Review Results

Comment

The change is a simple version bump in .SRCINFO from 7.1.9 to 7.1.10 with no accompanying changes to sources, build logic, install scripts, or package metadata beyond pkgver. The only notable issue visible in the provided hunk is that the upstream URL remains HTTP rather than HTTPS, but this is pre-existing and unchanged by this commit. No new supply-chain, persistence, or privilege-escalation risk is introduced by this diff alone.

@@ -1,6 +1,6 @@
 pkgbase = linux-xanmod
 	pkgdesc = Linux Xanmod - Stable Mainline [MAIN]
-	pkgver = 7.1.9
+	pkgver = 7.1.10
 	pkgrel = 1
 	url = http://www.xanmod.org/
 	arch = x86_64

Comment

The change is a straightforward version bump of the kernel patch source from 7.1.9-xanmod1 to 7.1.10-xanmod1, with the corresponding SHA-256 updated. The source remains an HTTPS URL on the same upstream-hosted SourceForge project, and there are no new build steps, scripts, or privilege-related changes in this diff. No additional integrity or persistence concerns are introduced by this metadata-only update.

@@ -20,13 +20,13 @@ pkgbase = linux-xanmod
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.tar.xz
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.tar.sign
-	source = patch-7.1.9-xanmod1.xz::https://sourceforge.net/projects/xanmod/files/releases/main/7.1.9-xanmod1/patch-7.1.9-xanmod1.xz/download
+	source = patch-7.1.10-xanmod1.xz::https://sourceforge.net/projects/xanmod/files/releases/main/7.1.10-xanmod1/patch-7.1.10-xanmod1.xz/download
 	source = choose-gcc-optimization.sh
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha256sums = 691f44797fbe790dc8a321604c927087526ad27b6d649925d60f8eed0a2564a0
 	sha256sums = SKIP
-	sha256sums = 2d440d7bf63cfc194ea5ca84b9d5635dcfe5c63626fdaaf021f13b77f55470eb
+	sha256sums = 0fdab87e24d5daf7c877e1e9422450c92e5a60301f47f3ca0550e8818d9562d2
 	sha256sums = f4acc1760990c54348a029315d1505ccb7c7270cd70a9aeb728bffcced51e767
 
 pkgname = linux-xanmod

Comment

This change only bumps pkgver from 7.1.9 to 7.1.10 in PKGBUILD. No source URLs, build steps, install scripts, permissions, or package metadata beyond the version string are altered. I see no security-relevant behavior change in the provided diff.

@@ -73,7 +73,7 @@ fi
 
 pkgbase=linux-xanmod
 _major=7.1
-pkgver=${_major}.9
+pkgver=${_major}.10
 _branch=7.x
 xanmod=1
 _revision=

Comment

The change only bumps the package version from 7.1.9 to 7.1.10 and updates the corresponding SHA-256 checksum for the XanMod patch source. The source list still uses HTTPS, the patch is still fetched from the expected SourceForge XanMod release URL, and there are no new build commands, privilege changes, or install-time behaviors introduced by this diff. No security-relevant regression is evident from the checksum/version update alone.

@@ -120,7 +120,7 @@ done
 
 sha256sums=('691f44797fbe790dc8a321604c927087526ad27b6d649925d60f8eed0a2564a0'
             'SKIP'
-            '2d440d7bf63cfc194ea5ca84b9d5635dcfe5c63626fdaaf021f13b77f55470eb'
+            '0fdab87e24d5daf7c877e1e9422450c92e5a60301f47f3ca0550e8818d9562d2'
             'f4acc1760990c54348a029315d1505ccb7c7270cd70a9aeb728bffcced51e767')
 
 export KBUILD_BUILD_HOST=${KBUILD_BUILD_HOST:-archlinux}