Review Results

Comment

The change only bumps pkgver in .SRCINFO from 7.2.4.lqx4 to 7.2.6.lqx1. No sources, checksums, build steps, install scripts, or permissions changed, and there are no new integrity or execution red flags in the provided diff hunk. On its face this is a routine metadata update with no security impact.

@@ -1,6 +1,6 @@
 pkgbase = linux-lqx
 	pkgdesc = Linux Liquorix
-	pkgver = 7.2.4.lqx4
+	pkgver = 7.2.6.lqx1
 	pkgrel = 1
 	url = https://liquorix.net/
 	arch = x86_64

Comment

The change only updates .SRCINFO metadata to track a new upstream package release (7.2-11) and corresponding pkgver/checksum. The source URLs remain HTTPS and point to the same official upstream locations, with no new build logic, scripts, or privilege-related artifacts introduced. No security-relevant red flags are present in this diff alone.

@@ -23,12 +23,12 @@ pkgbase = linux-lqx
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.xz
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.sign
-	source = https://github.com/damentz/liquorix-package/archive/7.2-10.tar.gz
+	source = https://github.com/damentz/liquorix-package/archive/7.2-11.tar.gz
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha512sums = 47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1
 	sha512sums = SKIP
-	sha512sums = bc51be87d77a44703a3827e93ad8d69ac323bb9e5b9d384f8beceb5a7cfa06cf8028a1ac218b63621d226fa18cfda7c4876f07ef95856af511fbac16707a3ebe
+	sha512sums = 19de0cdaecea2c04667daf0d0c705f2566f3ffe08fd68b23758e71c45093f28a41a9d1d610adc785c4144f6b091291c33abed5f3f285d6f20cce1d2716525d56
 
 pkgname = linux-lqx
 	pkgdesc = The Linux Liquorix kernel and modules

Comment

The change only bumps the Liquorix package version/patch release and updates the corresponding source checksum in PKGBUILD. I did not see any new sources, network behavior, privilege escalation, install scripts, or packaging logic changes. This is a routine version refresh with no security-relevant red flags in the reviewed hunk.

@@ -54,10 +54,10 @@ _htmldocs_enable=
 _major=7.2
 _srcname=linux-${_major}
 _lqxpatchname=liquorix-package
-_lqxpatchrel=10
+_lqxpatchrel=11
 _lqxpatchver=${_lqxpatchname}-${_major}-${_lqxpatchrel}
 pkgbase=linux-lqx
-pkgver=7.2.4.lqx4
+pkgver=7.2.6.lqx1
 pkgrel=1
 pkgdesc='Linux Liquorix'
 url='https://liquorix.net/'

Comment

The change only updates the package version and the SHA-512 checksum for the upstream Liquorix patch tarball. I did not find any new sources, build steps, install scripts, or privilege/network behavior introduced by this diff. The package still fetches sources over HTTPS from the official kernel.org and GitHub Liquorix locations, and the checksum update is consistent with a new upstream tarball release. No security-relevant regression is evident in the reviewed hunk.

@@ -106,7 +106,7 @@ validpgpkeys=(
 )
 sha512sums=('47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1'
             'SKIP'
-            'bc51be87d77a44703a3827e93ad8d69ac323bb9e5b9d384f8beceb5a7cfa06cf8028a1ac218b63621d226fa18cfda7c4876f07ef95856af511fbac16707a3ebe')
+            '19de0cdaecea2c04667daf0d0c705f2566f3ffe08fd68b23758e71c45093f28a41a9d1d610adc785c4144f6b091291c33abed5f3f285d6f20cce1d2716525d56')