liberica-jdk-17-full-bin
LOW
maintainer bacteriostat
6 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads prebuilt Liberica JDK binaries from BellSoft's official domain (download.bell-sw.com), which is the vendor's legitimate distribution infrastructure; despite the static analyzer flag for a non-standard host, this is a normal and expected source for the software, and the downloads are verified via SHA1 checksums.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt Liberica JDK binaries from BellSoft's official domain (download.bell-sw.com), which is the vendor's legitimate distribution infrastructure; despite the static analyzer flag for a non-standard host, this is a normal and expected source for the software, and the downloads are verified via SHA1 checksums.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:58
source_aarch64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-aarch64-full.tar.gz)
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Bacteriostat <dev dot bacteria at aleeas dot com>
2
# Contributor: Jonathon Fernyhough <jonathon"m2x+dev>
3
# Contributor: Sam Guymer <sam at guymer dot me>
4
# Contributor: Levente Polyak <anthraxx[at]archlinux[dot]org>
5
# Contributor: Guillaume ALAUX <guillaume@archlinux.org>
6
7
# This PKGBUILD adapted from zulu-11-bin
8
9
_pkgbase=liberica-jdk-full
10
_java_ver=17
11
_jdkname="liberica-jdk-${_java_ver}-full"
12
pkgname="${_jdkname}-bin"
13
pkgver=17.0.20.1+1
14
pkgrel=1
15
pkgdesc='BellSoft builds of OpenJDK are fully certified and 100% open source Java Development Kits (JDKs) for all Java development and production workloads. Full version includes OpenJFX.'
16
arch=(aarch64 armv7h armv8h x86_64)
17
url='https://bell-sw.com/'
18
license=('custom')
19
depends=('java-environment-common=3' 'java-runtime-common>=3' 'ca-certificates-utils')
20
optdepends=(ffmpeg freetype2 gtk2 gtk3 libnet)
21
provides=(
22
"java-environment=${pkgver/.*}"
23
"java-environment-openjdk=${pkgver/.*}"
24
"java-openjfx=${pkgver/.*}"
25
"java-runtime-headless=${pkgver/.*}"
26
"java-runtime-headless-openjdk=${pkgver/.*}"
27
"java-runtime=${pkgver/.*}"
28
"java-runtime-openjdk=${pkgver/.*}"
29
"liberica-jdk-17-bin=$pkgver"
30
"liberica-jdk-17-lite-bin=$pkgver"
31
"liberica-jre-17-bin=$pkgver"
32
"liberica-jre-17-full-bin=$pkgver"
33
"liberica-jdk-17-full-bin=$pkgver"
34
)
35
install=$_jdkname.install
36
37
backup=(etc/${_jdkname}/logging.properties
38
etc/${_jdkname}/management/jmxremote.access
39
etc/${_jdkname}/management/jmxremote.password.template
40
etc/${_jdkname}/management/management.properties
41
etc/${_jdkname}/net.properties
42
etc/${_jdkname}/security/java.policy
43
etc/${_jdkname}/security/java.security
44
etc/${_jdkname}/security/policy/README.txt
45
etc/${_jdkname}/security/policy/limited/default_US_export.policy
46
etc/${_jdkname}/security/policy/limited/default_local.policy
47
etc/${_jdkname}/security/policy/limited/exempt_local.policy
48
etc/${_jdkname}/security/policy/unlimited/default_US_export.policy
49
etc/${_jdkname}/security/policy/unlimited/default_local.policy
50
etc/${_jdkname}/sound.properties)
51
52
source=(
53
freedesktop-java.desktop.in
54
freedesktop-jconsole.desktop.in
55
freedesktop-jshell.desktop.in
56
)
57
58
source_aarch64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-aarch64-full.tar.gz)
59
source_armv7h=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-arm32-vfp-hflt-full.tar.gz)
60
source_armv8h=(${source_armv7h[@]})
61
source_x86_64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-amd64-full.tar.gz)
62
63
sha1sums=('7d79a8c26a125f55f52493df7dca2189c8521b3c'
64
'80a166acf99b351aa466452782a8faac3eca2d26'
65
'4b5684dc98370ecbff274195b42c3ce559226596')
66
sha1sums_aarch64=('150f006bc8511089330a03f99f16e5aeb1efe33d')
67
sha1sums_armv7h=('1aa13e6415a1d3d396a77e63d3bed5db170d0449')
68
sha1sums_armv8h=('1aa13e6415a1d3d396a77e63d3bed5db170d0449')
69
sha1sums_x86_64=('7990e6532c77859ceef58a6d3dea12469050e965')
70
71
# Upstream-provided
72
73
_jvmdir="/usr/lib/jvm/${_jdkname}"
74
75
prepare() {
76
for f in *.desktop.in; do
77
sed "s|@@VER@@|${pkgver/.*}|g; s|@@PATH@@|${_jvmdir}|g; s|@@ICON@@|${_jdkname}|g;" $f >> ${f/.in}
78
done
79
}
80
81
package() {
82
cd jdk-${pkgver/+*}-full
83
84
install -dm 755 "${pkgdir}/${_jvmdir}"
85
cp -a . "${pkgdir}/${_jvmdir}/"
86
87
# copied from java11-openjdk
88
89
# Conf
90
install -dm 755 "${pkgdir}/etc"
91
cp -r conf "${pkgdir}/etc/${_jdkname}"
92
rm -rf "${pkgdir}/${_jvmdir}/conf"
93
ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
94
95
# Legal
96
install -dm 755 "${pkgdir}/usr/share/licenses"
97
cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
98
rm -rf "${pkgdir}/${_jvmdir}/legal"
99
ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
100
101
# Man pages
102
for f in man/man1/*; do
103
install -Dm 644 "${f}" "${pkgdir}/usr/share/${f/\.1/-$_jdkname.1}"
104
done
105
rm -rf "${pkgdir}/${_jvmdir}/man"
106
ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
107
108
# Link JKS keystore from ca-certificates-utils
109
rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
110
ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
111
112
}
113
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |