Review Results

Comment

The only change in this .SRCINFO hunk is a routine version bump from 7.1.5.lqx1-3 to 7.1.6.lqx1-1. No sources, checksums, build steps, install scripts, or packaging metadata affecting execution/persistence were modified in the reviewed diff. Based on this hunk alone, there are no security red flags.

@@ -1,7 +1,7 @@
 pkgbase = linux-lqx
 	pkgdesc = Linux Liquorix
-	pkgver = 7.1.5.lqx1
-	pkgrel = 3
+	pkgver = 7.1.6.lqx1
+	pkgrel = 1
 	url = https://liquorix.net/
 	arch = x86_64
 	license = GPL-2.0-only

Comment

The change only bumps the package version/release and updates the liquorix-package source tarball plus its checksum in .SRCINFO. The source URLs remain HTTPS and point to the expected upstream GitHub repository and kernel.org, with no new build-time downloads, scripts, privilege changes, or other suspicious artifacts introduced by this diff. No security red flags are evident from the metadata-only update.

@@ -23,12 +23,12 @@ pkgbase = linux-lqx
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.tar.xz
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.tar.sign
-	source = https://github.com/damentz/liquorix-package/archive/7.1-6.tar.gz
+	source = https://github.com/damentz/liquorix-package/archive/7.1-8.tar.gz
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha512sums = d4d9c45261813559341c67ea53d4a47f5a04d1ad15e3c2b8222a09b5483380d2bfd31b8c675e144db2eb91f560d6cb28f66187a5ea4f24f6dfb82a4ad48064cc
 	sha512sums = SKIP
-	sha512sums = 53c6d7509b7d851d1713b01a7650b74993df6828c6c70fa5f685c12cd69f5d8cbaa193578a4cd30b5eef7f560b17bacd76977be7ff0b06f3262ad168dc701885
+	sha512sums = faec5aa53380820ed1cee3ea90cffbb071284cbd8a2069b41eb356f1c94b7e50355f26ae268ec0d50c3edc444fe3491e8c77340b74b083abcadddfdd51af9d01
 
 pkgname = linux-lqx
 	pkgdesc = The Linux Liquorix kernel and modules

Comment

The change is a routine version bump for the linux-lqx package: it updates the Liquorix patch release number, pkgver/pkgrel, and the corresponding source checksum. I do not see any new sources, network fetches, privilege changes, install-script behavior, or other packaging red flags in this diff. The URL remains the official Liquorix site and the update appears consistent with a normal upstream refresh.

@@ -54,11 +54,11 @@ _htmldocs_enable=
 _major=7.1
 _srcname=linux-${_major}
 _lqxpatchname=liquorix-package
-_lqxpatchrel=6
+_lqxpatchrel=8
 _lqxpatchver=${_lqxpatchname}-${_major}-${_lqxpatchrel}
 pkgbase=linux-lqx
-pkgver=7.1.5.lqx1
-pkgrel=3
+pkgver=7.1.6.lqx1
+pkgrel=1
 pkgdesc='Linux Liquorix'
 url='https://liquorix.net/'
 arch=(x86_64)

Comment

The change is a routine version bump in PKGBUILD: it updates the Liquorix patch release/version and refreshes the sha512 checksum for the corresponding source artifact. There are no new sources, no added build-time network fetches, no script execution changes, and no packaging/persistence red flags in the diff. Based on the provided hunk alone, this looks like a normal integrity update with low security risk.

@@ -106,7 +106,7 @@ validpgpkeys=(
 )
 sha512sums=('d4d9c45261813559341c67ea53d4a47f5a04d1ad15e3c2b8222a09b5483380d2bfd31b8c675e144db2eb91f560d6cb28f66187a5ea4f24f6dfb82a4ad48064cc'
             'SKIP'
-            '53c6d7509b7d851d1713b01a7650b74993df6828c6c70fa5f685c12cd69f5d8cbaa193578a4cd30b5eef7f560b17bacd76977be7ff0b06f3262ad168dc701885')
+            'faec5aa53380820ed1cee3ea90cffbb071284cbd8a2069b41eb356f1c94b7e50355f26ae268ec0d50c3edc444fe3491e8c77340b74b083abcadddfdd51af9d01')