Review Results

Comment

The change is a straightforward version bump in .SRCINFO from 3.10 to 3.11, updating the upstream release tarball URL, checksum, and virtual provides accordingly. The source remains HTTPS from the official SELinuxProject GitHub release page, and there are no new build-time commands, scripts, patches, or privilege-related artifacts introduced by this diff. No security red flags are evident in the provided hunk.

@@ -1,6 +1,6 @@
 pkgbase = libsepol
 	pkgdesc = SELinux binary policy manipulation library
-	pkgver = 3.10
+	pkgver = 3.11
 	pkgrel = 1
 	url = https://github.com/SELinuxProject/selinux
 	arch = i686

Comment

The change is a straightforward version bump in .SRCINFO: source URLs move from the upstream SELinuxProject GitHub release 3.10 to 3.11, the checksum is updated accordingly, and the virtual provide version is adjusted. Sources remain HTTPS and point to the official upstream release artifacts, with existing PGP verification preserved. No new build steps, scripts, binaries, or privilege/persistence mechanisms are introduced in this diff.

@@ -11,17 +11,17 @@ pkgbase = libsepol
 	license = LGPL2.1
 	makedepends = flex
 	depends = glibc
-	provides = selinux-usr-libsepol=3.10-1
+	provides = selinux-usr-libsepol=3.11-1
 	conflicts = selinux-usr-libsepol
 	options = staticlibs
 	options = !lto
-	source = https://github.com/SELinuxProject/selinux/releases/download/3.10/libsepol-3.10.tar.gz
-	source = https://github.com/SELinuxProject/selinux/releases/download/3.10/libsepol-3.10.tar.gz.asc
+	source = https://github.com/SELinuxProject/selinux/releases/download/3.11/libsepol-3.11.tar.gz
+	source = https://github.com/SELinuxProject/selinux/releases/download/3.11/libsepol-3.11.tar.gz.asc
 	validpgpkeys = 63191CE94183098689CAB8DB7EF137EC935B0EAF
 	validpgpkeys = 68D21823342A13683AEB3E4EFB4C685B5DC1C13E
-	sha256sums = d555586797fa9f38344496d2a7ec1147b6caaf3fcc44c42d8d5173edd7a79a71
+	sha256sums = 79f3d2c88f44b7eb5cf54d9792e03232297e17f97a179163f2750099a00f164d
 	sha256sums = SKIP
 
 pkgname = libsepol
-	provides = selinux-usr-libsepol=3.10-1
+	provides = selinux-usr-libsepol=3.11-1
 	provides = libsepol.so

Comment

The change is a straightforward version bump in PKGBUILD from libsepol 3.10 to 3.11, with the source URL still pointing to the official SELinuxProject GitHub release tarball over HTTPS and the checksum updated accordingly. No new build steps, scripts, patches, or privilege/network red flags were introduced in this diff. Risk is minimal.

@@ -7,7 +7,7 @@
 # If you want to help keep it up to date, please open a Pull Request there.
 
 pkgname=libsepol
-pkgver=3.10
+pkgver=3.11
 pkgrel=1
 pkgdesc="SELinux binary policy manipulation library"
 arch=('i686' 'x86_64' 'armv6h' 'aarch64')

Comment

The change is a straightforward version bump from 3.10 to 3.11 with the corresponding source tarball checksum update. The source remains an HTTPS GitHub release artifact, there are no new build-time downloads, scripts, patches, privilege changes, or packaging behavior changes in the reviewed hunk. No security concerns are evident from this diff alone.

@@ -25,7 +25,7 @@ validpgpkeys=(
   '68D21823342A13683AEB3E4EFB4C685B5DC1C13E'  # Petr Lautrbach <lautrbach@redhat.com>
 )
 source=("https://github.com/SELinuxProject/selinux/releases/download/${pkgver}/${pkgname}-${pkgver}.tar.gz"{,.asc})
-sha256sums=('d555586797fa9f38344496d2a7ec1147b6caaf3fcc44c42d8d5173edd7a79a71'
+sha256sums=('79f3d2c88f44b7eb5cf54d9792e03232297e17f97a179163f2750099a00f164d'
             'SKIP')
 
 build() {