◎ AURWatch - AUR Security Monitor
scan coverage …
Last scan …
Next scan -

liberica-jdk-11-full-bin

maintainer bacteriostat · 8 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads prebuilt Liberica JDK binaries from BellSoft's official domain (download.bell-sw.com), which is the project's legitimate source; despite the static analyzer flag for a non-standard host, the source is trustworthy and checksums are provided, making this a standard AUR binary package with low risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt Liberica JDK binaries from BellSoft's official domain (download.bell-sw.com), which is the project's legitimate source; despite the static analyzer flag for a non-standard host, the source is trustworthy and checksums are provided, making this a standard AUR binary package with low risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:47 source_aarch64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-aarch64-full.tar.gz)

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: bacteriostat <dev dot bacteriostat at aleeas dot com>
2# Contributor: Jonathon Fernyhough <jonathon"m2x+dev>
3# Contributor: Sam Guymer <sam at guymer dot me>
4
5# This PKGBUILD adapted from zulu-11-bin
6
7_jdkname=liberica-jdk-11-full
8pkgname="${_jdkname}-bin"
9_java_ver=11
10pkgver=11.0.32+11
11pkgrel=1
12pkgdesc='BellSoft builds of OpenJDK are fully certified and 100% open source Java Development Kits (JDKs) for all Java development and production workloads. Full version includes OpenJFX.'
13arch=(aarch64 armv7h armv8h x86_64)
14url='https://bell-sw.com/'
15license=('custom')
16depends=('java-environment-common=3' 'java-runtime-common>=3' 'ca-certificates-utils')
17optdepends=(ffmpeg freetype2 gtk2 gtk3 libnet)
18provides=(
19 "java-environment=$_java_ver"
20 "java-environment-openjdk=$_java_ver"
21 "java-runtime-headless=$_java_ver"
22 "java-runtime-headless-openjdk=$_java_ver"
23 "java-runtime=$_java_ver"
24 "java-runtime-openjdk=$_java_ver"
25 "liberica-jdk-11-bin=$pkgver"
26 "liberica-jdk-11-lite-bin=$pkgver"
27 "liberica-jre-11-bin=$pkgver"
28 "liberica-jre-11-full-bin=$pkgver"
29)
30install=$_jdkname.install
31
32backup=(etc/${_jdkname}/logging.properties
33 etc/${_jdkname}/management/jmxremote.access
34 etc/${_jdkname}/management/jmxremote.password.template
35 etc/${_jdkname}/management/management.properties
36 etc/${_jdkname}/net.properties
37 etc/${_jdkname}/security/java.policy
38 etc/${_jdkname}/security/java.security
39 etc/${_jdkname}/security/policy/README.txt
40 etc/${_jdkname}/security/policy/limited/default_US_export.policy
41 etc/${_jdkname}/security/policy/limited/default_local.policy
42 etc/${_jdkname}/security/policy/limited/exempt_local.policy
43 etc/${_jdkname}/security/policy/unlimited/default_US_export.policy
44 etc/${_jdkname}/security/policy/unlimited/default_local.policy
45 etc/${_jdkname}/sound.properties)
46
47source_aarch64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-aarch64-full.tar.gz)
48source_armv7h=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-arm32-vfp-hflt-full.tar.gz)
49source_armv8h=(${source_armv7h[@]})
50source_x86_64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-amd64-full.tar.gz)
51
52sha1sums_aarch64=('65d7ad7a46bef2d4843626fe169152256d956eb4')
53sha1sums_armv7h=('be65c2280033d9a1e799ecf43a40e36c9da5dd0e')
54sha1sums_armv8h=('be65c2280033d9a1e799ecf43a40e36c9da5dd0e')
55sha1sums_x86_64=('fd82fd13d077170cc8cfee887e380e25257bb57f')
56
57_jvmdir="/usr/lib/jvm/${_jdkname}"
58
59package() {
60 cd jdk-${pkgver/+*/}-full
61
62 install -dm 755 "${pkgdir}/${_jvmdir}"
63 cp -a . "${pkgdir}/${_jvmdir}/"
64
65 # copied from java11-openjdk
66
67 # Conf
68 install -dm 755 "${pkgdir}/etc"
69 cp -r conf "${pkgdir}/etc/${_jdkname}"
70 rm -rf "${pkgdir}/${_jvmdir}/conf"
71 ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
72
73 # Legal
74 install -dm 755 "${pkgdir}/usr/share/licenses"
75 cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
76 rm -rf "${pkgdir}/${_jvmdir}/legal"
77 ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
78
79 # Man pages
80 for f in man/man1/* man/ja/man1/*; do
81 install -Dm 644 "${f}" "${pkgdir}/usr/share/${f/\.1/-$_jdkname.1}"
82 done
83 rm -rf "${pkgdir}/${_jvmdir}/man"
84 ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
85
86 # Link JKS keystore from ca-certificates-utils
87 rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
88 ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
89}
90

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-08-03 00:08
@@ -7,8 +7,7 @@
_jdkname=liberica-jdk-11-full
pkgname="${_jdkname}-bin"
_java_ver=11
-pkgver=11.0.31.u11
-_pkgver=11.0.31+11
+pkgver=11.0.32+11
pkgrel=1
pkgdesc='BellSoft builds of OpenJDK are fully certified and 100% open source Java Development Kits (JDKs) for all Java development and production workloads. Full version includes OpenJFX.'
arch=(aarch64 armv7h armv8h x86_64)
@@ -45,20 +44,20 @@
etc/${_jdkname}/security/policy/unlimited/default_local.policy
etc/${_jdkname}/sound.properties)
-source_aarch64=(https://download.bell-sw.com/java/$_pkgver/bellsoft-jdk$_pkgver-linux-aarch64-full.tar.gz)
-source_armv7h=(https://download.bell-sw.com/java/$_pkgver/bellsoft-jdk$_pkgver-linux-arm32-vfp-hflt-full.tar.gz)
+source_aarch64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-aarch64-full.tar.gz)
+source_armv7h=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-arm32-vfp-hflt-full.tar.gz)
source_armv8h=(${source_armv7h[@]})
-source_x86_64=(https://download.bell-sw.com/java/$_pkgver/bellsoft-jdk$_pkgver-linux-amd64-full.tar.gz)
+source_x86_64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-amd64-full.tar.gz)
-sha1sums_aarch64=('b23a2b3f7356de9774889bdf2cd1fcd498f0df6f')
-sha1sums_armv7h=('a45592d5332437e6b6fb1e2d01c5e27335224486')
-sha1sums_armv8h=('a45592d5332437e6b6fb1e2d01c5e27335224486')
-sha1sums_x86_64=('24f18c46f470d0dca8b9cd3a22451654097235ba')
+sha1sums_aarch64=('65d7ad7a46bef2d4843626fe169152256d956eb4')
+sha1sums_armv7h=('be65c2280033d9a1e799ecf43a40e36c9da5dd0e')
+sha1sums_armv8h=('be65c2280033d9a1e799ecf43a40e36c9da5dd0e')
+sha1sums_x86_64=('fd82fd13d077170cc8cfee887e380e25257bb57f')
_jvmdir="/usr/lib/jvm/${_jdkname}"
package() {
- cd jdk-${_pkgver/+*/}-full
+ cd jdk-${pkgver/+*/}-full
install -dm 755 "${pkgdir}/${_jvmdir}"
cp -a . "${pkgdir}/${_jvmdir}/"

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 13:24:23 MEDIUM 1
2026-06-19 19:07:35 CLEAN 2
2026-06-18 16:11:54 MEDIUM 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion