Review Results

Comment

The change only bumps pkgver in .SRCINFO from 7.2.3.lqx2 to 7.2.3.lqx3. This is metadata-only and does not introduce any new sources, build steps, install scripts, permissions changes, or other security-relevant behavior. No red flags are present in the provided diff.

@@ -1,6 +1,6 @@
 pkgbase = linux-lqx
 	pkgdesc = Linux Liquorix
-	pkgver = 7.2.3.lqx2
+	pkgver = 7.2.3.lqx3
 	pkgrel = 1
 	url = https://liquorix.net/
 	arch = x86_64

Comment

The change is a straightforward source-version bump in .SRCINFO from liquorix-package 7.2-4 to 7.2-5, with the corresponding checksum updated. The upstream kernel tarball/signature sources and PGP keys are unchanged, and there are no new sources, scripts, install hooks, or build-time network behaviors introduced by this diff. Based on the provided hunk alone, this does not present an obvious security concern.

@@ -23,12 +23,12 @@ pkgbase = linux-lqx
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.xz
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.sign
-	source = https://github.com/damentz/liquorix-package/archive/7.2-4.tar.gz
+	source = https://github.com/damentz/liquorix-package/archive/7.2-5.tar.gz
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha512sums = 47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1
 	sha512sums = SKIP
-	sha512sums = a7d1236670c9616833f600b4858a0c387e1600ca51dd5bccdd9acad1b4d458187d7b3f22877058856198d45562f999f2b7b5220e73097ef7e35aa1aa6cef6312
+	sha512sums = 1ad793b21b25418cacc32e12bd2bc42e06fe6d40aae3027b03df4fe7de51e9b18008b6efb18eceef57df76637e8960fec72494441e8c723fbb3b1af307b64d01
 
 pkgname = linux-lqx
 	pkgdesc = The Linux Liquorix kernel and modules

Comment

The change only bumps the Liquorix patch release metadata from 4 to 5 and the package version from lqx2 to lqx3. No build logic, sources, checksums, install scripts, or permissions are altered, and there are no new network, privilege, or persistence concerns visible in this hunk. Based on the provided diff alone, this is a routine version update with no security impact.

@@ -54,10 +54,10 @@ _htmldocs_enable=
 _major=7.2
 _srcname=linux-${_major}
 _lqxpatchname=liquorix-package
-_lqxpatchrel=4
+_lqxpatchrel=5
 _lqxpatchver=${_lqxpatchname}-${_major}-${_lqxpatchrel}
 pkgbase=linux-lqx
-pkgver=7.2.3.lqx2
+pkgver=7.2.3.lqx3
 pkgrel=1
 pkgdesc='Linux Liquorix'
 url='https://liquorix.net/'

Comment

The change is a routine upstream version bump in PKGBUILD metadata: pkgver/_lqxpatchrel and the sha512 checksum for the updated source/patch artifact were adjusted. I do not see any new sources, network fetches, privilege changes, install-script logic, or other execution paths introduced by this diff. No security red flags are evident from the provided hunk alone.

@@ -106,7 +106,7 @@ validpgpkeys=(
 )
 sha512sums=('47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1'
             'SKIP'
-            'a7d1236670c9616833f600b4858a0c387e1600ca51dd5bccdd9acad1b4d458187d7b3f22877058856198d45562f999f2b7b5220e73097ef7e35aa1aa6cef6312')
+            '1ad793b21b25418cacc32e12bd2bc42e06fe6d40aae3027b03df4fe7de51e9b18008b6efb18eceef57df76637e8960fec72494441e8c723fbb3b1af307b64d01')