Review Results

Comment

The change is a simple version bump in .SRCINFO from 7.2.9.lqx1 to 7.2.9.lqx2 with no accompanying changes to sources, build logic, install scripts, or metadata that would affect security. No new network sources, scripts, privileges, or packaging behavior are introduced by this diff hunk.

@@ -1,6 +1,6 @@
 pkgbase = linux-lqx
 	pkgdesc = Linux Liquorix
-	pkgver = 7.2.9.lqx1
+	pkgver = 7.2.9.lqx2
 	pkgrel = 1
 	url = https://liquorix.net/
 	arch = x86_64

Comment

The change only bumps the liquourix-package source tarball from 7.2-15 to 7.2-16 and updates its pinned sha512 checksum accordingly. The source remains an HTTPS GitHub archive from the same upstream project, with no new build steps, scripts, or integrity regressions introduced in this .SRCINFO-only diff. No evidence of malicious URLs, floating VCS refs, or packaging behavior changes in the reviewed hunk.

@@ -23,12 +23,12 @@ pkgbase = linux-lqx
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.xz
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.sign
-	source = https://github.com/damentz/liquorix-package/archive/7.2-15.tar.gz
+	source = https://github.com/damentz/liquorix-package/archive/7.2-16.tar.gz
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha512sums = 47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1
 	sha512sums = SKIP
-	sha512sums = cc752dcde4da1b482d6e033e3fff13a5e9152d5f4bc64f202330984bf7845e23580d0ea2daf3dad36162949d994d7b8d3d0c7b5817b8b323e645bf8cf41672a8
+	sha512sums = 72db225f1f0efa39f607022cbec2551d3d2930b8dc61c7999200216b3a23c46a80ad487bba8a3e90f6721b5c95b777a7f61ea8982a1843c3cd4caf4d84d71d67
 
 pkgname = linux-lqx
 	pkgdesc = The Linux Liquorix kernel and modules

Comment

The change only bumps the package metadata/version identifiers (_lqxpatchrel from 15 to 16 and pkgver from 7.2.9.lqx1 to 7.2.9.lqx2). No build logic, sources, install scripts, permissions, or system integration behavior changed in the provided hunk. Based on this diff alone there are no security-relevant red flags.

@@ -54,10 +54,10 @@ _htmldocs_enable=
 _major=7.2
 _srcname=linux-${_major}
 _lqxpatchname=liquorix-package
-_lqxpatchrel=15
+_lqxpatchrel=16
 _lqxpatchver=${_lqxpatchname}-${_major}-${_lqxpatchrel}
 pkgbase=linux-lqx
-pkgver=7.2.9.lqx1
+pkgver=7.2.9.lqx2
 pkgrel=1
 pkgdesc='Linux Liquorix'
 url='https://liquorix.net/'

Comment

The change is a routine PKGBUILD version bump for linux-lqx: pkgver/_lqxpatchrel are incremented and the sha512 checksum for one source is updated accordingly. I do not see any new sources, network fetches, install-script changes, privilege escalation, or other suspicious packaging behavior in this diff. The source integrity posture remains the same as before; this hunk only refreshes an expected checksum for an upstream patch release.

@@ -106,7 +106,7 @@ validpgpkeys=(
 )
 sha512sums=('47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1'
             'SKIP'
-            'cc752dcde4da1b482d6e033e3fff13a5e9152d5f4bc64f202330984bf7845e23580d0ea2daf3dad36162949d994d7b8d3d0c7b5817b8b323e645bf8cf41672a8')
+            '72db225f1f0efa39f607022cbec2551d3d2930b8dc61c7999200216b3a23c46a80ad487bba8a3e90f6721b5c95b777a7f61ea8982a1843c3cd4caf4d84d71d67')