Review Results

Comment

The change only bumps pkgver in .SRCINFO from 7.2.pf5 to 7.2.pf6. No sources, build logic, install scripts, or package metadata affecting trust boundaries changed in the provided diff. This is a routine version update with no security-relevant indicators in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = linux-pf
 	pkgdesc = pf-kernel
-	pkgver = 7.2.pf5
+	pkgver = 7.2.pf6
 	pkgrel = 1
 	url = https://pfkernel.natalenko.name
 	arch = x86_64

Comment

The change only updates the upstream kernel tarball URL hash in .SRCINFO and its corresponding b2sum. The source remains an HTTPS Codeberg archive from the same upstream project, with no new build steps, scripts, or privilege-related artifacts introduced. This is a routine version bump in metadata and does not by itself indicate a security issue.

@@ -26,10 +26,10 @@ pkgbase = linux-pf
 	makedepends = zstd
 	options = !debug
 	options = !strip
-	source = https://codeberg.org/pf-kernel/linux/archive/5691a332631db22e3defcdf34358014dd823ef2b.tar.gz
+	source = https://codeberg.org/pf-kernel/linux/archive/21fd5a3cfe1c05f54a18bb24e557300638833634.tar.gz
 	source = config
 	b2sums = SKIP
-	b2sums = 1259eb746fca2c6079f2aa117dfc5149a8835627df6a58da471aab41df957c25246cf2d186e2c09d6e5dd6391e075c59e7e5e9e5d87124a9f06915a8211b9daf
+	b2sums = b5656a9f5d33440be055c38ccb75e26e2ed64b199c5d9d180024ba3396081b8d232f6f2b93aa24c9f78c568fe5717b1820678ac2100faef386845cbdd17ebc13
 
 pkgname = linux-pf
 	pkgdesc = The pf-kernel and modules

Comment

The change only bumps the kernel source revision and package version from pf5 to pf6. No new sources, scripts, install hooks, or packaging logic were introduced in the shown hunk, and there are no obvious integrity or privilege-escalation concerns in this diff alone. I did not find evidence of malicious behavior in the reviewed change.

@@ -3,8 +3,8 @@
 pkgbase="linux-pf"
 _suffix=""
 pkgname=(${pkgbase}${_suffix} ${pkgbase}-headers${_suffix})
-_rev=5691a332631db22e3defcdf34358014dd823ef2b
-pkgver=7.2.pf5
+_rev=21fd5a3cfe1c05f54a18bb24e557300638833634
+pkgver=7.2.pf6
 pkgrel=1
 pkgdesc="pf-kernel"
 arch=(x86_64)

Comment

The change only updates the B2 checksum for the upstream kernel tarball source from Codeberg; the source URL remains HTTPS and there are no new build steps, scripts, or packaging changes. This is a routine integrity-pin update, with no evidence of malicious behavior or supply-chain risk in the diff itself.

@@ -15,7 +15,7 @@ options=(!debug !strip)
 source=(https://codeberg.org/pf-kernel/linux/archive/${_rev}.tar.gz
 		config)
 b2sums=(SKIP
-		'1259eb746fca2c6079f2aa117dfc5149a8835627df6a58da471aab41df957c25246cf2d186e2c09d6e5dd6391e075c59e7e5e9e5d87124a9f06915a8211b9daf')
+		'b5656a9f5d33440be055c38ccb75e26e2ed64b199c5d9d180024ba3396081b8d232f6f2b93aa24c9f78c568fe5717b1820678ac2100faef386845cbdd17ebc13')
 
 export KBUILD_BUILD_HOST=archlinux
 export KBUILD_BUILD_USER=${pkgbase}

Comment

The change is a one-line version bump in the generated kernel config comment from pf5 to pf6. No build logic, sources, scripts, permissions, or runtime behavior are altered, and there are no signs of added network access, privilege escalation, persistence, or integrity issues in this diff hunk.

@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 7.2.0-pf5 Kernel Configuration
+# Linux/x86 7.2.0-pf6 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (GCC) 16.2.1 20260810"
 CONFIG_CC_IS_GCC=y