Risk 1/5 · Low
PKGBUILD
Result #4858
Comment
The change only updates the x86_64 SHA-512 checksum in PKGBUILD. No source URLs, build commands, install scripts, or package metadata are altered, and there is no evidence of added network access, privilege escalation, or persistence behavior. This looks like a routine upstream artifact refresh or re-roll of the binary source, with the main security implication being that the package will now accept a different x86_64 payload. Without any accompanying source/URL change or other suspicious modifications, the risk is low.
@@ -78,7 +78,7 @@ sha512sums=(
)
sha512sums_x86_64=(
- '180906415f91bd3f5228bf4d89e4bacd3021805ff8444bdc37eaa510bc19b90c73c366e2ba7d9a7338aee98965fec764b6d9f8449dda6b7bc80e9ceb83c793d4'
+ '7757dc3c84f876d6cd18a060a97cfa50f8c5501c93ecb4bd909f3ad6dd9fa899f402fdb41361fd0a7e705427bed78abff0033b5e17aed9a3adaa8e74c579bd0c'
)
sha512sums_aarch64=(