Review Results

Comment

The change only bumps pkgver in .SRCINFO from 7.2.10.lqx2 to 7.2.11.lqx1. No sources, checksums, build steps, install scripts, or permissions are altered, and there are no new integrity or execution red flags in the provided diff. Based on this hunk alone, the change is low risk.

@@ -1,6 +1,6 @@
 pkgbase = linux-lqx
 	pkgdesc = Linux Liquorix
-	pkgver = 7.2.10.lqx2
+	pkgver = 7.2.11.lqx1
 	pkgrel = 1
 	url = https://liquorix.net/
 	arch = x86_64

Comment

The change is a routine source version bump in .SRCINFO from liquorix-package 7.2-18 to 7.2-19, with the corresponding checksum updated. The upstream source remains the same GitHub project, there are no new URLs, no build-script changes, and no signs of added execution, persistence, or integrity bypass behavior in this diff. Based on the provided hunk alone, this is low risk.

@@ -23,12 +23,12 @@ pkgbase = linux-lqx
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.xz
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.sign
-	source = https://github.com/damentz/liquorix-package/archive/7.2-18.tar.gz
+	source = https://github.com/damentz/liquorix-package/archive/7.2-19.tar.gz
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha512sums = 47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1
 	sha512sums = SKIP
-	sha512sums = 82078232c29fdab788971702f88d2e9ec05e91044166abd13dba8b4fcc31c511c07d11c349153ec0cb7591dc0727ea390f56254202d97783a861fa7b0aef70b7
+	sha512sums = 6335387b8f0c82237b715f7af8a62795e7658ff833f2ca2077f97e6bfb366d5fd4623f72edd7336324375db78f63d0ab4c8c81d9bbf0636a9d87dd66082896a2
 
 pkgname = linux-lqx
 	pkgdesc = The Linux Liquorix kernel and modules

Comment

The change is a routine version bump for the linux-lqx PKGBUILD: it updates the Liquorix patch release number, package version, and the corresponding source checksum. I do not see any new sources, network fetches, install-script changes, privilege-related logic, or packaging behavior changes. The diff is limited to integrity metadata for an upstream version update, so there is no evident security issue in this change alone.

@@ -54,10 +54,10 @@ _htmldocs_enable=
 _major=7.2
 _srcname=linux-${_major}
 _lqxpatchname=liquorix-package
-_lqxpatchrel=18
+_lqxpatchrel=19
 _lqxpatchver=${_lqxpatchname}-${_major}-${_lqxpatchrel}
 pkgbase=linux-lqx
-pkgver=7.2.10.lqx2
+pkgver=7.2.11.lqx1
 pkgrel=1
 pkgdesc='Linux Liquorix'
 url='https://liquorix.net/'

Comment

The change only updates the recorded SHA-512 checksum for the third source tarball, alongside the corresponding package version bump from 7.2.10.lqx2 / patchrel 18 to 7.2.11.lqx1 / patchrel 19. There is no new code execution, no added sources, and no packaging logic change. Assuming the new checksum matches the intended upstream Liquorix patch archive, this is a routine integrity update with no evident security impact.

@@ -106,7 +106,7 @@ validpgpkeys=(
 )
 sha512sums=('47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1'
             'SKIP'
-            '82078232c29fdab788971702f88d2e9ec05e91044166abd13dba8b4fcc31c511c07d11c349153ec0cb7591dc0727ea390f56254202d97783a861fa7b0aef70b7')
+            '6335387b8f0c82237b715f7af8a62795e7658ff833f2ca2077f97e6bfb366d5fd4623f72edd7336324375db78f63d0ab4c8c81d9bbf0636a9d87dd66082896a2')