openjdk-liberica8-full-bin
LOW
maintainer Carlson24
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads a prebuilt Liberica JDK binary from the official bell-sw.com domain, which is the vendor's legitimate release infrastructure; despite the static analyzer flag for a non-whitelisted host, this is a normal and expected source for the software, and the checksum is provided, making the risk low.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt Liberica JDK binary from the official bell-sw.com domain, which is the vendor's legitimate release infrastructure; despite the static analyzer flag for a non-whitelisted host, this is a normal and expected source for the software, and the checksum is provided, making the risk low.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:37
source=("https://download.bell-sw.com/java/${_jdkver}+${_bellver}/bellsoft-jdk${_jdkver}+${_bellver}-linux-amd64-full.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Aubrey Carlson (Carlson) <aubreycarlson24@outlook.com>
2
3
_javaver=8
4
_bellver=11
5
_jdkver=8u472
6
7
pkgname="openjdk-liberica8-full-bin"
8
pkgver="${_javaver}+${_bellver}+${_jdkver}"
9
pkgrel=1
10
pkgdesc="Liberica ${_javaver} includes LibericaFX, which is based on OpenJFX ${_javaver} and Minimal VM, where suitable."
11
arch=('x86_64')
12
url='https://https://bell-sw.com/pages/downloads'
13
license=('custom')
14
depends=('java-environment-common>=3'
15
'java-runtime-common>=3'
16
'ca-certificates-utils')
17
provides=("java-environment=${_javaver}"
18
"java-environment-openjdk=${_javaver}"
19
"java-runtime=${_javaver}"
20
"java-runtime-openjdk=${_javaver}"
21
"java-runtime-headless=${_javaver}"
22
"java-runtime-headless-openjdk=${_javaver}"
23
"jre-openjdk=${_javaver}"
24
"jdk-openjdk=${_javaver}"
25
"jre-openjdk-headless=${_javaver}"
26
"java-openjfx=${_javaver}"
27
"java${_javaver}-environment=${_javaver}"
28
"java${_javaver}-environment-openjdk=${_javaver}"
29
"java${_javaver}-runtime=${_javaver}"
30
"java${_javaver}-runtime-openjdk=${_javaver}"
31
"java${_javaver}-runtime-headless=${_javaver}"
32
"java${_javaver}-runtime-headless-openjdk=${_javaver}"
33
"jre${_javaver}-openjdk=${_javaver}"
34
"jdk${_javaver}-openjdk=${_javaver}"
35
"jre${_javaver}-openjdk-headless=${_javaver}"
36
"java${_javaver}-openjfx=${_javaver}")
37
source=("https://download.bell-sw.com/java/${_jdkver}+${_bellver}/bellsoft-jdk${_jdkver}+${_bellver}-linux-amd64-full.tar.gz")
38
sha1sums=('ff9f4b2fc62bb977e6675eb9d666cf085dd2c23d')
39
install="install_${pkgname}.sh"
40
41
_jvmdir="/usr/lib/jvm/${pkgname}"
42
43
_conf_files=(
44
amd64/jvm.cfg
45
calendars.properties
46
content-types.properties
47
flavormap.properties
48
images/cursors/cursors.properties
49
logging.properties
50
management/jmxremote.access
51
management/jmxremote.password
52
management/management.properties
53
management/snmp.acl
54
net.properties
55
psfont.properties.ja
56
psfontj2d.properties
57
security/java.policy
58
security/java.security
59
sound.properties
60
)
61
62
package() {
63
cd ${srcdir}/jdk${_jdkver}-full
64
install -dm 755 "${pkgdir}${_jvmdir}"
65
cp -a . "${pkgdir}${_jvmdir}"
66
67
# Conf
68
mv "${pkgdir}${_jvmdir}"/jre/lib/management/jmxremote.password{.template,}
69
mv "${pkgdir}${_jvmdir}"/jre/lib/management/snmp.acl{.template,}
70
install -dm 755 "${pkgdir}/etc/openjdk-liberica/${pkgname}"
71
for f in "${_conf_files[@]}"; do
72
_file="${_jvmdir}/jre/lib/$f"
73
install -Dm 644 "${pkgdir}${_file}" "${pkgdir}/etc/openjdk-liberica/${pkgname}/$f"
74
ln -sf "/etc/openjdk-liberica/${pkgname}/$f" "${pkgdir}${_file}"
75
done
76
77
# Legal
78
install -dm 755 "${pkgdir}/usr/share/licenses/${pkgname}/"
79
install -Dm 644 ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README "${pkgdir}/usr/share/licenses/${pkgname}"
80
81
# Man pages
82
for f in bin/*; do
83
f=$(basename "${f}")
84
_man=man/man1/"${f}.1"
85
test -f "${_man}" && install -Dm 644 "${_man}" "${pkgdir}/usr/share/man/man1/${f}-bell${_javaver}.1"
86
done
87
rm -r "${pkgdir}${_jvmdir}/man"
88
ln -s /usr/share/man "${pkgdir}${_jvmdir}/man"
89
90
# Link JKS keystore from ca-certificates-utils
91
rm -f "${pkgdir}${_jvmdir}/lib/security/cacerts"
92
ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}${_jvmdir}/jre/lib/security/cacerts"
93
}
94
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |