jre21-zulu-bin

maintainer puddings233 · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt JRE binaries from Azul's official CDN (cdn.azul.com), which is the legitimate source for Zulu builds; despite the static analyzer flagging the host as non-standard, this is a trusted vendor distribution and the downloads are verified via sha256sums.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt JRE binaries from Azul's official CDN (cdn.azul.com), which is the legitimate source for Zulu builds; despite the static analyzer flagging the host as non-standard, this is a trusted vendor distribution and the downloads are verified via sha256sums.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:44 "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_aarch64.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: puddings233 <puddings233 at outlook dot com>
    
      2
    
      3_majorver=21
    
      4_minorver=0
    
      5_securityver=12
    
      6_updatever=8
    
      7_zulu_build="52.15"
    
      8pkgname=jre${_majorver}-zulu-bin
    
      9pkgver=${_majorver}.${_minorver}.${_securityver}.u${_updatever}
    
      10pkgrel=1
    
      11pkgdesc='Azul Zulu OpenJDK full runtime environment, bin version.'
    
      12arch=('aarch64' 'x86_64')
    
      13url='https://www.azul.com/downloads/'
    
      14license=('custom')
    
      15depends=(
    
      16  "java-runtime-common>=3"
    
      17  "ca-certificates-utils"
    
      18  "freetype2"
    
      19  "glibc"
    
      20  "harfbuzz"
    
      21  "lcms2"
    
      22  "libgcc"
    
      23  "libjpeg-turbo"
    
      24  "libnet"
    
      25  "libstdc++"
    
      26  "nss"
    
      27  "giflib"
    
      28  "libpng"
    
      29)
    
      30optdepends=(
    
      31  'alsa-lib: for basic sound support'
    
      32  'gtk3: for the Gtk+ 3 look and feel - desktop usage'
    
      33)
    
      34provides=(
    
      35  "java-runtime=${_majorver}"
    
      36  "java-runtime-openjdk=${_majorver}"
    
      37  "jre${_majorver}-openjdk=${pkgver}-${pkgrel}"
    
      38  "java-runtime-headless=${_majorver}"
    
      39  "java-runtime-headless-openjdk=${_majorver}"
    
      40  "jre${_majorver}-openjdk-headless=${pkgver}-${pkgrel}"
    
      41)
    
      42install="$pkgname.install"
    
      43source_aarch64=(
    
      44  "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_aarch64.tar.gz"
    
      45  "freedesktop-java.desktop"
    
      46)
    
      47source_x86_64=(
    
      48  "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_x64.tar.gz"
    
      49  "freedesktop-java.desktop"
    
      50)
    
      51sha256sums_aarch64=(
    
      52  '8301c06f6e020d09fd30068160adc12d33728c11c03d9ace3a1087be8e84f6e2'
    
      53  '64e1442e837d09e950059c56e0908107488edfbf7cf9c0b71fa8442ea3451270'
    
      54)
    
      55sha256sums_x86_64=(
    
      56  '8e0374ffe9ff662c2f6b1872d6b48ab3859f69de11afe583af363264d24b299f'
    
      57  '64e1442e837d09e950059c56e0908107488edfbf7cf9c0b71fa8442ea3451270'
    
      58)
    
      59
    
      60_jvmdir=/usr/lib/jvm/java-${_majorver}-zulu
    
      61
    
      62case "${CARCH}" in
    
      63  aarch64) _JARCH='aarch64';;
    
      64  x86_64) _JARCH='x64';;
    
      65esac
    
      66
    
      67package() {
    
      68
    
      69  cd "$srcdir/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_${_JARCH}"
    
      70
    
      71  install -dm 755 "${pkgdir}${_jvmdir}"
    
      72
    
      73  cp -a bin lib \
    
      74    "${pkgdir}${_jvmdir}"
    
      75
    
      76  # Conf
    
      77  install -dm 755 "${pkgdir}/etc"
    
      78  cp -r conf "${pkgdir}/etc/java${_majorver}-zulu"
    
      79  ln -s "/etc/java${_majorver}-zulu" "${pkgdir}/${_jvmdir}/conf"
    
      80
    
      81  # Legal
    
      82  install -dm 755 "${pkgdir}/usr/share/licenses"
    
      83  cp -r legal "${pkgdir}/usr/share/licenses/java${_majorver}-zulu"
    
      84  cp DISCLAIMER "${pkgdir}/usr/share/licenses/java${_majorver}-zulu/"
    
      85  ln -s "/usr/share/licenses/java${_majorver}-zulu" "${pkgdir}/${_jvmdir}/legal"
    
      86
    
      87  # Link JKS keystore from ca-certificates-utils
    
      88  rm -f "${pkgdir}${_jvmdir}/lib/security/cacerts"
    
      89  ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}${_jvmdir}/lib/security/cacerts"
    
      90}
    
      91
    
      92# vim: ts=2 sw=2 et:
    
      93

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:18
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,9 +1,12 @@
 # Maintainer: puddings233 <puddings233 at outlook dot com>
-#
-_java_ver=21
-_zulu_build="${_java_ver}.50.19-ca"
-pkgname=jre${_java_ver}-zulu-bin
-pkgver="${_java_ver}.0.11"
+
+_majorver=21
+_minorver=0
+_securityver=12
+_updatever=8
+_zulu_build="52.15"
+pkgname=jre${_majorver}-zulu-bin
+pkgver=${_majorver}.${_minorver}.${_securityver}.u${_updatever}
 pkgrel=1
 pkgdesc='Azul Zulu OpenJDK full runtime environment, bin version.'
 arch=('aarch64' 'x86_64')
@@ -12,34 +15,49 @@
 depends=(
   "java-runtime-common>=3"
   "ca-certificates-utils"
+  "freetype2"
+  "glibc"
+  "harfbuzz"
+  "lcms2"
+  "libgcc"
+  "libjpeg-turbo"
+  "libnet"
+  "libstdc++"
   "nss"
-  "libnet"
-  "glibc"
-  "gcc-libs"
+  "giflib"
   "libpng"
 )
-conflicts=(
-  "jdk21-openjdk"
-  "jre21-openjdk"
-  "jre21-openjdk-headless"
-  "zulu-21-bin"
-  "zulu21-fx-bin"
+optdepends=(
+  'alsa-lib: for basic sound support'
+  'gtk3: for the Gtk+ 3 look and feel - desktop usage'
 )
 provides=(
-  "java-runtime-headless=$_java_ver"
-  "java-runtime-headless-openjdk=$_java_ver"
-  "java-runtime=$_java_ver"
-  "java-runtime-openjdk=$_java_ver"
-  "jre${_java_ver}-openjdk=${pkgver}-${pkgrel}"
-  "jre${_java_ver}-openjdk-headless=${pkgver}-${pkgrel}"
+  "java-runtime=${_majorver}"
+  "java-runtime-openjdk=${_majorver}"
+  "jre${_majorver}-openjdk=${pkgver}-${pkgrel}"
+  "java-runtime-headless=${_majorver}"
+  "java-runtime-headless-openjdk=${_majorver}"
+  "jre${_majorver}-openjdk-headless=${pkgver}-${pkgrel}"
 )
 install="$pkgname.install"
-source_aarch64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jre${pkgver}-linux_aarch64.tar.gz")
-source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jre${pkgver}-linux_x64.tar.gz")
-sha256sums_aarch64=('649464c11d6e8256f0ef6740c84c3401056f6d584efc7c439abeca87a201a9ab')
-sha256sums_x86_64=('a080f14957bf0f2951cc6e3fb7b3cbfc3c0a324b8ef7e23c714ef58ef0d76cbd')
+source_aarch64=(
+  "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_aarch64.tar.gz"
+  "freedesktop-java.desktop"
+)
+source_x86_64=(
+  "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_x64.tar.gz"
+  "freedesktop-java.desktop"
+)
+sha256sums_aarch64=(
+  '8301c06f6e020d09fd30068160adc12d33728c11c03d9ace3a1087be8e84f6e2'
+  '64e1442e837d09e950059c56e0908107488edfbf7cf9c0b71fa8442ea3451270'
+)
+sha256sums_x86_64=(
+  '8e0374ffe9ff662c2f6b1872d6b48ab3859f69de11afe583af363264d24b299f'
+  '64e1442e837d09e950059c56e0908107488edfbf7cf9c0b71fa8442ea3451270'
+)
 
-_jvmdir=/usr/lib/jvm/java-${_java_ver}-zulu
+_jvmdir=/usr/lib/jvm/java-${_majorver}-zulu
 
 case "${CARCH}" in
   aarch64) _JARCH='aarch64';;
@@ -48,7 +66,7 @@
 
 package() {
 
-  cd "$srcdir/zulu${_zulu_build}-jre${pkgver}-linux_${_JARCH}"
+  cd "$srcdir/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_${_JARCH}"
 
   install -dm 755 "${pkgdir}${_jvmdir}"
 
@@ -57,14 +75,14 @@
 
   # Conf
   install -dm 755 "${pkgdir}/etc"
-  cp -r conf "${pkgdir}/etc/java${_java_ver}-zulu"
-  ln -s "/etc/java${_java_ver}-zulu" "${pkgdir}/${_jvmdir}/conf"
+  cp -r conf "${pkgdir}/etc/java${_majorver}-zulu"
+  ln -s "/etc/java${_majorver}-zulu" "${pkgdir}/${_jvmdir}/conf"
 
   # Legal
   install -dm 755 "${pkgdir}/usr/share/licenses"
-  cp -r legal "${pkgdir}/usr/share/licenses/java${_java_ver}-zulu"
-  cp DISCLAIMER "${pkgdir}/usr/share/licenses/java${_java_ver}-zulu/"
-  ln -s "/usr/share/licenses/java${_java_ver}-zulu" "${pkgdir}/${_jvmdir}/legal"
+  cp -r legal "${pkgdir}/usr/share/licenses/java${_majorver}-zulu"
+  cp DISCLAIMER "${pkgdir}/usr/share/licenses/java${_majorver}-zulu/"
+  ln -s "/usr/share/licenses/java${_majorver}-zulu" "${pkgdir}/${_jvmdir}/legal"
 
   # Link JKS keystore from ca-certificates-utils
   rm -f "${pkgdir}${_jvmdir}/lib/security/cacerts"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 23:39:52	MEDIUM	1
2026-06-20 00:18:46	MEDIUM	1
2026-06-19 23:51:18	CLEAN	2
2026-06-19 19:07:35	LOW	2
2026-06-18 16:11:54	MEDIUM	1