Review Results

Comment

The change only bumps the kernel package version from 7.2.pf3 to 7.2.pf4, resets pkgrel, and updates the source tarball URL/checksum to a new upstream Codeberg archive commit. The source remains HTTPS and pinned to a specific commit archive, with no new scripts, install hooks, binaries, or packaging logic changes. Based on the diff shown, there are no security red flags beyond the normal trust in upstream kernel source.

@@ -1,7 +1,7 @@
 pkgbase = linux-pf
 	pkgdesc = pf-kernel
-	pkgver = 7.2.pf3
-	pkgrel = 2
+	pkgver = 7.2.pf4
+	pkgrel = 1
 	url = https://pfkernel.natalenko.name
 	arch = x86_64
 	license = GPL-2.0-only

Comment

The change only updates .SRCINFO metadata to point at a new upstream kernel tarball revision and matching b2sum, along with pkgver/pkgrel bumps. The source remains an HTTPS Codeberg archive from the project’s upstream repository, with no new build-time execution, install-script, or packaging behavior introduced in this diff. I did not find any integrity red flags or suspicious sources in the reviewed hunk.

@@ -26,10 +26,10 @@ pkgbase = linux-pf
 	makedepends = zstd
 	options = !debug
 	options = !strip
-	source = https://codeberg.org/pf-kernel/linux/archive/753c62f6eb1312a230397329d90061c1bac1d98b.tar.gz
+	source = https://codeberg.org/pf-kernel/linux/archive/915cb175bbf2aab6ea0005b409c2cf67c875c543.tar.gz
 	source = config
 	b2sums = SKIP
-	b2sums = af0be93b85eb495a44ed2a5cdd7453314a0386b267dd050b86a77907615222ba527844dd318d6ac0ae5a1e4d4aee9034948a40bff833bd8646bcba646fdf3b6e
+	b2sums = f1e2d8e13faa5aac49eede457c432c100545ba0005e6b5f7d39003f9ca66db0c2a88e9a41861208f8fe114de8af300346c589a1ff8a463947a3956fbb98b9849
 
 pkgname = linux-pf
 	pkgdesc = The pf-kernel and modules

Comment

The change is a routine upstream kernel point-release bump: it updates the pinned source commit, package version, and the corresponding b2 checksum for the tarball fetched from the project’s official Codeberg archive. The source remains HTTPS and pinned to a specific commit, with no new build-time network access, scripts, privilege changes, or packaging behavior changes. No security red flags are introduced by this diff alone.

@@ -3,9 +3,9 @@
 pkgbase="linux-pf"
 _suffix=""
 pkgname=(${pkgbase}${_suffix} ${pkgbase}-headers${_suffix})
-_rev=753c62f6eb1312a230397329d90061c1bac1d98b
-pkgver=7.2.pf3
-pkgrel=2
+_rev=915cb175bbf2aab6ea0005b409c2cf67c875c543
+pkgver=7.2.pf4
+pkgrel=1
 pkgdesc="pf-kernel"
 arch=(x86_64)
 url=https://pfkernel.natalenko.name

Comment

The change is a routine upstream version bump for a kernel package: it updates the pinned Codeberg commit, pkgver/pkgrel, and the corresponding b2 checksum for the source tarball. The source remains HTTPS and pinned to a specific commit, with no new build-time downloads, scripts, privilege changes, or packaging logic changes. No security red flags are introduced by this diff alone.

@@ -15,7 +15,7 @@ options=(!debug !strip)
 source=(https://codeberg.org/pf-kernel/linux/archive/${_rev}.tar.gz
 		config)
 b2sums=(SKIP
-		'af0be93b85eb495a44ed2a5cdd7453314a0386b267dd050b86a77907615222ba527844dd318d6ac0ae5a1e4d4aee9034948a40bff833bd8646bcba646fdf3b6e')
+		'f1e2d8e13faa5aac49eede457c432c100545ba0005e6b5f7d39003f9ca66db0c2a88e9a41861208f8fe114de8af300346c589a1ff8a463947a3956fbb98b9849')
 
 export KBUILD_BUILD_HOST=archlinux
 export KBUILD_BUILD_USER=${pkgbase}

Comment

The change only bumps the kernel config banner/version metadata from pf3 to pf4 and updates tool version strings (gcc/as/ld). No functional kernel options, build scripts, install scripts, or packaging behavior changed. I see no security-relevant impact in this diff hunk.

@@ -1,15 +1,15 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 7.2.0-pf3 Kernel Configuration
+# Linux/x86 7.2.0-pf4 Kernel Configuration
 #
-CONFIG_CC_VERSION_TEXT="gcc (GCC) 16.1.1 20260725"
+CONFIG_CC_VERSION_TEXT="gcc (GCC) 16.1.1 20260728"
 CONFIG_CC_IS_GCC=y
 CONFIG_GCC_VERSION=160101
 CONFIG_CLANG_VERSION=0
 CONFIG_AS_IS_GNU=y
-CONFIG_AS_VERSION=24601
+CONFIG_AS_VERSION=24700
 CONFIG_LD_IS_BFD=y
-CONFIG_LD_VERSION=24601
+CONFIG_LD_VERSION=24700
 CONFIG_LLD_VERSION=0
 CONFIG_RUSTC_VERSION=109701
 CONFIG_RUST_IS_AVAILABLE=y

Comment

This change only adjusts a kernel Kconfig default for EROFS compression streams from the upstream default to 16. It does not introduce new code execution, privilege changes, network access, persistence, or packaging/install-script behavior. The impact is limited to kernel filesystem behavior/performance and is not a security concern in the package build artifacts reviewed here.

@@ -11467,6 +11467,7 @@ CONFIG_EROFS_FS_SECURITY=y
 CONFIG_EROFS_FS_BACKED_BY_FILE=y
 CONFIG_EROFS_FS_ZIP=y
 CONFIG_EROFS_FS_ZIP_LZMA=y
+CONFIG_EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS=16
 CONFIG_EROFS_FS_ZIP_DEFLATE=y
 CONFIG_EROFS_FS_ZIP_ZSTD=y
 CONFIG_EROFS_FS_ZIP_ACCEL=y