liberica-jdk-11-lite-bin
LOW
maintainer bacteriostat
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads prebuilt Liberica JDK binaries from BellSoft's official domain (download.bell-sw.com), which is the project's legitimate source; despite the static analyzer flag for a non-standard host, the downloads are verifiable via upstream-provided checksums and represent normal AUR packaging of an official binary distribution.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt Liberica JDK binaries from BellSoft's official domain (download.bell-sw.com), which is the project's legitimate source; despite the static analyzer flag for a non-standard host, the downloads are verifiable via upstream-provided checksums and represent normal AUR packaging of an official binary distribution.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:45
source_aarch64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-aarch64-lite.tar.gz)
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Bacteriostat <dev dot bacteriostat at aleeas dot com>
2
# Contributor: Jonathon Fernyhough <jonathon"m2x+dev>
3
# Contributor: Sam Guymer <sam at guymer dot me>
4
5
# This PKGBUILD adapted from zulu-11-bin
6
7
_jdkname=liberica-jdk-11-lite
8
pkgname="${_jdkname}-bin"
9
_java_ver=11
10
pkgver=11.0.32.1+1
11
pkgrel=1
12
pkgdesc='BellSoft builds of OpenJDK are fully certified and 100% open source Java Development Kits (JDKs) for all Java development and production workloads. Lite version has compressed modules.'
13
arch=(aarch64 armv7h armv8h x86_64)
14
url='https://bell-sw.com/'
15
license=('custom')
16
depends=('java-environment-common=3' 'java-runtime-common>=3' 'ca-certificates-utils')
17
optdepends=(ffmpeg freetype2 gtk2 gtk3 libnet)
18
provides=(
19
"java-environment=$_java_ver"
20
"java-environment-openjdk=$_java_ver"
21
"java-runtime-headless=$_java_ver"
22
"java-runtime-headless-openjdk=$_java_ver"
23
"java-runtime=$_java_ver"
24
"java-runtime-openjdk=$_java_ver"
25
"liberica-jdk-11-bin=$pkgver"
26
"liberica-jre-11-bin=$pkgver"
27
)
28
install=$_jdkname.install
29
30
backup=(etc/${_jdkname}/logging.properties
31
etc/${_jdkname}/management/jmxremote.access
32
etc/${_jdkname}/management/jmxremote.password.template
33
etc/${_jdkname}/management/management.properties
34
etc/${_jdkname}/net.properties
35
etc/${_jdkname}/security/java.policy
36
etc/${_jdkname}/security/java.security
37
etc/${_jdkname}/security/policy/README.txt
38
etc/${_jdkname}/security/policy/limited/default_US_export.policy
39
etc/${_jdkname}/security/policy/limited/default_local.policy
40
etc/${_jdkname}/security/policy/limited/exempt_local.policy
41
etc/${_jdkname}/security/policy/unlimited/default_US_export.policy
42
etc/${_jdkname}/security/policy/unlimited/default_local.policy
43
etc/${_jdkname}/sound.properties)
44
45
source_aarch64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-aarch64-lite.tar.gz)
46
source_armv7h=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-arm32-vfp-hflt-lite.tar.gz)
47
source_armv8h=(${source_armv7h[@]})
48
source_i686=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-i586-lite.tar.gz)
49
source_x86_64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-amd64-lite.tar.gz)
50
51
# Upstream-provided
52
sha1sums_aarch64=('cb930aaf3d48024b29d0a2639a9a920241edb177')
53
sha1sums_armv7h=('0cc743432a1d91b454993ee0f7e477a4a65e1b85')
54
sha1sums_armv8h=('0cc743432a1d91b454993ee0f7e477a4a65e1b85')
55
sha1sums_x86_64=('23fc43b5989c8ad61c0ead1782a73377434bb171')
56
57
_jvmdir="/usr/lib/jvm/${_jdkname}"
58
59
package() {
60
cd jdk-${pkgver/+*/}-lite
61
62
install -dm 755 "${pkgdir}/${_jvmdir}"
63
cp -a . "${pkgdir}/${_jvmdir}/"
64
65
# copied from java11-openjdk
66
67
# Conf
68
install -dm 755 "${pkgdir}/etc"
69
cp -r conf "${pkgdir}/etc/${_jdkname}"
70
rm -rf "${pkgdir}/${_jvmdir}/conf"
71
ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
72
73
# Legal
74
install -dm 755 "${pkgdir}/usr/share/licenses"
75
cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
76
rm -rf "${pkgdir}/${_jvmdir}/legal"
77
ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
78
79
# Man pages
80
#for f in man/man1/* man/ja/man1/*; do
81
# install -Dm 644 "${f}" "${pkgdir}/usr/share/${f/\.1/-$_jdkname.1}"
82
#done
83
#rm -rf "${pkgdir}/${_jvmdir}/man"
84
#ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
85
86
# Link JKS keystore from ca-certificates-utils
87
rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
88
ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
89
}
90
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |