zulu-jre-fx-bin
MEDIUM
maintainer ThiccFurLizzy
0 votes
scanned 2026-10-27 15:48:05.092314
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
source=("https://cdn.azul.com/zulu/bin/${_tarballname}.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Contributor: Sam Guymer <sam at guymer dot me>
2
# Maintainer: ThiccFurLizzy <lizbeth.gatica.meow+arch at gmail dot com>
3
4
_java_ver=27
5
_jdkname="zulu-jre-fx"
6
_zulu_build="${_java_ver}.28.103-ca"
7
pkgname="zulu-jre-fx-bin"
8
pkgver="${_java_ver}.0.0"
9
pkgrel=1
10
pkgdesc='Azul Zulu builds of OpenJDK are open source, TCK-tested and certified builds of OpenJDK.'
11
arch=('x86_64')
12
url='https://www.azul.com/downloads/'
13
license=('custom')
14
depends=(
15
'java-runtime-common>=3'
16
'ca-certificates-utils'
17
)
18
provides=(
19
"java-runtime-headless=$_java_ver"
20
"java-runtime-headless-openjdk=$_java_ver"
21
"java-runtime=$_java_ver"
22
"java-runtime-openjdk=$_java_ver"
23
"java-openjfx=$_java_ver"
24
"jre-openjdk=$_java_ver"
25
)
26
install="$pkgname.install"
27
_tarballname="zulu${_zulu_build}-fx-jre${pkgver}-linux_x64"
28
source=("https://cdn.azul.com/zulu/bin/${_tarballname}.tar.gz")
29
sha256sums=('22cbf59965e4e224f7d4abc89d28f5dc71dec0246effdfe956fa35d2a1106f93')
30
31
_jvmdir="/usr/lib/jvm/${_jdkname}"
32
33
package() {
34
cd "$srcdir/${_tarballname}"
35
36
install -dm 755 "${pkgdir}/${_jvmdir}"
37
cp -a . "${pkgdir}/${_jvmdir}/"
38
39
# based on java-openjdk package_jdk-openjdk
40
# https://github.com/archlinux/svntogit-packages/blob/3f6aa8ddd98f728a9b0701288a933d16f0e8bbaf/trunk/PKGBUILD
41
42
# Conf
43
install -dm 755 "${pkgdir}/etc"
44
cp -r conf "${pkgdir}/etc/${_jdkname}"
45
rm -r "${pkgdir}/${_jvmdir}/conf"
46
ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
47
48
# Legal
49
install -dm 755 "${pkgdir}/usr/share/licenses"
50
cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
51
rm -r "${pkgdir}/${_jvmdir}/legal"
52
ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
53
54
# # Man pages
55
# for f in bin/*; do
56
# f=$(basename "${f}")
57
# _man=man/man1/"${f}.1"
58
# test -f "${_man}" && install -Dm 644 "${_man}" "${pkgdir}/usr/share/man/man1/${f}-${_jdkname}.1"
59
# done
60
# rm -r "${pkgdir}/${_jvmdir}/man"
61
# ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
62
63
# Link JKS keystore from ca-certificates-utils
64
rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
65
ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
66
}
67
Changes since previous scan
--- PKGBUILD @ 2026-06-19 19:07+++ PKGBUILD @ 2026-10-27 15:48@@ -1,11 +1,11 @@ # Contributor: Sam Guymer <sam at guymer dot me> # Maintainer: ThiccFurLizzy <lizbeth.gatica.meow+arch at gmail dot com> -_java_ver=25+_java_ver=27 _jdkname="zulu-jre-fx"-_zulu_build="${_java_ver}.34.17-ca"+_zulu_build="${_java_ver}.28.103-ca" pkgname="zulu-jre-fx-bin"-pkgver="${_java_ver}.0.3"+pkgver="${_java_ver}.0.0" pkgrel=1 pkgdesc='Azul Zulu builds of OpenJDK are open source, TCK-tested and certified builds of OpenJDK.' arch=('x86_64')@@ -26,7 +26,7 @@ install="$pkgname.install" _tarballname="zulu${_zulu_build}-fx-jre${pkgver}-linux_x64" source=("https://cdn.azul.com/zulu/bin/${_tarballname}.tar.gz")-sha256sums=('7adaaa1573e785cbb7b8cfc6793ceedf9d89b718bab1d8af93a464be301728c1')+sha256sums=('22cbf59965e4e224f7d4abc89d28f5dc71dec0246effdfe956fa35d2a1106f93') _jvmdir="/usr/lib/jvm/${_jdkname}" Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-27 15:48:05 | Medium | 1 |
| 2026-06-19 19:07:35 | Clean | 2 |
| 2026-06-19 18:54:17 | Clean | 2 |
| 2026-06-18 16:11:54 | Medium | 1 |