Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 7.2.0 to 7.2.1. No sources, checksums, build steps, install scripts, permissions, or package metadata affecting trust boundaries were changed in the reviewed diff. On its face this is a routine upstream version update with no security-relevant red flags in the provided hunk.

@@ -1,6 +1,6 @@
 pkgbase = zoom
 	pkgdesc = Video Conferencing and Web Conferencing Service
-	pkgver = 7.2.0
+	pkgver = 7.2.1
 	pkgrel = 1
 	url = https://zoom.us/
 	arch = x86_64

Comment

The change is a straightforward source/version bump in .SRCINFO from Zoom 7.2.0.5705 to 7.2.1.5760, with the corresponding SHA-512 checksum updated. The source remains an HTTPS URL on the official Zoom domain, and there are no new sources, scripts, build steps, or packaging directives introduced by this diff. Based on the provided hunk alone, this does not add any obvious supply-chain or privilege-escalation risk.

@@ -41,7 +41,7 @@ pkgbase = zoom
 	replaces = zoom-libs-bin
 	replaces = zoom-libs
 	options = !strip
-	source = zoom-7.2.0.5705_orig_x86_64.pkg.tar.xz::https://zoom.us/client/7.2.0.5705/zoom_x86_64.pkg.tar.xz
-	sha512sums = c2c5b523732505793689c354f2add4d170486554c105a5835eceb01e764448f4be0afdbbabe3f38851cc3de1f2186ecab469796884a757184f3f1aa5d9a5c91f
+	source = zoom-7.2.1.5760_orig_x86_64.pkg.tar.xz::https://zoom.us/client/7.2.1.5760/zoom_x86_64.pkg.tar.xz
+	sha512sums = 12272ae2626e4de50683b4198bedb5c87940337e8586a6ec01d3078f7e7810537f1d8584531dcfc4840c2c3c0a034a2bf4005630e8d4211b489b3360effb7dd3
 
 pkgname = zoom

Comment

The change is a straightforward version bump in PKGBUILD from Zoom 7.2.0 (_subver 5705) to 7.2.1 (_subver 5760) with no other logic changes. There are no new sources, build steps, install scripts, permissions changes, or other packaging behaviors introduced in this diff. Based on the provided hunk alone, this is low risk.

@@ -2,8 +2,8 @@
 # Maintainer: Christian Heusel <christian@heusel.eu>
 
 pkgname=zoom
-pkgver=7.2.0
-_subver=5705
+pkgver=7.2.1
+_subver=5760
 pkgrel=1
 pkgdesc="Video Conferencing and Web Conferencing Service"
 arch=('x86_64')

Comment

The change only updates the SHA-512 checksum for the upstream Zoom binary package source URL. The source remains HTTPS and points to the official Zoom domain, with no new build steps, scripts, or packaging behavior changes. This is a routine integrity update and does not introduce an obvious security concern in the PKGBUILD diff itself.

@@ -24,7 +24,7 @@ optdepends=('pulseaudio-alsa: audio via PulseAudio'
 )
 options=(!strip)
 source=("${pkgname}-${pkgver}.${_subver}_orig_x86_64.pkg.tar.xz"::"https://zoom.us/client/${pkgver}.${_subver}/zoom_x86_64.pkg.tar.xz")
-sha512sums=('c2c5b523732505793689c354f2add4d170486554c105a5835eceb01e764448f4be0afdbbabe3f38851cc3de1f2186ecab469796884a757184f3f1aa5d9a5c91f')
+sha512sums=('12272ae2626e4de50683b4198bedb5c87940337e8586a6ec01d3078f7e7810537f1d8584531dcfc4840c2c3c0a034a2bf4005630e8d4211b489b3360effb7dd3')
 
 package() {
 	cp -dpr --no-preserve=ownership opt usr "${pkgdir}"