zulu21-fx-bin

MEDIUM
maintainer ThiccFurLizzy 2 votes scanned 2026-10-27 15:48:05.092314
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:30 source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_x64.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: ThiccFurLizzy <lizbeth.gatica.meow+arch at gmail dot com>
2
3_java_ver=21
4_jdkname="zulu${_java_ver}-fx"
5_zulu_build="${_java_ver}.52.203-ca-fx"
6pkgname="${_jdkname}-bin"
7pkgver="${_java_ver}.0.12.1"
8pkgrel=1
9pkgdesc='Azul Zulu Builds of OpenJDK With OpenJFX are open source, TCK-tested and certified builds of OpenJDK.'
10arch=('x86_64')
11url='https://www.azul.com/downloads/'
12license=('custom')
13depends=(
14 'java-environment-common>=3'
15 'java-runtime-common>=3'
16 'ca-certificates-utils'
17)
18provides=(
19 "java-environment=$_java_ver"
20 "java-environment-openjdk=$_java_ver"
21 "java-runtime=$_java_ver"
22 "java-runtime-openjdk=$_java_ver"
23 "java-runtime-headless=$_java_ver"
24 "java-runtime-headless-openjdk=$_java_ver"
25 "java-openjfx=$_java_ver"
26)
27conflicts=('zulu-21-bin')
28options=('!debug')
29install="$pkgname.install"
30source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_x64.tar.gz")
31sha256sums_x86_64=('6b3f9319490fb265252647676ef74008695b9d3a3725b214c3679cb01dfde87d')
32
33_jvmdir="/usr/lib/jvm/${pkgname}"
34
35package() {
36 cd "$srcdir/zulu${_zulu_build}-jdk${pkgver}-linux_x64"
37 install -dm 755 "${pkgdir}/${_jvmdir}"
38 cp -a . "${pkgdir}/${_jvmdir}/"
39
40 # based on java-openjdk package_jdk-openjdk
41 # https://github.com/archlinux/svntogit-packages/blob/3f6aa8ddd98f728a9b0701288a933d16f0e8bbaf/trunk/PKGBUILD
42
43 # Conf
44 install -dm 755 "${pkgdir}/etc"
45 cp -r conf "${pkgdir}/etc/${pkgname}"
46 rm -r "${pkgdir}/${_jvmdir}/conf"
47 ln -s "/etc/${pkgname}" "${pkgdir}/${_jvmdir}/conf"
48
49 # Legal
50 install -dm 755 "${pkgdir}/usr/share/licenses"
51 cp -r legal "${pkgdir}/usr/share/licenses/${pkgname}"
52 rm -r "${pkgdir}/${_jvmdir}/legal"
53 ln -s "/usr/share/licenses/${pkgname}" "${pkgdir}/${_jvmdir}/legal"
54
55 # Man pages
56 for f in bin/*; do
57 f=$(basename "${f}")
58 _man=man/man1/"${f}.1"
59 test -f "${_man}" && install -Dm 644 "${_man}" "${pkgdir}/usr/share/man/man1/${f}-${pkgname}.1"
60 done
61 rm -r "${pkgdir}/${_jvmdir}/man"
62 ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
63
64 # Link JKS keystore from ca-certificates-utils
65 rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
66 ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
67}
68

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-27 15:48
@@ -2,9 +2,9 @@
_java_ver=21
_jdkname="zulu${_java_ver}-fx"
-_zulu_build="${_java_ver}.50.19-ca-fx"
+_zulu_build="${_java_ver}.52.203-ca-fx"
pkgname="${_jdkname}-bin"
-pkgver="${_java_ver}.0.11"
+pkgver="${_java_ver}.0.12.1"
pkgrel=1
pkgdesc='Azul Zulu Builds of OpenJDK With OpenJFX are open source, TCK-tested and certified builds of OpenJDK.'
arch=('x86_64')
@@ -28,7 +28,7 @@
options=('!debug')
install="$pkgname.install"
source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_x64.tar.gz")
-sha256sums_x86_64=('606f53db982ff27f8b439c873c2367a5cbf90f9fd85578fa8eb07c016ab36d8e')
+sha256sums_x86_64=('6b3f9319490fb265252647676ef74008695b9d3a3725b214c3679cb01dfde87d')
_jvmdir="/usr/lib/jvm/${pkgname}"

Scan history

Scanned at (UTC)SeverityRules
2026-10-27 15:48:05 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-19 18:54:17 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion