Review Results

Comment

The change is a one-line version bump in .SRCINFO from 7.2.11.lqx1 to 7.2.11.lqx2. No sources, build logic, install scripts, permissions, or systemd-related artifacts are modified, and there are no new integrity or execution concerns visible in this diff. This is a routine metadata update with negligible security impact.

@@ -1,6 +1,6 @@
 pkgbase = linux-lqx
 	pkgdesc = Linux Liquorix
-	pkgver = 7.2.11.lqx1
+	pkgver = 7.2.11.lqx2
 	pkgrel = 1
 	url = https://liquorix.net/
 	arch = x86_64

Comment

The change only bumps the pinned upstream liquorix-package source tarball from 7.2-19 to 7.2-20 and updates its checksum in .SRCINFO. The source remains HTTPS and pinned to a specific release archive, with no new build-time network access, scripts, or packaging behavior introduced by this metadata-only change. No security-relevant red flags are visible in the provided diff.

@@ -23,12 +23,12 @@ pkgbase = linux-lqx
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.xz
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.sign
-	source = https://github.com/damentz/liquorix-package/archive/7.2-19.tar.gz
+	source = https://github.com/damentz/liquorix-package/archive/7.2-20.tar.gz
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha512sums = 47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1
 	sha512sums = SKIP
-	sha512sums = 6335387b8f0c82237b715f7af8a62795e7658ff833f2ca2077f97e6bfb366d5fd4623f72edd7336324375db78f63d0ab4c8c81d9bbf0636a9d87dd66082896a2
+	sha512sums = cb01cc4e3aaea438bc15058fa0e322a46d35b030ccf5370816a5eef995cb9c29a28075a06758d433cd1b44da8ef00a8d0dddfe89c8cc6995ec6fb3ee899576ce
 
 pkgname = linux-lqx
 	pkgdesc = The Linux Liquorix kernel and modules

Comment

The change only bumps the Liquorix patch release metadata from 19 to 20 and the package version from 7.2.11.lqx1 to 7.2.11.lqx2. No sources, build steps, install scripts, permissions, dependencies, or packaging logic are altered in the provided hunk. On its face this is a routine version update with no security-relevant behavior change visible in the diff.

@@ -54,10 +54,10 @@ _htmldocs_enable=
 _major=7.2
 _srcname=linux-${_major}
 _lqxpatchname=liquorix-package
-_lqxpatchrel=19
+_lqxpatchrel=20
 _lqxpatchver=${_lqxpatchname}-${_major}-${_lqxpatchrel}
 pkgbase=linux-lqx
-pkgver=7.2.11.lqx1
+pkgver=7.2.11.lqx2
 pkgrel=1
 pkgdesc='Linux Liquorix'
 url='https://liquorix.net/'

Comment

The change only updates the Liquorix patch release/version and the corresponding SHA-512 checksum for the third source archive. There are no new sources, no build-script logic changes, and no added execution, privilege, or persistence behavior. The integrity update is expected for a version bump and does not by itself indicate malicious content.

@@ -106,7 +106,7 @@ validpgpkeys=(
 )
 sha512sums=('47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1'
             'SKIP'
-            '6335387b8f0c82237b715f7af8a62795e7658ff833f2ca2077f97e6bfb366d5fd4623f72edd7336324375db78f63d0ab4c8c81d9bbf0636a9d87dd66082896a2')
+            'cb01cc4e3aaea438bc15058fa0e322a46d35b030ccf5370816a5eef995cb9c29a28075a06758d433cd1b44da8ef00a8d0dddfe89c8cc6995ec6fb3ee899576ce')