Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 7.1.5 to 7.2.0. No source URLs, checksums, install scripts, build commands, permissions, or package metadata beyond pkgver are altered here, so this diff does not introduce an obvious security regression by itself. Any risk would depend on the corresponding upstream package contents, which are not changed in this hunk.

@@ -1,6 +1,6 @@
 pkgbase = zoom
 	pkgdesc = Video Conferencing and Web Conferencing Service
-	pkgver = 7.1.5
+	pkgver = 7.2.0
 	pkgrel = 1
 	url = https://zoom.us/
 	arch = x86_64

Comment

The change is a straightforward upstream version bump in .SRCINFO, updating the Zoom binary package URL from 7.1.5.4332 to 7.2.0.5705 and refreshing the sha512 checksum. The source remains HTTPS on the official zoom.us domain, and there are no new sources, scripts, or packaging directives introduced in this diff. No additional security concerns are evident from this hunk alone.

@@ -41,7 +41,7 @@ pkgbase = zoom
 	replaces = zoom-libs-bin
 	replaces = zoom-libs
 	options = !strip
-	source = zoom-7.1.5.4332_orig_x86_64.pkg.tar.xz::https://zoom.us/client/7.1.5.4332/zoom_x86_64.pkg.tar.xz
-	sha512sums = d5ca18a754565c569825606646488f9b51b757685fb5788b2b327356a00489812f66582c6f6d8d4ea8d03ca1c6f036b271f74f1b97f3dc2dcc54a115e13aa484
+	source = zoom-7.2.0.5705_orig_x86_64.pkg.tar.xz::https://zoom.us/client/7.2.0.5705/zoom_x86_64.pkg.tar.xz
+	sha512sums = c2c5b523732505793689c354f2add4d170486554c105a5835eceb01e764448f4be0afdbbabe3f38851cc3de1f2186ecab469796884a757184f3f1aa5d9a5c91f
 
 pkgname = zoom

Comment

The change is a straightforward version bump for the Zoom binary package: pkgver/_subver and the source checksum are updated to match a newer upstream release. The source is still fetched over HTTPS from the official zoom.us domain, there are no new build-time commands, no added scripts, and no changes to package() behavior or permissions. I do not see any new supply-chain or privilege-escalation risk introduced by this diff alone.

@@ -2,8 +2,8 @@
 # Maintainer: Christian Heusel <christian@heusel.eu>
 
 pkgname=zoom
-pkgver=7.1.5
-_subver=4332
+pkgver=7.2.0
+_subver=5705
 pkgrel=1
 pkgdesc="Video Conferencing and Web Conferencing Service"
 arch=('x86_64')

Comment

The change only updates the SHA-512 checksum for the upstream Zoom binary package source URL, which remains HTTPS and points to the official zoom.us client download. No build logic, install scripts, permissions, or additional sources were introduced. This is a routine integrity pin update with no evident security regression in the diff provided.

@@ -24,7 +24,7 @@ optdepends=('pulseaudio-alsa: audio via PulseAudio'
 )
 options=(!strip)
 source=("${pkgname}-${pkgver}.${_subver}_orig_x86_64.pkg.tar.xz"::"https://zoom.us/client/${pkgver}.${_subver}/zoom_x86_64.pkg.tar.xz")
-sha512sums=('d5ca18a754565c569825606646488f9b51b757685fb5788b2b327356a00489812f66582c6f6d8d4ea8d03ca1c6f036b271f74f1b97f3dc2dcc54a115e13aa484')
+sha512sums=('c2c5b523732505793689c354f2add4d170486554c105a5835eceb01e764448f4be0afdbbabe3f38851cc3de1f2186ecab469796884a757184f3f1aa5d9a5c91f')
 
 package() {
 	cp -dpr --no-preserve=ownership opt usr "${pkgdir}"