liberica-jdk-21-bin
LOW
maintainer Nanashi_0
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads prebuilt Liberica JDK binaries from the official vendor domain download.bell-sw.com, which is plausibly owned by BellSoft; despite the static analyzer flagging it as non-standard, this is a legitimate source for official builds, and the binaries are not executed at build time but installed as-is with proper checksums.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt Liberica JDK binaries from the official vendor domain download.bell-sw.com, which is plausibly owned by BellSoft; despite the static analyzer flagging it as non-standard, this is a legitimate source for official builds, and the binaries are not executed at build time but installed as-is with proper checksums.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:66
source_aarch64=(https://download.bell-sw.com/java/$_pkgver/bellsoft-jdk$_pkgver-linux-aarch64.tar.gz)
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Michel Lao <sansnom01@proton.me>
2
# Contributor: Yang Jeong Hun (Nevuly) <onyxclover9931@gmail.com>
3
# Contributor: Yurii Kolesnykov <root@yurikoles.com>
4
# Contributor: Jonathon Fernyhough <jonathon"m2x+dev>
5
# Contributor: Sam Guymer <sam at guymer dot me>
6
# Contributor: Levente Polyak <anthraxx[at]archlinux[dot]org>
7
# Contributor: Guillaume ALAUX <guillaume@archlinux.org>
8
9
# This PKGBUILD adapted from liberica-jdk-21-full-bin
10
11
_jdkname=liberica-jdk-21
12
pkgname="${_jdkname}-bin"
13
_java_ver=21
14
_pkgver=${_java_ver}.0.10+10
15
pkgver=${_pkgver/+/.u}
16
pkgrel=1
17
pkgdesc='BellSoft builds of OpenJDK are fully certified and 100% open source Java Development Kits (JDKs) for all Java development and production workloads.'
18
arch=(aarch64 x86_64)
19
url='https://bell-sw.com/'
20
license=('custom')
21
depends=('java-environment-common=3' 'java-runtime-common>=3' 'ca-certificates-utils')
22
optdepends=(ffmpeg freetype2 gtk2 gtk3 libnet)
23
provides=(
24
"java-environment=${pkgver/.*}"
25
"java-environment-openjdk=${pkgver/.*}"
26
"java-runtime-headless=${pkgver/.*}"
27
"java-runtime-headless-openjdk=${pkgver/.*}"
28
"java-runtime=${pkgver/.*}"
29
"java-runtime-openjdk=${pkgver/.*}"
30
"liberica-jdk-21-lite-bin=$pkgver"
31
"liberica-jre-21-bin=$pkgver"
32
)
33
install=$_jdkname.install
34
35
backup=(etc/${_jdkname}/logging.properties
36
etc/${_jdkname}/management/jmxremote.access
37
etc/${_jdkname}/management/jmxremote.password.template
38
etc/${_jdkname}/management/management.properties
39
etc/${_jdkname}/net.properties
40
etc/${_jdkname}/security/java.policy
41
etc/${_jdkname}/security/java.security
42
etc/${_jdkname}/security/policy/README.txt
43
etc/${_jdkname}/security/policy/limited/default_US_export.policy
44
etc/${_jdkname}/security/policy/limited/default_local.policy
45
etc/${_jdkname}/security/policy/limited/exempt_local.policy
46
etc/${_jdkname}/security/policy/unlimited/default_US_export.policy
47
etc/${_jdkname}/security/policy/unlimited/default_local.policy
48
etc/${_jdkname}/sound.properties)
49
50
source=(freedesktop-java.desktop.in
51
freedesktop-jconsole.desktop.in
52
freedesktop-jshell.desktop.in
53
${_jdkname}16.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon16.png
54
${_jdkname}24.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon24.png
55
${_jdkname}32.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon32.png
56
${_jdkname}48.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon48.png)
57
sha1sums=('8cc82516a115a17f78420eaa7ae8011828e1508c'
58
'2e6343cf2002fe05deedfaa5c58e4b863da8c050'
59
'4a62594b2a878b7d7a24445e263f46753f3f9bbf'
60
'36096a57cebd346e08efc68326fe77960d43726f'
61
'b8233f9ff931ce97a265827fac18ed90f4e248c6'
62
'a0da2952bc87a425182c3ac88e88649fbaa7cb65'
63
'eb36aa73a9be98164447774217865b91e79d503c')
64
sha1sums_aarch64=('c4b7f63144faf81e61bc60b602d1103b85537bb3')
65
sha1sums_x86_64=('55f6743eadbf5c7d6f5b4ac6d16bbec72b56a023')
66
source_aarch64=(https://download.bell-sw.com/java/$_pkgver/bellsoft-jdk$_pkgver-linux-aarch64.tar.gz)
67
source_x86_64=(https://download.bell-sw.com/java/$_pkgver/bellsoft-jdk$_pkgver-linux-amd64.tar.gz)
68
69
# Upstream-provided
70
71
_jvmdir="/usr/lib/jvm/${_jdkname}"
72
73
prepare() {
74
for f in *.desktop.in; do
75
sed "s|@@VER@@|${pkgver/.*}|g" $f >> ${f/.in}
76
done
77
}
78
79
package() {
80
cd jdk-${_pkgver/+*}
81
82
install -dm 755 "${pkgdir}/${_jvmdir}"
83
cp -a . "${pkgdir}/${_jvmdir}/"
84
85
# copied from java11-openjdk
86
87
# Conf
88
install -dm 755 "${pkgdir}/etc"
89
cp -r conf "${pkgdir}/etc/${_jdkname}"
90
rm -rf "${pkgdir}/${_jvmdir}/conf"
91
ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
92
93
# Legal
94
install -dm 755 "${pkgdir}/usr/share/licenses"
95
cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
96
rm -rf "${pkgdir}/${_jvmdir}/legal"
97
ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
98
99
# Man pages
100
for f in man/man1/*; do
101
install -Dm 644 "${f}" "${pkgdir}/usr/share/${f/\.1/-$_jdkname.1}"
102
done
103
rm -rf "${pkgdir}/${_jvmdir}/man"
104
ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
105
106
# Link JKS keystore from ca-certificates-utils
107
rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
108
ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
109
110
# Icons and launchers
111
for s in 16 24 32 48; do
112
install -Dm644 "${srcdir}"/${_jdkname}${s}.png "${pkgdir}"/usr/share/icons/hicolor/${s}x${s}/apps/${_jdkname}.png
113
done
114
for f in java jconsole jshell; do
115
install -Dm644 "${srcdir}"/freedesktop-${f}.desktop "${pkgdir}"/usr/share/applications/${f}-${_jdkname}.desktop
116
done
117
}
118
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |