zulu8-fx-bin

MEDIUM

maintainer ThiccFurLizzy 0 votes scanned 2026-10-27 15:48:05.092314

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:33 source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_x64.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: ThiccFurLizzy <lizbeth.gatica.meow+arch at gmail dot com>
    
      2
    
      3_java_ver=8
    
      4_jdkname="zulu${_java_ver}-fx"
    
      5_zulu_build="${_java_ver}.96.0.205-ca-fx"
    
      6pkgname="${_jdkname}-bin"
    
      7pkgver="${_java_ver}.0.504"
    
      8pkgrel=1
    
      9pkgdesc='Azul Zulu Builds of OpenJDK With OpenJFX are open source, TCK-tested and certified builds of OpenJDK.'
    
      10arch=('x86_64')
    
      11url='https://www.azul.com/downloads/'
    
      12license=('custom')
    
      13depends=(
    
      14  'java-environment-common' 'java-runtime-common' 'ca-certificates-utils'
    
      15  # not 100% sure if all of these dependencies are needed
    
      16  # dependencies from jre8-openjdk-headless
    
      17  'nss'
    
      18  # dependencies from jre8-openjdk
    
      19  'xdg-utils' 'hicolor-icon-theme'
    
      20)
    
      21provides=(
    
      22  "java-environment=$_java_ver"
    
      23  "java-environment-openjdk=$_java_ver"
    
      24  "java-runtime=$_java_ver"
    
      25  "java-runtime-openjdk=$_java_ver"
    
      26  "java-runtime-headless=$_java_ver"
    
      27  "java-runtime-headless-openjdk=$_java_ver"
    
      28  "java-openjfx=$_java_ver"
    
      29)
    
      30conflicts=('zulu-8-bin')
    
      31options=('!debug')
    
      32install="$pkgname.install"
    
      33source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_x64.tar.gz")
    
      34sha256sums_x86_64=('c5dcd67eac70e56154e06fa1dca88d27b5a66114835303155f3388e130bb430a')
    
      35
    
      36_jvmdir="/usr/lib/jvm/${pkgname}"
    
      37
    
      38# Upstream config files that should go to etc and get backup
    
      39_conf_files=(
    
      40  calendars.properties
    
      41  content-types.properties
    
      42  flavormap.properties
    
      43  images/cursors/cursors.properties
    
      44  logging.properties
    
      45  management/jmxremote.access
    
      46  management/jmxremote.password
    
      47  management/management.properties
    
      48  management/snmp.acl
    
      49  net.properties
    
      50  psfont.properties.ja
    
      51  psfontj2d.properties
    
      52  security/java.policy
    
      53  security/java.security
    
      54  sound.properties
    
      55)
    
      56
    
      57package() {
    
      58  _conf_files+=('amd64/jvm.cfg')
    
      59  cd "$srcdir/zulu${_zulu_build}-jdk${pkgver}-linux_x64"
    
      60  install -dm 755 "${pkgdir}/${_jvmdir}"
    
      61  cp -a . "${pkgdir}/${_jvmdir}/"
    
      62
    
      63  # copied from java8-openjdk
    
      64
    
      65  # Set config files
    
      66  mv "${pkgdir}${_jvmdir}"/jre/lib/management/jmxremote.password{.template,}
    
      67  mv "${pkgdir}${_jvmdir}"/jre/lib/management/snmp.acl{.template,}
    
      68
    
      69  # Conf
    
      70  install -dm 755 "${pkgdir}/etc/${pkgname}"
    
      71  for f in "${_conf_files[@]}"; do
    
      72    _file="${_jvmdir}/jre/lib/$f"
    
      73    install -D -m 644 "${pkgdir}${_file}" "${pkgdir}/etc/${pkgname}/$f"
    
      74    ln -sf "/etc/${pkgname}/$f" "${pkgdir}${_file}"
    
      75  done
    
      76
    
      77  # Install license
    
      78  install -d -m 755 "${pkgdir}/usr/share/licenses/${pkgbase}/"
    
      79  install -m 644 ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README "${pkgdir}/usr/share/licenses/${pkgbase}"
    
      80
    
      81  # Man pages
    
      82  for f in man/man1/* man/ja/man1/*; do
    
      83    install -Dm 644 "${f}" "${pkgdir}/usr/share/${f/\.1/-zulu-8.1}"
    
      84  done
    
      85  rm -rf "${pkgdir}/${_jvmdir}/man"
    
      86  ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
    
      87
    
      88  # Link JKS keystore from ca-certificates-utils
    
      89  rm -f "${pkgdir}${_jvmdir}/jre/lib/security/cacerts"
    
      90  ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}${_jvmdir}/jre/lib/security/cacerts"
    
      91}
    
      92

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-27 15:48
@@ -2,9 +2,9 @@
 
 _java_ver=8
 _jdkname="zulu${_java_ver}-fx"
-_zulu_build="${_java_ver}.94.0.17-ca-fx"
+_zulu_build="${_java_ver}.96.0.205-ca-fx"
 pkgname="${_jdkname}-bin"
-pkgver="${_java_ver}.0.492"
+pkgver="${_java_ver}.0.504"
 pkgrel=1
 pkgdesc='Azul Zulu Builds of OpenJDK With OpenJFX are open source, TCK-tested and certified builds of OpenJDK.'
 arch=('x86_64')
@@ -31,7 +31,7 @@
 options=('!debug')
 install="$pkgname.install"
 source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jdk${pkgver}-linux_x64.tar.gz")
-sha256sums_x86_64=('ff62c239135bdb15cfb90664360b0deeb8d953f156f63f1299b39edba8ef75e5')
+sha256sums_x86_64=('c5dcd67eac70e56154e06fa1dca88d27b5a66114835303155f3388e130bb430a')
 
 _jvmdir="/usr/lib/jvm/${pkgname}"
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 15:48:05	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-19 18:54:17	Clean	2
2026-06-18 16:11:54	Medium	1