Review Results

Comment

The change only bumps pkgver in .SRCINFO from 7.3.7.1155 to 7.3.7.1327. .SRCINFO is metadata used by AUR helpers and does not itself introduce executable behavior. No new sources, checksums, install scripts, or packaging logic are changed in the provided diff hunk, so there is no evident security impact from this change alone.

@@ -1,6 +1,6 @@
 pkgbase = google-earth-pro
 	pkgdesc = 3D interface to explore the globe, terrain, streets, buildings and other planets (Pro version)
-	pkgver = 7.3.7.1155
+	pkgver = 7.3.7.1327
 	pkgrel = 1
 	url = https://www.google.com/earth/
 	install = google-earth-pro.install

Comment

The change only bumps the packaged Google Earth Pro version and updates the corresponding official HTTPS .deb source URL, noextract filename, and b2sum in .SRCINFO. There are no new sources, no build-script changes, no added post-install actions, and no suspicious integrity regressions beyond the package continuing to ship a prebuilt upstream binary from Google. This diff is low risk and consistent with a routine version update.

@@ -20,15 +20,15 @@ pkgbase = google-earth-pro
 	depends = libxrender
 	depends = sqlite
 	provides = google-earth
-	noextract = google-earth-pro-stable_7.3.7.1155-r0_amd64.deb
+	noextract = google-earth-pro-stable_7.3.7.1327-r0_amd64.deb
 	options = !strip
 	options = !emptydirs
-	source = https://dl.google.com/linux/earth/deb/pool/main/g/google-earth-pro-stable/google-earth-pro-stable_7.3.7.1155-r0_amd64.deb
+	source = https://dl.google.com/linux/earth/deb/pool/main/g/google-earth-pro-stable/google-earth-pro-stable_7.3.7.1327-r0_amd64.deb
 	source = Google-Terms-of-Service.html::https://www.google.com/intl/ALL/policies/terms/index.html
 	source = Google-Earth-Additional-Terms-of-Service.html::https://www.google.com/help/terms_maps.html
 	source = Legal-Notices-for-Google-Earth-and-Google-Earth-APIs.html::https://www.google.com/help/legalnotices_maps.html
 	source = Google-Privacy-Policy.html::https://www.google.com/intl/ALL/policies/privacy/index.html
-	b2sums = 1e68a1a902d3e435b0b88b8dd87f8f10425baaf676c5668949e293b16d6aad19f836b8365b65855e039d5fe458f81fd068c6d52eb1f0cdea5c2b8ec5d210f39f
+	b2sums = f6fcdd893be86db6741e7b058b4162f5544d32084fa7b13ec15580d6e6e5bfe9510769baafcbf4941ccebb664b801cabca69fba4aaadfb2771176b291eb52476
 	b2sums = SKIP
 	b2sums = SKIP
 	b2sums = SKIP

Comment

The change is a routine version bump for a Google-hosted binary package and updates the corresponding b2 checksum. I did not find any new sources, build-time network fetches, privilege escalation, install-script changes, or packaging logic changes. The package still relies on an upstream .deb from dl.google.com, but that was already present in the previous version and is not introduced by this diff. No additional security concerns are evident in this hunk alone.

@@ -6,7 +6,7 @@
 # $ curl -sL https://dl.google.com/linux/earth/deb/dists/stable/main/binary-amd64/Packages | grep -Pom1 'Version: \K[^-]*'
 
 pkgname=google-earth-pro
-pkgver=7.3.7.1155
+pkgver=7.3.7.1327
 pkgrel=1
 pkgdesc="3D interface to explore the globe, terrain, streets, buildings and other planets (Pro version)"
 arch=(x86_64)

Comment

The change only bumps pkgver and updates the b2sums for the upstream Google Earth Pro .deb source. No new sources, scripts, build steps, permissions, or packaging logic were introduced, and the source remains an HTTPS download from the official Google domain. Based on the provided diff, this looks like a routine version/hash refresh with no evident security red flags.

@@ -38,7 +38,7 @@ source=(
     'Google-Privacy-Policy.html'::'https://www.google.com/intl/ALL/policies/privacy/index.html'
 )
 noextract=("google-earth-pro-stable_${pkgver}-r0_amd64.deb")
-b2sums=('1e68a1a902d3e435b0b88b8dd87f8f10425baaf676c5668949e293b16d6aad19f836b8365b65855e039d5fe458f81fd068c6d52eb1f0cdea5c2b8ec5d210f39f'
+b2sums=('f6fcdd893be86db6741e7b058b4162f5544d32084fa7b13ec15580d6e6e5bfe9510769baafcbf4941ccebb664b801cabca69fba4aaadfb2771176b291eb52476'
         'SKIP'
         'SKIP'
         'SKIP'