      24#pkgver='11.0.25'; _build='9'; _hash='60e5d03cc24a4e1c8ab5d29303dbe066'
    
      25#pkgver='11.0.26'; _build='7'; _hash='720377fa814b4b4491dea5837af261de'
    
      26#pkgver='11.0.28'; _build='12'; _hash='b9df5b5128bc4f4fac0e12c356ea6ae3'
    
      27#pkgver='11.0.31'; _build='9'; _hash='ec89b195d0be4df08da18c8c76ca2174'
    
      28pkgver='11.0.32'; _build='7'; _hash='b8446df132c84ab496cc1dd7b984d37d'
    
      29_major="${pkgver%%.*}"
    
      30pkgrel='1'
    
      31pkgdesc="Oracle Java ${_major} Runtime Environment"
    
      32pkgdesc+=' LTS'
    
      33arch=('x86_64')
    
      34url='https://www.oracle.com/java/technologies/javase/jdk11-archive-downloads.html'
    
      35license=('custom')
    
      36depends=('java-runtime-common' 'ca-certificates-utils' 'freetype2' 'libxtst'
    
      37         'libxrender' 'libnet')
    
      38optdepends=(
    
      39  'alsa-lib: for basic sound support'
    
      40)
    
      41provides=(
    
      42  "java-runtime=${_major}"
    
      43  "java-runtime-headless=${_major}"
    
      44  "java-runtime-jre=${_major}"
    
      45  "java-runtime-headless-jre=${_major}"
    
      46  "jre=${pkgver}"
    
      47)
    
      48backup=(
    
      49  "etc/java${_major}-jre/management/jmxremote.access"
    
      50  "etc/java${_major}-jre/management/jmxremote.password.template"
    
      51  "etc/java${_major}-jre/management/management.properties"
    
      52  "etc/java${_major}-jre/security/policy/limited/default_US_export.policy"
    
      53  "etc/java${_major}-jre/security/policy/limited/default_local.policy"
    
      54  "etc/java${_major}-jre/security/policy/limited/exempt_local.policy"
    
      55  "etc/java${_major}-jre/security/policy/unlimited/default_US_export.policy"
    
      56  "etc/java${_major}-jre/security/policy/unlimited/default_local.policy"
    
      57  "etc/java${_major}-jre/security/policy/README.txt"
    
      58  "etc/java${_major}-jre/security/java.policy"
    
      59  "etc/java${_major}-jre/security/java.security"
    
      60  "etc/java${_major}-jre/logging.properties"
    
      61  "etc/java${_major}-jre/net.properties"
    
      62  "etc/java${_major}-jre/sound.properties"
    
      63)
    
      64options=('!strip') # JDK debug-symbols
    
      65install="${pkgname}.install"
    
      66_srcfil="jdk-${pkgver}_linux-x64_bin.tar.gz"
    
      67source=(
    
      68  "https://download.oracle.com/otn-pub/java/jdk/${pkgver}+${_build}/${_hash}/${_srcfil}" # Now /otn/, Oracle sso required
    
      69  'readme.sh'
    
      70)
    
      71# from oracle-sqldeveloper
    
      72DLAGENTS+=("manual::${startdir:-}/readme.sh %o %u")
    
      73source[0]="manual://${_srcfil}"
    
      74if [ ! -z "${HOME:-}" ]; then # block mksrcinfo
    
      75  XDG_DOWNLOAD_DIR="$(xdg-user-dir DOWNLOAD 2>/dev/null)" || :
    
      76  if [ -z "${XDG_DOWNLOAD_DIR}" ]; then
    
      77    XDG_DOWNLOAD_DIR=~/'Downloads'
    
      78  fi
    
      79  if [ -s "${XDG_DOWNLOAD_DIR}/${_srcfil}" ] && [ ! -e "${_srcfil}" ]; then
    
      80    if type msg > /dev/null 2>&1; then
    
      81      set +u
    
      82      msg "Scooping files from ${XDG_DOWNLOAD_DIR}" 1>&2
    
      83      msg2 "${_srcfil}" 1>&2
    
      84      set -u
    
      85      ln -sr "${XDG_DOWNLOAD_DIR}/${_srcfil}"
    
      86    fi
    
      87  fi
    
      88fi
    
      89unset _srcfil
    
      90unset XDG_DOWNLOAD_DIR
    
      91
    
      92md5sums=('45ad07cbf79f48aea2f4af349995fed2'
    
      93         '51c8839211cc53f09c9b11a8e28ed1ef')
    
      94sha256sums=('a5c7180ade318db23972bcb9bd2f90d66efe507213c0079acc71ca8206690dd8'
    
      95            'f1081b08cfbb467277e95b3794191c9963398579733fa8832425b308b5917711')
    
      96
    
      97DLAGENTS=("${DLAGENTS[@]// -gqb \"\"/ -gq}")
    
      98DLAGENTS=("${DLAGENTS[@]//curl -/curl -b 'oraclelicense=a' -}")
    
      99
    
      100package() {
    
      101  local -; set -u
    
      102  cd "jdk-${pkgver}"
    
      103
    
      104  local _jvmdir="/usr/lib/jvm/java-${_major}-jdk"
    
      105
    
      106  install -d -m755 "${pkgdir}/etc"
    
      107  install -d -m755 "${pkgdir}/${_jvmdir}"
    
      108  install -d -m755 "${pkgdir}/usr/share/licenses/${pkgname}"
    
      109
    
      110  # conf
    
      111  cp -a 'conf' "${pkgdir}/etc/java${_major}-jre"
    
      112  ln -s "../../../../etc/java${_major}-jre" "${pkgdir}/${_jvmdir}/conf"
    
      113
    
      114  # bin
    
      115  install -D -m755 bin/{java,jjs,jrunscript,keytool,pack200} -t "${pkgdir}/${_jvmdir}/bin"
    
      116  install -D -m755 bin/{rmid,rmiregistry,unpack200}          -t "${pkgdir}/${_jvmdir}/bin"
    
      117
    
      118  # libs
    
      119  cp -a 'lib' "${pkgdir}/${_jvmdir}"
    
      120  rm -r "${pkgdir}/${_jvmdir}/lib/jfr"
    
      121  rm "${pkgdir}/${_jvmdir}/lib/"{ct.sym,libattach.so,libsaproc.so,src.zip}
    
      122
    
      123  install -D -m644 'release' -t "${pkgdir}/${_jvmdir}"
    
      124
    
      125  # replace JKS keystore with ca-certificates-utils
    
      126  rm "${pkgdir}${_jvmdir}/lib/security/cacerts"
    
      127  ln -s '/etc/ssl/certs/java/cacerts' "${pkgdir}${_jvmdir}/lib/security/cacerts"
    
      128
    
      129  # legal/licenses
    
      130  cp -a legal/* "${pkgdir}/usr/share/licenses/${pkgname}"
    
      131  ln -s "${pkgname}" "${pkgdir}/usr/share/licenses/java${_major}-${pkgname}"
    
      132  ln -s "../../../share/licenses/${pkgname}" "${pkgdir}/${_jvmdir}/legal"
    
      133}
    
      134set +u
    
      135

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-17 19:19
@@ -24,13 +24,14 @@
 #pkgver='11.0.25'; _build='9'; _hash='60e5d03cc24a4e1c8ab5d29303dbe066'
 #pkgver='11.0.26'; _build='7'; _hash='720377fa814b4b4491dea5837af261de'
 #pkgver='11.0.28'; _build='12'; _hash='b9df5b5128bc4f4fac0e12c356ea6ae3'
-pkgver='11.0.31'; _build='9'; _hash='ec89b195d0be4df08da18c8c76ca2174'
+#pkgver='11.0.31'; _build='9'; _hash='ec89b195d0be4df08da18c8c76ca2174'
+pkgver='11.0.32'; _build='7'; _hash='b8446df132c84ab496cc1dd7b984d37d'
 _major="${pkgver%%.*}"
 pkgrel='1'
 pkgdesc="Oracle Java ${_major} Runtime Environment"
 pkgdesc+=' LTS'
 arch=('x86_64')
-url='https://www.oracle.com/java/technologies/downloads'
+url='https://www.oracle.com/java/technologies/javase/jdk11-archive-downloads.html'
 license=('custom')
 depends=('java-runtime-common' 'ca-certificates-utils' 'freetype2' 'libxtst'
          'libxrender' 'libnet')
@@ -88,9 +89,9 @@
 unset _srcfil
 unset XDG_DOWNLOAD_DIR
 
-md5sums=('ec4dc4ed666eabc9c04978a4142b5937'
+md5sums=('45ad07cbf79f48aea2f4af349995fed2'
          '51c8839211cc53f09c9b11a8e28ed1ef')
-sha256sums=('f779a84f3a003841a07eafb8566e4c48707be7f71a48b97bf05f846f45f03161'
+sha256sums=('a5c7180ade318db23972bcb9bd2f90d66efe507213c0079acc71ca8206690dd8'
             'f1081b08cfbb467277e95b3794191c9963398579733fa8832425b308b5917711')
 
 DLAGENTS=("${DLAGENTS[@]// -gqb \"\"/ -gq}")

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 19:19:13	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 18:55:24	Low	2
2026-06-18 16:11:54	Medium	1