liberica-jdk-full-bin
LOW
maintainer Nevuly
10 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads prebuilt Liberica JDK binaries from BellSoft's official domain (download.bell-sw.com), which is the project's legitimate release infrastructure; despite the static analyzer flag for a non-standard host, this is a normal and trusted source for the software, and the downloads are verified with checksums.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt Liberica JDK binaries from BellSoft's official domain (download.bell-sw.com), which is the project's legitimate release infrastructure; despite the static analyzer flag for a non-standard host, this is a normal and trusted source for the software, and the downloads are verified with checksums.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:54
source_aarch64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-aarch64-full.tar.gz)
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Yang Jeong Hun (Nevuly) <onyxclover9931@gmail.com>
2
# Contributor: Yurii Kolesnykov <root@yurikoles.com>
3
# Contributor: Jonathon Fernyhough <jonathon"m2x+dev>
4
# Contributor: Sam Guymer <sam at guymer dot me>
5
# Contributor: Levente Polyak <anthraxx[at]archlinux[dot]org>
6
# Contributor: Guillaume ALAUX <guillaume@archlinux.org>
7
8
# This PKGBUILD adapted from zulu-11-bin
9
10
_jdkname=liberica-jdk-full
11
pkgname="${_jdkname}-bin"
12
_java_ver=26
13
pkgver=26.0.2.1+1
14
pkgrel=1
15
pkgdesc='BellSoft builds of OpenJDK are fully certified and 100% open source Java Development Kits (JDKs) for all Java development and production workloads. Full version includes OpenJFX.'
16
arch=(aarch64 armv7h armv8h x86_64)
17
url='https://bell-sw.com/'
18
license=('custom')
19
depends=('java-environment-common=3' 'java-runtime-common>=3' 'ca-certificates-utils')
20
optdepends=(ffmpeg freetype2 gtk2 gtk3 libnet)
21
provides=(
22
"java-environment=${pkgver/.*}"
23
"java-environment-openjdk=${pkgver/.*}"
24
"java-openjfx=${pkgver/.*}"
25
"java-runtime-headless=${pkgver/.*}"
26
"java-runtime-headless-openjdk=${pkgver/.*}"
27
"java-runtime=${pkgver/.*}"
28
"java-runtime-openjdk=${pkgver/.*}"
29
"liberica-jdk-bin=$pkgver"
30
"liberica-jdk-full-bin=$pkgver"
31
"liberica-jdk-lite-bin=$pkgver"
32
"liberica-jre-bin=$pkgver"
33
"liberica-jre-full-bin=$pkgver"
34
)
35
install=$_jdkname.install
36
37
backup=(etc/${_jdkname}/logging.properties
38
etc/${_jdkname}/management/jmxremote.access
39
etc/${_jdkname}/management/jmxremote.password.template
40
etc/${_jdkname}/management/management.properties
41
etc/${_jdkname}/net.properties
42
etc/${_jdkname}/security/java.security
43
etc/${_jdkname}/security/policy/README.txt
44
etc/${_jdkname}/security/policy/limited/default_US_export.policy
45
etc/${_jdkname}/security/policy/limited/default_local.policy
46
etc/${_jdkname}/security/policy/limited/exempt_local.policy
47
etc/${_jdkname}/security/policy/unlimited/default_US_export.policy
48
etc/${_jdkname}/security/policy/unlimited/default_local.policy
49
etc/${_jdkname}/sound.properties)
50
51
source=(freedesktop-java.desktop.in
52
freedesktop-jconsole.desktop.in
53
freedesktop-jshell.desktop.in)
54
source_aarch64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-aarch64-full.tar.gz)
55
source_armv7h=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-arm32-vfp-hflt-full.tar.gz)
56
source_armv8h=(${source_armv7h[@]})
57
source_x86_64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-amd64-full.tar.gz)
58
59
sha1sums=('ec278cbc0a5f7a188140703c63e3b9cdb3931c29'
60
'41cece227a4641fbb1e04d246c51ac2dac7f0012'
61
'13af0192b2ffe02efaf5ae6a592b3ea15d9f7194')
62
sha1sums_aarch64=('b8c54a09b2d3b735cf491564ac0619c64d7f2c40')
63
sha1sums_armv7h=('d867d1722cc5cc68901d87ac264d11208a481749')
64
sha1sums_armv8h=('d867d1722cc5cc68901d87ac264d11208a481749')
65
sha1sums_x86_64=('2fceb3573f9f85579a314a8f8d850acae036357c')
66
67
# Skip debug package generation and stripping for prebuilt binaries
68
options=(!debug !strip)
69
70
# Upstream-provided
71
72
_jvmdir="/usr/lib/jvm/${_jdkname}"
73
74
prepare() {
75
for f in *.desktop.in; do
76
sed "s|@@VER@@|${pkgver/.*}|g; s|@@PATH@@|${_jvmdir}|g" $f >> ${f/.in}
77
done
78
}
79
80
package() {
81
cd jdk-${pkgver/+*}-full
82
83
install -dm 755 "${pkgdir}/${_jvmdir}"
84
cp -r . "${pkgdir}/${_jvmdir}/"
85
86
# copied from java11-openjdk
87
88
# Conf
89
install -dm 755 "${pkgdir}/etc"
90
cp -r conf "${pkgdir}/etc/${_jdkname}"
91
rm -rf "${pkgdir}/${_jvmdir}/conf"
92
ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
93
94
# Legal
95
install -dm 755 "${pkgdir}/usr/share/licenses"
96
cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
97
rm -rf "${pkgdir}/${_jvmdir}/legal"
98
ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
99
100
# Link JKS keystore from ca-certificates-utils
101
rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
102
ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
103
104
# Launchers
105
for f in java jconsole jshell; do
106
install -Dm644 "${srcdir}"/freedesktop-${f}.desktop "${pkgdir}"/usr/share/applications/${f}-${_jdkname}.desktop
107
done
108
}
109
Changes since previous scan
--- PKGBUILD @ 2026-09-09 00:04+++ PKGBUILD @ 2026-09-17 00:27@@ -10,8 +10,7 @@ _jdkname=liberica-jdk-full pkgname="${_jdkname}-bin" _java_ver=26-_pkgver=${_java_ver}.0.2+13-pkgver=${_pkgver/+/.u}+pkgver=26.0.2.1+1 pkgrel=1 pkgdesc='BellSoft builds of OpenJDK are fully certified and 100% open source Java Development Kits (JDKs) for all Java development and production workloads. Full version includes OpenJFX.' arch=(aarch64 armv7h armv8h x86_64)@@ -51,27 +50,19 @@ source=(freedesktop-java.desktop.in freedesktop-jconsole.desktop.in- freedesktop-jshell.desktop.in- ${_jdkname}16.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon16.png- ${_jdkname}24.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon24.png- ${_jdkname}32.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon32.png- ${_jdkname}48.png::https://raw.githubusercontent.com/openjdk/jdk/master/src/java.desktop/unix/classes/sun/awt/X11/java-icon48.png)-sha1sums=('fe1e43bf295862bb3bd206278f53ecd384dbe0ca'- 'efbccfb524875d4968a3fbef56b9f14533279d3f'- '5c09312d636e85b09742a777d71729d901c4cdbd'- '36096a57cebd346e08efc68326fe77960d43726f'- 'b8233f9ff931ce97a265827fac18ed90f4e248c6'- 'a0da2952bc87a425182c3ac88e88649fbaa7cb65'- 'eb36aa73a9be98164447774217865b91e79d503c')-sha1sums_aarch64=('4f128c28216ba17f72ac3f20eac92c3ee218c9bd')-sha1sums_armv7h=('9bc5d8aa34d2777b634db32f5d1279e0107ded61')-sha1sums_armv8h=('9bc5d8aa34d2777b634db32f5d1279e0107ded61')-sha1sums_x86_64=('393b810f8cfa3cd9fdb26c688fcf36f5610679c6')+ freedesktop-jshell.desktop.in)+source_aarch64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-aarch64-full.tar.gz)+source_armv7h=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-arm32-vfp-hflt-full.tar.gz)+source_armv8h=(${source_armv7h[@]})+source_x86_64=(https://download.bell-sw.com/java/$pkgver/bellsoft-jdk$pkgver-linux-amd64-full.tar.gz) -source_aarch64=(https://download.bell-sw.com/java/$_pkgver/bellsoft-jdk$_pkgver-linux-aarch64-full.tar.gz)-source_armv7h=(https://download.bell-sw.com/java/$_pkgver/bellsoft-jdk$_pkgver-linux-arm32-vfp-hflt-full.tar.gz)-source_armv8h=(${source_armv7h[@]})-source_x86_64=(https://download.bell-sw.com/java/$_pkgver/bellsoft-jdk$_pkgver-linux-amd64-full.tar.gz)+sha1sums=('ec278cbc0a5f7a188140703c63e3b9cdb3931c29'+ '41cece227a4641fbb1e04d246c51ac2dac7f0012'+ '13af0192b2ffe02efaf5ae6a592b3ea15d9f7194')+sha1sums_aarch64=('b8c54a09b2d3b735cf491564ac0619c64d7f2c40')+sha1sums_armv7h=('d867d1722cc5cc68901d87ac264d11208a481749')+sha1sums_armv8h=('d867d1722cc5cc68901d87ac264d11208a481749')+sha1sums_x86_64=('2fceb3573f9f85579a314a8f8d850acae036357c') # Skip debug package generation and stripping for prebuilt binaries options=(!debug !strip)@@ -82,12 +73,12 @@ prepare() { for f in *.desktop.in; do- sed "s|@@VER@@|${pkgver/.*}|g" $f >> ${f/.in}+ sed "s|@@VER@@|${pkgver/.*}|g; s|@@PATH@@|${_jvmdir}|g" $f >> ${f/.in} done } package() {- cd jdk-${_pkgver/+*}-full+ cd jdk-${pkgver/+*}-full install -dm 755 "${pkgdir}/${_jvmdir}" cp -r . "${pkgdir}/${_jvmdir}/"@@ -106,21 +97,11 @@ rm -rf "${pkgdir}/${_jvmdir}/legal" ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal" - # Man pages- # for f in man/man1/*; do- # install -Dm 644 "${f}" "${pkgdir}/usr/share/${f/\.1/-$_jdkname.1}"- # done- # rm -rf "${pkgdir}/${_jvmdir}/man"- # ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"- # Link JKS keystore from ca-certificates-utils rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts" ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts" - # Icons and launchers- for s in 16 24 32 48; do- install -Dm644 "${srcdir}"/${_jdkname}${s}.png "${pkgdir}"/usr/share/icons/hicolor/${s}x${s}/apps/${_jdkname}.png- done+ # Launchers for f in java jconsole jshell; do install -Dm644 "${srcdir}"/freedesktop-${f}.desktop "${pkgdir}"/usr/share/applications/${f}-${_jdkname}.desktop doneScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 03:18:52 | Medium | 1 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |