Review Results

Comment

The only change in this diff is a version bump in .SRCINFO from 9.7.3 to 9.8.2. There is no evidence here of added code execution, new sources, checksum changes, install-script changes, or other packaging behavior changes. The source URLs remain HTTPS and point to the vendor's download host. Based on the provided hunk alone, this is low risk.

@@ -1,6 +1,6 @@
 pkgbase = nomachine
 	pkgdesc = Remote desktop application
-	pkgver = 9.7.3
+	pkgver = 9.8.2
 	pkgrel = 1
 	url = http://www.nomachine.com
 	install = nomachine.install

Comment

This is a straightforward version bump in .SRCINFO from NoMachine 9.7.3_1 to 9.8.2_1 across all architectures, with matching updated SHA-512 checksums. The source URLs remain on the official NoMachine download domain over HTTPS, and there are no new sources, scripts, build steps, or privilege-related changes in the provided hunk. Based on this diff alone, I do not see a security issue beyond the usual trust in upstream binary releases.

@@ -25,16 +25,16 @@ pkgbase = nomachine
 	conflicts = nxnode
 	conflicts = nxclient
 	options = !strip
-	source_x86_64 = https://download.nomachine.com/download/9.7/Linux/nomachine_9.7.3_1_x86_64.tar.gz
-	sha512sums_x86_64 = dbaccf068a65f33821dfcdcf9d79f3d6f3cb4cec33b8fa66b39fd1e4844f05004713b8652f40619859e35281ca38c9bb02f1fe3c0cc3eaf6bdd082456a8455ff
-	source_i686 = https://download.nomachine.com/download/9.7/Linux/nomachine_9.7.3_1_i686.tar.gz
-	sha512sums_i686 = 06179e61c4fdb814eb65d0b7a198cfc760bfc0ed15be1085dba26187d7c22da428e70772bb117da124b1fc37070ad37cbf8ccd6060863974582cc743db413b8f
-	source_armv7h = https://download.nomachine.com/download/9.7/Arm/nomachine_9.7.3_1_armv7hl.tar.gz
-	sha512sums_armv7h = 159a013e1e78b15d83b86ade49c299005ea84a5705d7e2e2a182103d8b6132c39538c97adbd3cd1fefd58a1f843991361e94b53d256b18e956dfc40d85677e46
-	source_armv8h = https://download.nomachine.com/download/9.7/Arm/nomachine_9.7.3_1_aarch64.tar.gz
-	sha512sums_armv8h = 45201be55ce008ef4bdbf23c8d1f7214f4c4c68a1816c1743e4908c20cb8c663ac0799582979ee8d3acab775eaa04101061bf92619a18d6872481c205328dee7
-	source_aarch64 = https://download.nomachine.com/download/9.7/Arm/nomachine_9.7.3_1_aarch64.tar.gz
-	sha512sums_aarch64 = 45201be55ce008ef4bdbf23c8d1f7214f4c4c68a1816c1743e4908c20cb8c663ac0799582979ee8d3acab775eaa04101061bf92619a18d6872481c205328dee7
-	source_pentium4 = https://download.nomachine.com/download/9.7/Linux/nomachine_9.7.3_1_i686.tar.gz
-	sha512sums_pentium4 = 06179e61c4fdb814eb65d0b7a198cfc760bfc0ed15be1085dba26187d7c22da428e70772bb117da124b1fc37070ad37cbf8ccd6060863974582cc743db413b8f
+	source_x86_64 = https://download.nomachine.com/download/9.7/Linux/nomachine_9.8.2_1_x86_64.tar.gz
+	sha512sums_x86_64 = 2fd993636543e143a94b6b0a67e47cd2ea195b5a9bd989bf64a978151630403911407b88afb4ebb452b8b35d4698429ff890413d9a49f1487cf28e22071f1eeb
+	source_i686 = https://download.nomachine.com/download/9.7/Linux/nomachine_9.8.2_1_i686.tar.gz
+	sha512sums_i686 = 8d3d9b0dff82d43acd55ff5acf31509458c0105c9d839e510e1fc97175cf24db0a5f4cbe15704667dcb5e75f9beaf2c662bbe9861e771afd4948855b45655923
+	source_armv7h = https://download.nomachine.com/download/9.7/Arm/nomachine_9.8.2_1_armv7hl.tar.gz
+	sha512sums_armv7h = b9e21bdb895e12c2f3863fcd0695af0b6d96bc7b7bf85766dc84f1e2c470491cf50364a3e7621a1cf6c3779cc403758a6ff01b1f401e138660e38eae7a911e87
+	source_armv8h = https://download.nomachine.com/download/9.7/Arm/nomachine_9.8.2_1_aarch64.tar.gz
+	sha512sums_armv8h = 88b99ebd5f725e2090d73df07432943fd8df24df69c31eb37887a1fae29dbfd318dca7ae2940ce57d5e2e5b3b3c1b0ae55075131c75708ebb28823e55908373b
+	source_aarch64 = https://download.nomachine.com/download/9.7/Arm/nomachine_9.8.2_1_aarch64.tar.gz
+	sha512sums_aarch64 = 88b99ebd5f725e2090d73df07432943fd8df24df69c31eb37887a1fae29dbfd318dca7ae2940ce57d5e2e5b3b3c1b0ae55075131c75708ebb28823e55908373b
+	source_pentium4 = https://download.nomachine.com/download/9.7/Linux/nomachine_9.8.2_1_i686.tar.gz
+	sha512sums_pentium4 = 8d3d9b0dff82d43acd55ff5acf31509458c0105c9d839e510e1fc97175cf24db0a5f4cbe15704667dcb5e75f9beaf2c662bbe9861e771afd4948855b45655923
 pkgname = nomachine

Comment

The only change in this hunk is a version bump from 9.7.3 to 9.8.2 (and matching _pkgvermain). This does not introduce new build logic, network behavior, privilege changes, or packaging scope changes. The package still fetches the upstream NoMachine tarball over HTTPS from the official domain with pinned checksums, and the reviewed diff itself contains no suspicious code execution or persistence mechanisms. Risk is low because the change is metadata-only, though the package as a whole should still be reviewed separately for its existing install-time behavior.

@@ -11,8 +11,8 @@ _autofirewall=n
 ### END BUILD OPTIONS
 
 pkgname=nomachine
-pkgver=9.7.3
-_pkgvermain=9.7
+pkgver=9.8.2
+_pkgvermain=9.8
 _pkgrel_i686=1
 _pkgrel_x86_64=1
 _pkgrel_armv7h=1

Comment

The change only updates architecture-specific SHA-512 checksums for the existing upstream tarball sources. Source URLs remain HTTPS and point to the official NoMachine download host, with no new build-time execution, install-script, or packaging behavior introduced. This is a routine integrity hash refresh and does not by itself indicate a supply-chain or privilege-escalation issue.

@@ -29,12 +29,12 @@ options=('!strip')
 conflicts=('nxmanager' 'nxwebplayer' 'nxserver' 'nxnode' 'nxclient')
 depends=('bash' 'openssh' 'nawk' 'polkit' 'rpm-tools' 'dkms')
 optdepends=('xorg-xauth: allows logging into a headless machine')
-sha512sums_x86_64=('dbaccf068a65f33821dfcdcf9d79f3d6f3cb4cec33b8fa66b39fd1e4844f05004713b8652f40619859e35281ca38c9bb02f1fe3c0cc3eaf6bdd082456a8455ff')
-sha512sums_i686=('06179e61c4fdb814eb65d0b7a198cfc760bfc0ed15be1085dba26187d7c22da428e70772bb117da124b1fc37070ad37cbf8ccd6060863974582cc743db413b8f')
-sha512sums_armv7h=('159a013e1e78b15d83b86ade49c299005ea84a5705d7e2e2a182103d8b6132c39538c97adbd3cd1fefd58a1f843991361e94b53d256b18e956dfc40d85677e46')
-sha512sums_armv8h=('45201be55ce008ef4bdbf23c8d1f7214f4c4c68a1816c1743e4908c20cb8c663ac0799582979ee8d3acab775eaa04101061bf92619a18d6872481c205328dee7')
-sha512sums_aarch64=('45201be55ce008ef4bdbf23c8d1f7214f4c4c68a1816c1743e4908c20cb8c663ac0799582979ee8d3acab775eaa04101061bf92619a18d6872481c205328dee7')
-sha512sums_pentium4=('06179e61c4fdb814eb65d0b7a198cfc760bfc0ed15be1085dba26187d7c22da428e70772bb117da124b1fc37070ad37cbf8ccd6060863974582cc743db413b8f')
+sha512sums_x86_64=('2fd993636543e143a94b6b0a67e47cd2ea195b5a9bd989bf64a978151630403911407b88afb4ebb452b8b35d4698429ff890413d9a49f1487cf28e22071f1eeb')
+sha512sums_i686=('8d3d9b0dff82d43acd55ff5acf31509458c0105c9d839e510e1fc97175cf24db0a5f4cbe15704667dcb5e75f9beaf2c662bbe9861e771afd4948855b45655923')
+sha512sums_armv7h=('b9e21bdb895e12c2f3863fcd0695af0b6d96bc7b7bf85766dc84f1e2c470491cf50364a3e7621a1cf6c3779cc403758a6ff01b1f401e138660e38eae7a911e87')
+sha512sums_armv8h=('88b99ebd5f725e2090d73df07432943fd8df24df69c31eb37887a1fae29dbfd318dca7ae2940ce57d5e2e5b3b3c1b0ae55075131c75708ebb28823e55908373b')
+sha512sums_aarch64=('88b99ebd5f725e2090d73df07432943fd8df24df69c31eb37887a1fae29dbfd318dca7ae2940ce57d5e2e5b3b3c1b0ae55075131c75708ebb28823e55908373b')
+sha512sums_pentium4=('8d3d9b0dff82d43acd55ff5acf31509458c0105c9d839e510e1fc97175cf24db0a5f4cbe15704667dcb5e75f9beaf2c662bbe9861e771afd4948855b45655923')
 source_x86_64=("https://download.nomachine.com/download/${_pkgvermain}/Linux/${pkgname}_${pkgver}_${_pkgrel_x86_64}_x86_64.tar.gz")
 source_i686=("https://download.nomachine.com/download/${_pkgvermain}/Linux/${pkgname}_${pkgver}_${_pkgrel_i686}_i686.tar.gz")
 source_armv7h=("https://download.nomachine.com/download/${_pkgvermain}/Arm/${pkgname}_${pkgver}_${_pkgrel_armv7h}_armv7hl.tar.gz")