zulu-8-bin
MEDIUM
maintainer yigitsalar
3 votes
scanned 2026-08-22 13:17:31.911498
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:32
source_aarch64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-ca-jdk${pkgver}-linux_aarch64.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Yiğit Salar <yigit dot salar7 at gmail dot com>
2
# Contributor: Sam Guymer <sam at guymer dot me>
3
4
_jdkname=zulu-8
5
pkgname="${_jdkname}-bin"
6
_java_ver=8
7
_zulu_build=8.96.0.205
8
pkgver=8.0.504
9
pkgrel=1
10
pkgdesc='Zulu Community builds of OpenJDK are fully certified and 100% open source Java Development Kits (JDKs) for all Java development and production workloads.'
11
arch=('aarch64' 'x86_64')
12
url='https://azul.com/products/zulu-community'
13
license=('custom')
14
options=('!strip' '!debug')
15
depends=(
16
'java-environment-common' 'java-runtime-common' 'ca-certificates-utils'
17
# not 100% sure if all of these dependencies are needed
18
# dependencies from jre8-openjdk-headless
19
'nss'
20
# dependencies from jre8-openjdk
21
'xdg-utils' 'hicolor-icon-theme'
22
)
23
provides=(
24
"java-environment=$_java_ver"
25
"java-environment-openjdk=$_java_ver"
26
"java-runtime-headless=$_java_ver"
27
"java-runtime-headless-openjdk=$_java_ver"
28
"java-runtime=$_java_ver"
29
"java-runtime-openjdk=$_java_ver"
30
)
31
install="$pkgname.install"
32
source_aarch64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-ca-jdk${pkgver}-linux_aarch64.tar.gz")
33
source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-ca-jdk${pkgver}-linux_x64.tar.gz")
34
sha256sums_aarch64=('c79f5fd740702a1336a9e6da2262be03e1a6e4255a94d198b66c49896be6b478')
35
sha256sums_x86_64=('fdb93d3789f740c62b85c57a1c55db9960eb8bf6d7966ca8becd2a6be89bfcbf')
36
37
_jvmdir="/usr/lib/jvm/${_jdkname}"
38
39
# Upstream config files that should go to etc and get backup
40
_conf_files=(
41
calendars.properties
42
content-types.properties
43
flavormap.properties
44
images/cursors/cursors.properties
45
logging.properties
46
management/jmxremote.access
47
management/jmxremote.password
48
management/management.properties
49
management/snmp.acl
50
net.properties
51
psfont.properties.ja
52
psfontj2d.properties
53
security/java.policy
54
security/java.security
55
sound.properties
56
)
57
58
package() {
59
if [ "${CARCH}" = "aarch64" ]; then
60
_conf_files+=('aarch64/jvm.cfg')
61
cd "$srcdir/zulu${_zulu_build}-ca-jdk${pkgver}-linux_aarch64"
62
else
63
_conf_files+=('amd64/jvm.cfg')
64
cd "$srcdir/zulu${_zulu_build}-ca-jdk${pkgver}-linux_x64"
65
fi
66
67
install -dm 755 "${pkgdir}/${_jvmdir}"
68
cp -a . "${pkgdir}/${_jvmdir}/"
69
70
# copied from java8-openjdk
71
72
# Set config files
73
mv "${pkgdir}${_jvmdir}"/jre/lib/management/jmxremote.password{.template,}
74
mv "${pkgdir}${_jvmdir}"/jre/lib/management/snmp.acl{.template,}
75
76
# Conf
77
install -dm 755 "${pkgdir}/etc/${_jdkname}"
78
for f in "${_conf_files[@]}"; do
79
_file="${_jvmdir}/jre/lib/$f"
80
install -D -m 644 "${pkgdir}${_file}" "${pkgdir}/etc/${_jdkname}/$f"
81
ln -sf "/etc/${_jdkname}/$f" "${pkgdir}${_file}"
82
done
83
84
# Install license
85
install -d -m 755 "${pkgdir}/usr/share/licenses/${pkgbase}/"
86
install -m 644 ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README "${pkgdir}/usr/share/licenses/${pkgbase}"
87
88
# Man pages
89
for f in man/man1/* man/ja/man1/*; do
90
install -Dm 644 "${f}" "${pkgdir}/usr/share/${f/\.1/-zulu-8.1}"
91
done
92
rm -rf "${pkgdir}/${_jvmdir}/man"
93
ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
94
95
# Link JKS keystore from ca-certificates-utils
96
rm -f "${pkgdir}${_jvmdir}/jre/lib/security/cacerts"
97
ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}${_jvmdir}/jre/lib/security/cacerts"
98
}
99
Changes since previous scan
--- PKGBUILD @ 2026-06-19 19:07+++ PKGBUILD @ 2026-08-22 13:17@@ -4,13 +4,14 @@ _jdkname=zulu-8 pkgname="${_jdkname}-bin" _java_ver=8-_zulu_build=8.94.0.17-pkgver=8.0.492-pkgrel=9+_zulu_build=8.96.0.205+pkgver=8.0.504+pkgrel=1 pkgdesc='Zulu Community builds of OpenJDK are fully certified and 100% open source Java Development Kits (JDKs) for all Java development and production workloads.' arch=('aarch64' 'x86_64')-url='https://www.azul.com/products/zulu-community/'+url='https://azul.com/products/zulu-community' license=('custom')+options=('!strip' '!debug') depends=( 'java-environment-common' 'java-runtime-common' 'ca-certificates-utils' # not 100% sure if all of these dependencies are needed@@ -30,8 +31,8 @@ install="$pkgname.install" source_aarch64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-ca-jdk${pkgver}-linux_aarch64.tar.gz") source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-ca-jdk${pkgver}-linux_x64.tar.gz")-sha256sums_aarch64=('24f5e8183a52efb5abcee2b8173b0887089ba7476f11bc15603464353cc4e4a8')-sha256sums_x86_64=('a6d14104f2e7186cba8943c4dc182938db91509dc2c0ef9ecee046c864624d36')+sha256sums_aarch64=('c79f5fd740702a1336a9e6da2262be03e1a6e4255a94d198b66c49896be6b478')+sha256sums_x86_64=('fdb93d3789f740c62b85c57a1c55db9960eb8bf6d7966ca8becd2a6be89bfcbf') _jvmdir="/usr/lib/jvm/${_jdkname}" Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-22 13:17:31 | Medium | 1 |
| 2026-06-19 19:07:35 | Clean | 2 |
| 2026-06-19 18:54:17 | Clean | 2 |
| 2026-06-18 16:11:54 | Medium | 1 |