jre25-zulu-bin

MEDIUM
maintainer puddings233 1 votes scanned 2026-09-02 13:50:58.396718
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:44 "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_aarch64.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: puddings233 <puddings233 at outlook dot com>
2
3_majorver=25
4_minorver=0
5_securityver=4.1
6_updatever=1
7_zulu_build="36.205"
8pkgname=jre${_majorver}-zulu-bin
9pkgver=${_majorver}.${_minorver}.${_securityver}+${_updatever}
10pkgrel=2
11pkgdesc='Azul Zulu OpenJDK full runtime environment, bin version.'
12arch=('aarch64' 'x86_64')
13url='https://www.azul.com/downloads/'
14license=('custom')
15depends=(
16 "java-runtime-common>=3"
17 "ca-certificates-utils"
18 "freetype2"
19 "glibc"
20 "harfbuzz"
21 "lcms2"
22 "libgcc"
23 "libjpeg-turbo"
24 "libnet"
25 "libstdc++"
26 "nss"
27 "giflib"
28 "libpng"
29)
30optdepends=(
31 'alsa-lib: for basic sound support'
32 'gtk3: for the Gtk+ 3 look and feel - desktop usage'
33)
34provides=(
35 "java-runtime=${_majorver}"
36 "java-runtime-openjdk=${_majorver}"
37 "jre${_majorver}-openjdk=${pkgver}-${pkgrel}"
38 "java-runtime-headless=${_majorver}"
39 "java-runtime-headless-openjdk=${_majorver}"
40 "jre${_majorver}-openjdk-headless=${pkgver}-${pkgrel}"
41)
42install="$pkgname.install"
43source_aarch64=(
44 "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_aarch64.tar.gz"
45 "freedesktop-java.desktop"
46)
47source_x86_64=(
48 "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_x64.tar.gz"
49 "freedesktop-java.desktop"
50)
51sha256sums_aarch64=(
52 '7bb8df19d2855ddfc85298d869be5434d3b5835ff186292075ef348c2f8f0f39'
53 '58ec2bb43ff9bc98e6d14a5c5559d6768cc1b6e16443f4891134a8406fd4482c'
54)
55sha256sums_x86_64=(
56 '30eaf73383f2700bc38fdda000eb0239adc0a22ef055dbffd0b10de10de8c7a3'
57 '58ec2bb43ff9bc98e6d14a5c5559d6768cc1b6e16443f4891134a8406fd4482c'
58)
59
60_jvmdir=/usr/lib/jvm/java-${_majorver}-zulu
61
62case "${CARCH}" in
63 aarch64) _JARCH='aarch64';;
64 x86_64) _JARCH='x64';;
65esac
66
67package() {
68
69 cd "$srcdir/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_${_JARCH}"
70
71 install -dm 755 "${pkgdir}${_jvmdir}"
72
73 cp -a bin lib \
74 "${pkgdir}${_jvmdir}"
75
76 # Conf
77 install -dm 755 "${pkgdir}/etc"
78 cp -r conf "${pkgdir}/etc/java${_majorver}-zulu"
79 ln -s "/etc/java${_majorver}-zulu" "${pkgdir}/${_jvmdir}/conf"
80
81 # Legal
82 install -dm 755 "${pkgdir}/usr/share/licenses"
83 cp -r legal "${pkgdir}/usr/share/licenses/java${_majorver}-zulu"
84 cp DISCLAIMER "${pkgdir}/usr/share/licenses/java${_majorver}-zulu/"
85 ln -s "/usr/share/licenses/java${_majorver}-zulu" "${pkgdir}/${_jvmdir}/legal"
86
87 # Link JKS keystore from ca-certificates-utils
88 rm -f "${pkgdir}${_jvmdir}/lib/security/cacerts"
89 ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}${_jvmdir}/lib/security/cacerts"
90
91 # Desktop files
92 install -Dm 644 \
93 "${srcdir}/freedesktop-java.desktop" \
94 "${pkgdir}/usr/share/applications/java-java${_majorver}-zulu.desktop"
95}
96
97# vim: ts=2 sw=2 et:
98

Changes since previous scan

--- PKGBUILD @ 2026-07-29 00:25
+++ PKGBUILD @ 2026-09-02 13:50
@@ -2,12 +2,12 @@
_majorver=25
_minorver=0
-_securityver=4
-_updatever=7
-_zulu_build="36.15"
+_securityver=4.1
+_updatever=1
+_zulu_build="36.205"
pkgname=jre${_majorver}-zulu-bin
-pkgver=${_majorver}.${_minorver}.${_securityver}.u${_updatever}
-pkgrel=1
+pkgver=${_majorver}.${_minorver}.${_securityver}+${_updatever}
+pkgrel=2
pkgdesc='Azul Zulu OpenJDK full runtime environment, bin version.'
arch=('aarch64' 'x86_64')
url='https://www.azul.com/downloads/'
@@ -49,11 +49,11 @@
"freedesktop-java.desktop"
)
sha256sums_aarch64=(
- '94f62bbf0e0c8928dbe97d027a5b96f934d53bb56ee9c9571481d2b7003bc3d2'
+ '7bb8df19d2855ddfc85298d869be5434d3b5835ff186292075ef348c2f8f0f39'
'58ec2bb43ff9bc98e6d14a5c5559d6768cc1b6e16443f4891134a8406fd4482c'
)
sha256sums_x86_64=(
- '41540814fa9d5c28d329e4e201c31ee020fc66272b01582c261c5a73d574e80e'
+ '30eaf73383f2700bc38fdda000eb0239adc0a22ef055dbffd0b10de10de8c7a3'
'58ec2bb43ff9bc98e6d14a5c5559d6768cc1b6e16443f4891134a8406fd4482c'
)
@@ -87,6 +87,11 @@
# Link JKS keystore from ca-certificates-utils
rm -f "${pkgdir}${_jvmdir}/lib/security/cacerts"
ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}${_jvmdir}/lib/security/cacerts"
+
+ # Desktop files
+ install -Dm 644 \
+ "${srcdir}/freedesktop-java.desktop" \
+ "${pkgdir}/usr/share/applications/java-java${_majorver}-zulu.desktop"
}
# vim: ts=2 sw=2 et:

Scan history

Scanned at (UTC)SeverityRules
2026-09-02 13:50:58 Medium 1
2026-07-29 00:25:53 Clean 2
2026-07-28 23:39:52 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion