Review Results

Comment

The change only bumps pkgver in .SRCINFO from 4.5.10 to 4.5.14. .SRCINFO is metadata used by AUR helpers and does not itself introduce executable code, install scripts, or dependency changes. No suspicious sources, build steps, or privilege-related artifacts are present in the provided diff hunk. Based on this hunk alone, there is no security concern.

@@ -1,6 +1,6 @@
 pkgbase = nagios
 	pkgdesc = Nagios is an open source host, service and network monitoring program.
-	pkgver = 4.5.10
+	pkgver = 4.5.14
 	pkgrel = 1
 	url = http://www.nagios.org
 	install = nagios.install

Comment

The change only updates .SRCINFO metadata to point to a newer upstream release tarball and refreshes the recorded checksums. The source remains an HTTPS GitHub release URL from the upstream project, with no new build steps, scripts, or privilege-related artifacts introduced in this diff. Based on the provided hunk alone, there are no obvious supply-chain or persistence concerns.

@@ -19,11 +19,11 @@ pkgbase = nagios
 	optdepends = php
 	optdepends = php-fpm
 	optdepends = fcgiwrap
-	source = https://github.com/NagiosEnterprises/nagioscore/releases/download/nagios-4.5.10/nagios-4.5.10.tar.gz
+	source = https://github.com/NagiosEnterprises/nagioscore/releases/download/nagios-4.5.14/nagios-4.5.14.tar.gz
 	source = nagios.install
-	md5sums = fb433b195f3f5d4c1085ae39e54e349f
+	md5sums = fbed55b626ef6fd4aa5469e923445317
 	md5sums = e11fa7de430ed858269f82e179fc87ca
-	sha1sums = 7537db9348f11c77160677fc5fd5df4e4bb5e4dc
+	sha1sums = 6dab1cec4022f0462ca85b57206300f2de5145a5
 	sha1sums = 04008cee208226e60b099550bd9ec7dc78cb1457
 
 pkgname = nagios