Review Results

Comment

The change only bumps the package version in .SRCINFO from 7.2.3.lqx3 to 7.2.3.lqx4. No sources, build logic, install scripts, permissions, or dependencies are altered, and there are no new integrity or execution concerns visible in this diff. This is a metadata-only version update with negligible security impact.

@@ -1,6 +1,6 @@
 pkgbase = linux-lqx
 	pkgdesc = Linux Liquorix
-	pkgver = 7.2.3.lqx3
+	pkgver = 7.2.3.lqx4
 	pkgrel = 1
 	url = https://liquorix.net/
 	arch = x86_64

Comment

The change only bumps the upstream liquorix-package tarball from 7.2-5 to 7.2-6 and updates its checksum in .SRCINFO. The source remains the same official GitHub repository, over HTTPS, with no new build-time network access, scripts, or privilege-related artifacts introduced by this diff. Based on the provided hunk alone, this is a routine version refresh with no evident security impact.

@@ -23,12 +23,12 @@ pkgbase = linux-lqx
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.xz
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.sign
-	source = https://github.com/damentz/liquorix-package/archive/7.2-5.tar.gz
+	source = https://github.com/damentz/liquorix-package/archive/7.2-6.tar.gz
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha512sums = 47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1
 	sha512sums = SKIP
-	sha512sums = 1ad793b21b25418cacc32e12bd2bc42e06fe6d40aae3027b03df4fe7de51e9b18008b6efb18eceef57df76637e8960fec72494441e8c723fbb3b1af307b64d01
+	sha512sums = c2b24adbbc62daf98b5d9c91f00feaedf5c9719f359d067c494817eb345b9bce2356d67506548cca211d49e506446bec43cb7c9f05df3a4b32366c16e94aeafc
 
 pkgname = linux-lqx
 	pkgdesc = The Linux Liquorix kernel and modules

Comment

The change is a straightforward version bump in PKGBUILD metadata: it increments the Liquorix patch release and package version from 7.2.3.lqx3 to 7.2.3.lqx4. No new sources, build steps, install scripts, permissions, or dependency changes are introduced in the provided diff hunk. Based on this diff alone, there are no security red flags.

@@ -54,10 +54,10 @@ _htmldocs_enable=
 _major=7.2
 _srcname=linux-${_major}
 _lqxpatchname=liquorix-package
-_lqxpatchrel=5
+_lqxpatchrel=6
 _lqxpatchver=${_lqxpatchname}-${_major}-${_lqxpatchrel}
 pkgbase=linux-lqx
-pkgver=7.2.3.lqx3
+pkgver=7.2.3.lqx4
 pkgrel=1
 pkgdesc='Linux Liquorix'
 url='https://liquorix.net/'

Comment

The change only updates the recorded SHA-512 checksum for the upstream Liquorix patch tarball, alongside the corresponding pkgver/_lqxpatchrel bump. I did not find any new code execution, network fetches, privilege changes, or packaging behavior changes in the diff. The source remains an HTTPS GitHub release tarball, and the checksum update is consistent with a versioned upstream artifact change. No security issue evident from this hunk alone.

@@ -106,7 +106,7 @@ validpgpkeys=(
 )
 sha512sums=('47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1'
             'SKIP'
-            '1ad793b21b25418cacc32e12bd2bc42e06fe6d40aae3027b03df4fe7de51e9b18008b6efb18eceef57df76637e8960fec72494441e8c723fbb3b1af307b64d01')
+            'c2b24adbbc62daf98b5d9c91f00feaedf5c9719f359d067c494817eb345b9bce2356d67506548cca211d49e506446bec43cb7c9f05df3a4b32366c16e94aeafc')