Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 8.0.4 to 8.1.0. No source URLs, build commands, install scripts, permissions, or dependency metadata are changed here, so there is no direct security signal in the diff itself. Based on the provided hunk alone, this appears low risk.

@@ -1,6 +1,6 @@
 pkgbase = anydesk-bin
 	pkgdesc = The Fast Remote Desktop Application
-	pkgver = 8.0.4
+	pkgver = 8.1.0
 	pkgrel = 1
 	url = https://anydesk.com
 	arch = x86_64

Comment

The change is a straightforward version bump in .SRCINFO from AnyDesk 8.0.4 to 8.1.0, with matching HTTPS source URLs and updated SHA-256 checksums for both x86_64 and aarch64. There are no new sources, no build-script changes, no install hooks, and no signs of added persistence or privilege escalation in this diff. The only risk is the inherent trust in a prebuilt upstream binary package, but this specific metadata update does not introduce additional security concerns.

@@ -33,9 +33,9 @@ pkgbase = anydesk-bin
 	provides = anydesk
 	conflicts = anydesk
 	options = !strip
-	source_x86_64 = https://download.anydesk.com/linux/anydesk-8.0.4-amd64.tar.gz
-	sha256sums_x86_64 = 7e0dec2dcbac86ee730efb016a41cb3ff151aa1bdab880b1f3aae5a4ae18916f
-	source_aarch64 = https://download.anydesk.com/rpi/anydesk-8.0.4-arm64.tar.gz
-	sha256sums_aarch64 = 4c557555074522519821fe2262d030e3671591a896bec7427128dd4bfaae817d
+	source_x86_64 = https://download.anydesk.com/linux/anydesk-8.1.0-amd64.tar.gz
+	sha256sums_x86_64 = 22615f1ac8aa4f9ab2fa7344e38358bc6229e7e0b973b7b7fba04848336010db
+	source_aarch64 = https://download.anydesk.com/rpi/anydesk-8.1.0-arm64.tar.gz
+	sha256sums_aarch64 = 900000b49f97e66643fc98f688be2b09c8e6744f78a8a4e5a75a0575369a9b6a
 
 pkgname = anydesk-bin

Comment

The change only bumps pkgver from 8.0.4 to 8.1.0 in PKGBUILD. No build logic, sources, checksums, install scripts, or packaging behavior changed in the provided diff hunk. Based on this diff alone, there are no new security concerns introduced.

@@ -1,6 +1,6 @@
 # Maintainer: Nico <d3sox at protonmail dot com>
 pkgname=anydesk-bin
-pkgver=8.0.4
+pkgver=8.1.0
 pkgrel=1
 pkgdesc="The Fast Remote Desktop Application"
 arch=('x86_64' 'aarch64')

Comment

The change only bumps anydesk-bin from 8.0.4 to 8.1.0 and updates the SHA-256 checksums for the official HTTPS tarball sources. The source URLs remain on the vendor’s download domain, there are no new build-time downloads, scripts, patches, or packaging changes, and the package still installs a prebuilt upstream binary as before. No obvious supply-chain or privilege-escalation issue is introduced by this diff alone.

@@ -13,8 +13,8 @@ provides=('anydesk')
 options=('!strip')
 source_x86_64=("https://download.anydesk.com/linux/anydesk-${pkgver}-amd64.tar.gz")
 source_aarch64=("https://download.anydesk.com/rpi/anydesk-${pkgver}-arm64.tar.gz")
-sha256sums_x86_64=('7e0dec2dcbac86ee730efb016a41cb3ff151aa1bdab880b1f3aae5a4ae18916f')
-sha256sums_aarch64=('4c557555074522519821fe2262d030e3671591a896bec7427128dd4bfaae817d')
+sha256sums_x86_64=('22615f1ac8aa4f9ab2fa7344e38358bc6229e7e0b973b7b7fba04848336010db')
+sha256sums_aarch64=('900000b49f97e66643fc98f688be2b09c8e6744f78a8a4e5a75a0575369a9b6a')
 
 package() {
     # install binary