zulu-17-bin

MEDIUM
maintainer linesofcodes 10 votes scanned 2026-08-22 03:16:42.422172
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:26 source_aarch64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_aarch64.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1_java_ver=17
2_jdkname="zulu-${_java_ver}"
3_zulu_build="${_java_ver}.68.17-ca"
4pkgname="${_jdkname}-bin"
5pkgver="${_java_ver}.0.20"
6pkgrel=1
7pkgdesc='Azul Zulu builds of OpenJDK are open source, TCK-tested and certified builds of OpenJDK.'
8arch=('aarch64' 'i686' 'x86_64')
9url='https://www.azul.com/downloads/'
10license=('custom')
11depends=(
12 'java-environment-common>=3'
13 'java-runtime-common>=3'
14 'ca-certificates-utils'
15)
16provides=(
17 "java-environment=$_java_ver"
18 "java-environment-openjdk=$_java_ver"
19 "java-runtime-headless=$_java_ver"
20 "java-runtime-headless-openjdk=$_java_ver"
21 "java-runtime=$_java_ver"
22 "java-runtime-openjdk=$_java_ver"
23)
24install="$pkgname.install"
25options=(!strip !debug)
26source_aarch64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_aarch64.tar.gz")
27source_i686=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_i686.tar.gz")
28source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_x64.tar.gz")
29sha256sums_aarch64=('46f1dc7678760d37d38699c5a5a34dea8ed451dcdf6d27890a7b61f025e7ff60')
30sha256sums_i686=('fc51a5a4551c697a56324bf63052e76302d9491407a6bbf48a43f57a1e4f2e88')
31sha256sums_x86_64=('32c5efedf69f4a95635ea2923f6a6ee90ce6ca83df0bd43ba55dd662d5af429a')
32
33_jvmdir="/usr/lib/jvm/${_jdkname}"
34
35package() {
36 if [ "${CARCH}" = "aarch64" ]; then
37 cd "$srcdir/zulu${_zulu_build}-jdk${pkgver}-linux_aarch64"
38 elif [ "${CARCH}" = "i686" ]; then
39 cd "$srcdir/zulu${_zulu_build}-jdk${pkgver}-linux_i686"
40 else
41 cd "$srcdir/zulu${_zulu_build}-jdk${pkgver}-linux_x64"
42 fi
43
44 install -dm 755 "${pkgdir}/${_jvmdir}"
45 cp -a . "${pkgdir}/${_jvmdir}/"
46
47 # based on java-openjdk package_jdk-openjdk
48 # https://github.com/archlinux/svntogit-packages/blob/3f6aa8ddd98f728a9b0701288a933d16f0e8bbaf/trunk/PKGBUILD
49
50 # Conf
51 install -dm 755 "${pkgdir}/etc"
52 cp -r conf "${pkgdir}/etc/${_jdkname}"
53 rm -r "${pkgdir}/${_jvmdir}/conf"
54 ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
55
56 # Legal
57 install -dm 755 "${pkgdir}/usr/share/licenses"
58 cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
59 rm -r "${pkgdir}/${_jvmdir}/legal"
60 ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
61
62 # Man pages
63 for f in bin/*; do
64 f=$(basename "${f}")
65 _man=man/man1/"${f}.1"
66 test -f "${_man}" && install -Dm 644 "${_man}" "${pkgdir}/usr/share/man/man1/${f}-${_jdkname}.1"
67 done
68 rm -r "${pkgdir}/${_jvmdir}/man"
69 ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
70
71 # Link JKS keystore from ca-certificates-utils
72 rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
73 ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
74}
75

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-08-22 03:16
@@ -1,75 +1,75 @@
_java_ver=17
_jdkname="zulu-${_java_ver}"
-_zulu_build="${_java_ver}.66.19-ca"
+_zulu_build="${_java_ver}.68.17-ca"
pkgname="${_jdkname}-bin"
-pkgver="${_java_ver}.0.19"
+pkgver="${_java_ver}.0.20"
pkgrel=1
pkgdesc='Azul Zulu builds of OpenJDK are open source, TCK-tested and certified builds of OpenJDK.'
arch=('aarch64' 'i686' 'x86_64')
url='https://www.azul.com/downloads/'
license=('custom')
depends=(
- 'java-environment-common>=3'
- 'java-runtime-common>=3'
- 'ca-certificates-utils'
+ 'java-environment-common>=3'
+ 'java-runtime-common>=3'
+ 'ca-certificates-utils'
)
provides=(
- "java-environment=$_java_ver"
- "java-environment-openjdk=$_java_ver"
- "java-runtime-headless=$_java_ver"
- "java-runtime-headless-openjdk=$_java_ver"
- "java-runtime=$_java_ver"
- "java-runtime-openjdk=$_java_ver"
+ "java-environment=$_java_ver"
+ "java-environment-openjdk=$_java_ver"
+ "java-runtime-headless=$_java_ver"
+ "java-runtime-headless-openjdk=$_java_ver"
+ "java-runtime=$_java_ver"
+ "java-runtime-openjdk=$_java_ver"
)
install="$pkgname.install"
options=(!strip !debug)
source_aarch64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_aarch64.tar.gz")
source_i686=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_i686.tar.gz")
source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_x64.tar.gz")
-sha256sums_aarch64=('c17d5657a673c0cfc099e9d803ed30498495894d7359fd1064d463093ed9850b')
-sha256sums_i686=('e449f522be5fa4df98d80bbf92a2800a1270c5fef0b86b919cc2968a36339d53')
-sha256sums_x86_64=('ad319aabe659c18fa63fadb446026a7c7f5260f02a6159f51195735d20e7aa1c')
+sha256sums_aarch64=('46f1dc7678760d37d38699c5a5a34dea8ed451dcdf6d27890a7b61f025e7ff60')
+sha256sums_i686=('fc51a5a4551c697a56324bf63052e76302d9491407a6bbf48a43f57a1e4f2e88')
+sha256sums_x86_64=('32c5efedf69f4a95635ea2923f6a6ee90ce6ca83df0bd43ba55dd662d5af429a')
_jvmdir="/usr/lib/jvm/${_jdkname}"
package() {
- if [ "${CARCH}" = "aarch64" ]; then
- cd "$srcdir/zulu${_zulu_build}-jdk${pkgver}-linux_aarch64"
- elif [ "${CARCH}" = "i686" ]; then
- cd "$srcdir/zulu${_zulu_build}-jdk${pkgver}-linux_i686"
- else
- cd "$srcdir/zulu${_zulu_build}-jdk${pkgver}-linux_x64"
- fi
+ if [ "${CARCH}" = "aarch64" ]; then
+ cd "$srcdir/zulu${_zulu_build}-jdk${pkgver}-linux_aarch64"
+ elif [ "${CARCH}" = "i686" ]; then
+ cd "$srcdir/zulu${_zulu_build}-jdk${pkgver}-linux_i686"
+ else
+ cd "$srcdir/zulu${_zulu_build}-jdk${pkgver}-linux_x64"
+ fi
- install -dm 755 "${pkgdir}/${_jvmdir}"
- cp -a . "${pkgdir}/${_jvmdir}/"
+ install -dm 755 "${pkgdir}/${_jvmdir}"
+ cp -a . "${pkgdir}/${_jvmdir}/"
- # based on java-openjdk package_jdk-openjdk
- # https://github.com/archlinux/svntogit-packages/blob/3f6aa8ddd98f728a9b0701288a933d16f0e8bbaf/trunk/PKGBUILD
+ # based on java-openjdk package_jdk-openjdk
+ # https://github.com/archlinux/svntogit-packages/blob/3f6aa8ddd98f728a9b0701288a933d16f0e8bbaf/trunk/PKGBUILD
- # Conf
- install -dm 755 "${pkgdir}/etc"
- cp -r conf "${pkgdir}/etc/${_jdkname}"
- rm -r "${pkgdir}/${_jvmdir}/conf"
- ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
+ # Conf
+ install -dm 755 "${pkgdir}/etc"
+ cp -r conf "${pkgdir}/etc/${_jdkname}"
+ rm -r "${pkgdir}/${_jvmdir}/conf"
+ ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
- # Legal
- install -dm 755 "${pkgdir}/usr/share/licenses"
- cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
- rm -r "${pkgdir}/${_jvmdir}/legal"
- ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
+ # Legal
+ install -dm 755 "${pkgdir}/usr/share/licenses"
+ cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
+ rm -r "${pkgdir}/${_jvmdir}/legal"
+ ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
- # Man pages
- for f in bin/*; do
- f=$(basename "${f}")
- _man=man/man1/"${f}.1"
- test -f "${_man}" && install -Dm 644 "${_man}" "${pkgdir}/usr/share/man/man1/${f}-${_jdkname}.1"
- done
- rm -r "${pkgdir}/${_jvmdir}/man"
- ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
+ # Man pages
+ for f in bin/*; do
+ f=$(basename "${f}")
+ _man=man/man1/"${f}.1"
+ test -f "${_man}" && install -Dm 644 "${_man}" "${pkgdir}/usr/share/man/man1/${f}-${_jdkname}.1"
+ done
+ rm -r "${pkgdir}/${_jvmdir}/man"
+ ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
- # Link JKS keystore from ca-certificates-utils
- rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
- ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
+ # Link JKS keystore from ca-certificates-utils
+ rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
+ ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
}

Scan history

Scanned at (UTC)SeverityRules
2026-08-22 03:16:42 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-19 18:54:17 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion