zulu-25-bin

MEDIUM
maintainer rutorai 0 votes scanned 2026-09-05 20:01:32.631454
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:25 source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_x64.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1_java_ver=25
2_jdkname="zulu-${_java_ver}"
3_zulu_build="${_java_ver}.36.205-ca"
4pkgname="${_jdkname}-bin"
5pkgver="${_java_ver}.0.4.1"
6pkgrel=1
7pkgdesc='Azul Zulu builds of OpenJDK are open source, TCK-tested and certified builds of OpenJDK.'
8arch=('x86_64')
9url='https://www.azul.com/downloads/'
10license=('custom')
11depends=(
12 'java-environment-common>=3'
13 'java-runtime-common>=3'
14 'ca-certificates-utils'
15)
16provides=(
17 "java-environment=$_java_ver"
18 "java-environment-openjdk=$_java_ver"
19 "java-runtime-headless=$_java_ver"
20 "java-runtime-headless-openjdk=$_java_ver"
21 "java-runtime=$_java_ver"
22 "java-runtime-openjdk=$_java_ver"
23)
24install="$pkgname.install"
25source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_x64.tar.gz")
26sha256sums_x86_64=('e11d92589de8fd55616a843e0298ba72348848bd49b675088e930b67538497cb')
27
28_jvmdir="/usr/lib/jvm/${_jdkname}"
29
30package() {
31 if [ "${CARCH}" = "aarch64" ]; then
32 cd "$srcdir/zulu${_zulu_build}-jdk${pkgver}-linux_aarch64"
33 else
34 cd "$srcdir/zulu${_zulu_build}-jdk${pkgver}-linux_x64"
35 fi
36
37 install -dm 755 "${pkgdir}/${_jvmdir}"
38 cp -a . "${pkgdir}/${_jvmdir}/"
39
40 # based on java-openjdk package_jdk-openjdk
41 # https://github.com/archlinux/svntogit-packages/blob/3f6aa8ddd98f728a9b0701288a933d16f0e8bbaf/trunk/PKGBUILD
42
43 # Conf
44 install -dm 755 "${pkgdir}/etc"
45 cp -r conf "${pkgdir}/etc/${_jdkname}"
46 rm -r "${pkgdir}/${_jvmdir}/conf"
47 ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
48
49 # Legal
50 install -dm 755 "${pkgdir}/usr/share/licenses"
51 cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
52 rm -r "${pkgdir}/${_jvmdir}/legal"
53 ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
54
55 # Man pages
56 for f in bin/*; do
57 f=$(basename "${f}")
58 _man=man/man1/"${f}.1"
59 test -f "${_man}" && install -Dm 644 "${_man}" "${pkgdir}/usr/share/man/man1/${f}-${_jdkname}.1"
60 done
61 rm -r "${pkgdir}/${_jvmdir}/man"
62 ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
63
64 # Link JKS keystore from ca-certificates-utils
65 rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
66 ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
67}
68

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-05 20:01
@@ -1,9 +1,9 @@
_java_ver=25
_jdkname="zulu-${_java_ver}"
-_zulu_build="${_java_ver}.34.17-ca"
+_zulu_build="${_java_ver}.36.205-ca"
pkgname="${_jdkname}-bin"
-pkgver="${_java_ver}.0.3"
-pkgrel=9
+pkgver="${_java_ver}.0.4.1"
+pkgrel=1
pkgdesc='Azul Zulu builds of OpenJDK are open source, TCK-tested and certified builds of OpenJDK.'
arch=('x86_64')
url='https://www.azul.com/downloads/'
@@ -23,7 +23,7 @@
)
install="$pkgname.install"
source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_x64.tar.gz")
-sha256sums_x86_64=('3a93235f4e5b313232647916219e91dc5cca0b9835c9b52a404ba58c43571697')
+sha256sums_x86_64=('e11d92589de8fd55616a843e0298ba72348848bd49b675088e930b67538497cb')
_jvmdir="/usr/lib/jvm/${_jdkname}"

Scan history

Scanned at (UTC)SeverityRules
2026-09-05 20:01:32 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 18:55:24 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion