Review Results

Comment

The reviewed change is a simple version bump in .SRCINFO from 3.10 to 3.11 with no accompanying changes to sources, build logic, install scripts, or package metadata beyond pkgver. On its face this does not introduce any security-relevant behavior such as new downloads, execution, privilege changes, or persistence mechanisms. Based on the provided diff alone, risk is low.

@@ -1,6 +1,6 @@
 pkgbase = libselinux
 	pkgdesc = SELinux library and simple utilities
-	pkgver = 3.10
+	pkgver = 3.11
 	pkgrel = 1
 	url = https://github.com/SELinuxProject/selinux
 	arch = i686

Comment

The .SRCINFO change is a routine upstream version bump from 3.10 to 3.11: source URLs remain on the official SELinuxProject GitHub release page over HTTPS, the checksum is updated accordingly, and the only metadata change is the provided virtual package version. No new build steps, scripts, patches, or privilege/persistence mechanisms are introduced in this diff. Risk is therefore minimal.

@@ -17,21 +17,21 @@ pkgbase = libselinux
 	makedepends = ruby
 	makedepends = xz
 	makedepends = swig
-	depends = libsepol>=3.10
+	depends = libsepol>=3.11
 	depends = pcre2
 	optdepends = python: python bindings
 	optdepends = ruby: ruby bindings
-	provides = selinux-usr-libselinux=3.10-1
+	provides = selinux-usr-libselinux=3.11-1
 	conflicts = selinux-usr-libselinux
-	source = https://github.com/SELinuxProject/selinux/releases/download/3.10/libselinux-3.10.tar.gz
-	source = https://github.com/SELinuxProject/selinux/releases/download/3.10/libselinux-3.10.tar.gz.asc
+	source = https://github.com/SELinuxProject/selinux/releases/download/3.11/libselinux-3.11.tar.gz
+	source = https://github.com/SELinuxProject/selinux/releases/download/3.11/libselinux-3.11.tar.gz.asc
 	source = libselinux.tmpfiles.d
 	validpgpkeys = 63191CE94183098689CAB8DB7EF137EC935B0EAF
 	validpgpkeys = 68D21823342A13683AEB3E4EFB4C685B5DC1C13E
-	sha256sums = 1ef216c5b56fb7e0a51cd2909787a175a17ee391e0467894807873539ebe766b
+	sha256sums = 73d419c6e20e874adaa4019372cbd097eecf4d276e13f27ec5e67d35c0bd203c
 	sha256sums = SKIP
 	sha256sums = afe23890fb2e12e6756e5d81bad3c3da33f38a95d072731c0422fbeb0b1fa1fc
 
 pkgname = libselinux
-	provides = selinux-usr-libselinux=3.10-1
+	provides = selinux-usr-libselinux=3.11-1
 	provides = libselinux.so

Comment

The change is a straightforward version bump for libselinux from 3.10 to 3.11, with the corresponding dependency floor and source checksum updated. The source remains the official upstream GitHub release over HTTPS, and there are no new build-time downloads, scripts, patches, or packaging changes that would introduce persistence or privilege-escalation risk. No suspicious metadata changes are present in this diff.

@@ -9,7 +9,7 @@
 # If you want to help keep it up to date, please open a Pull Request there.
 
 pkgname=libselinux
-pkgver=3.10
+pkgver=3.11
 pkgrel=1
 pkgdesc="SELinux library and simple utilities"
 arch=('i686' 'x86_64' 'armv6h' 'aarch64')

Comment

The change is a straightforward dependency version bump in PKGBUILD from libsepol>=3.10 to libsepol>=3.11. It does not introduce new sources, build steps, scripts, network access, privilege changes, or packaging behavior. No security-relevant red flags are present in the provided diff hunk.

@@ -17,7 +17,7 @@ url='https://github.com/SELinuxProject/selinux'
 license=('libselinux-1.0')
 groups=('selinux')
 makedepends=('pkgconf' 'python' 'python-build' 'python-pip' 'python-setuptools' 'ruby' 'xz' 'swig')
-depends=('libsepol>=3.10' 'pcre2')
+depends=('libsepol>=3.11' 'pcre2')
 optdepends=('python: python bindings'
             'ruby: ruby bindings')
 conflicts=("selinux-usr-${pkgname}")

Comment

The change is a routine version bump from 3.10 to 3.11 with the corresponding dependency and source checksum update. The source remains an HTTPS GitHub release tarball, and there are no new build-time downloads, scripts, patches, privilege changes, or packaging behavior changes in the diff. Based on the provided hunk, this looks like a normal upstream update with no obvious security red flags.

@@ -28,7 +28,7 @@ validpgpkeys=(
 )
 source=("https://github.com/SELinuxProject/selinux/releases/download/${pkgver}/${pkgname}-${pkgver}.tar.gz"{,.asc}
         "libselinux.tmpfiles.d")
-sha256sums=('1ef216c5b56fb7e0a51cd2909787a175a17ee391e0467894807873539ebe766b'
+sha256sums=('73d419c6e20e874adaa4019372cbd097eecf4d276e13f27ec5e67d35c0bd203c'
             'SKIP'
             'afe23890fb2e12e6756e5d81bad3c3da33f38a95d072731c0422fbeb0b1fa1fc')