zulu-11-bin

MEDIUM

maintainer yigitsalar 8 votes scanned 2026-08-22 13:17:31.911498

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:30 source_aarch64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-ca-jdk${pkgver}-linux_aarch64.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Yiğit Salar <yigit dot salar7 at gmail dot com>
    
      2# Contributor: Hendrik Schick <hendrik at hndrkk dot me>
    
      3# Contributor: Sam Guymer <sam at guymer dot me>
    
      4
    
      5_jdkname=zulu-11
    
      6pkgname="${_jdkname}-bin"
    
      7_java_ver=11
    
      8_zulu_build=11.90.205
    
      9pkgver=11.0.32.1
    
      10pkgrel=1
    
      11pkgdesc='Zulu Community builds of OpenJDK are fully certified and 100% open source Java Development Kits (JDKs) for all Java development and production workloads.'
    
      12arch=('aarch64' 'x86_64')
    
      13url='https://azul.com/products/zulu-community'
    
      14license=('custom')
    
      15options=('!strip' '!debug')
    
      16depends=(
    
      17  'java-environment-common>=3'
    
      18  'java-runtime-common>=3'
    
      19  'ca-certificates-utils'
    
      20)
    
      21provides=(
    
      22  "java-environment=$_java_ver"
    
      23  "java-environment-openjdk=$_java_ver"
    
      24  "java-runtime-headless=$_java_ver"
    
      25  "java-runtime-headless-openjdk=$_java_ver"
    
      26  "java-runtime=$_java_ver"
    
      27  "java-runtime-openjdk=$_java_ver"
    
      28)
    
      29install="$pkgname.install"
    
      30source_aarch64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-ca-jdk${pkgver}-linux_aarch64.tar.gz")
    
      31source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-ca-jdk${pkgver}-linux_x64.tar.gz")
    
      32sha256sums_aarch64=('4960147b38139ee6bd0c9d3f6c06f1fde71b6603a69618ae8b57a9d66e5dc4a9')
    
      33sha256sums_x86_64=('cb9ca98d2bf067b4cdbd616c21dba1f2c77174ea716d1378fb7fdcb6927223d5')
    
      34
    
      35_jvmdir="/usr/lib/jvm/${_jdkname}"
    
      36
    
      37package() {
    
      38  if [ "${CARCH}" = "aarch64" ]; then
    
      39    cd "$srcdir/zulu${_zulu_build}-ca-jdk${pkgver}-linux_aarch64"
    
      40  else
    
      41    cd "$srcdir/zulu${_zulu_build}-ca-jdk${pkgver}-linux_x64"
    
      42  fi
    
      43
    
      44  install -dm 755 "${pkgdir}/${_jvmdir}"
    
      45  cp -a . "${pkgdir}/${_jvmdir}/"
    
      46
    
      47  # copied from java11-openjdk
    
      48
    
      49  # Conf
    
      50  install -dm 755 "${pkgdir}/etc"
    
      51  cp -r conf "${pkgdir}/etc/${_jdkname}"
    
      52  rm -rf "${pkgdir}/${_jvmdir}/conf"
    
      53  ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
    
      54
    
      55  # Legal
    
      56  install -dm 755 "${pkgdir}/usr/share/licenses"
    
      57  cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
    
      58  rm -rf "${pkgdir}/${_jvmdir}/legal"
    
      59  ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
    
      60
    
      61  # Man pages
    
      62  for f in man/man1/* man/ja/man1/*; do
    
      63    install -Dm 644 "${f}" "${pkgdir}/usr/share/${f/\.1/-zulu-11.1}"
    
      64  done
    
      65  rm -rf "${pkgdir}/${_jvmdir}/man"
    
      66  ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
    
      67
    
      68  # Link JKS keystore from ca-certificates-utils
    
      69  rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
    
      70  ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
    
      71}
    
      72

Changes since previous scan

--- PKGBUILD @ 2026-06-19 23:51
+++ PKGBUILD @ 2026-08-22 13:17
@@ -5,13 +5,14 @@
 _jdkname=zulu-11
 pkgname="${_jdkname}-bin"
 _java_ver=11
-_zulu_build=11.88.17
-pkgver=11.0.31
-pkgrel=11
+_zulu_build=11.90.205
+pkgver=11.0.32.1
+pkgrel=1
 pkgdesc='Zulu Community builds of OpenJDK are fully certified and 100% open source Java Development Kits (JDKs) for all Java development and production workloads.'
 arch=('aarch64' 'x86_64')
-url='https://www.azul.com/products/zulu-community'
+url='https://azul.com/products/zulu-community'
 license=('custom')
+options=('!strip' '!debug')
 depends=(
   'java-environment-common>=3'
   'java-runtime-common>=3'
@@ -28,8 +29,8 @@
 install="$pkgname.install"
 source_aarch64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-ca-jdk${pkgver}-linux_aarch64.tar.gz")
 source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-ca-jdk${pkgver}-linux_x64.tar.gz")
-sha256sums_aarch64=('8fa22d2c45355b7db381f932f8cda60f959299e2836167d79f0ccb3b1465f0fb')
-sha256sums_x86_64=('e34761930c630b067d5a449377e71a15281154b1af882dac71f24e2bc3ca93f9')
+sha256sums_aarch64=('4960147b38139ee6bd0c9d3f6c06f1fde71b6603a69618ae8b57a9d66e5dc4a9')
+sha256sums_x86_64=('cb9ca98d2bf067b4cdbd616c21dba1f2c77174ea716d1378fb7fdcb6927223d5')
 
 _jvmdir="/usr/lib/jvm/${_jdkname}"
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-22 13:17:31	Medium	1
2026-06-19 23:51:18	Clean	2
2026-06-19 19:07:35	Low	2
2026-06-19 18:54:17	Low	2
2026-06-18 16:11:54	Medium	1