Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 7.3.pf5 to 7.3.pf6. There are no source URL changes, no new build steps, no added scripts, and no packaging metadata changes that would introduce execution, persistence, or integrity risks. Based on the provided diff alone, this is a routine upstream version update with no security red flags.

@@ -1,6 +1,6 @@
 pkgbase = linux-pf
 	pkgdesc = pf-kernel
-	pkgver = 7.3.pf5
+	pkgver = 7.3.pf6
 	pkgrel = 1
 	url = https://pfkernel.natalenko.name
 	arch = x86_64

Comment

The change only updates the upstream source tarball reference in .SRCINFO from one Codeberg commit archive to another, along with the corresponding b2sum. The source remains HTTPS and pinned to a specific commit archive, with no new build steps, scripts, or packaging logic introduced. I did not find any indication of added network fetching at build time, privilege escalation, persistence mechanisms, or other suspicious artifacts in this diff. Risk is low because this is a metadata-only source bump, though the actual tarball contents are outside the scope of this single .SRCINFO change.

@@ -26,10 +26,10 @@ pkgbase = linux-pf
 	makedepends = zstd
 	options = !debug
 	options = !strip
-	source = https://codeberg.org/pf-kernel/linux/archive/fc5cd7c3ebd530aeb32c8b7c461e8f391067d566.tar.gz
+	source = https://codeberg.org/pf-kernel/linux/archive/d6b883dac65d6256aa348ed1016022d4dfe9e10b.tar.gz
 	source = config
 	b2sums = SKIP
-	b2sums = 2929b4636d1c798548527e3e9abee581abc586bf4a20ea0a85123464a25c147700f41f08adbc3aef0bc8e693ec31ea4aa327ff8eacebd9e7149774d8dfda6b49
+	b2sums = f2c027b674eb65ae645a6ad3ce1cdcd54e228277e8bbda4d96a2f5f5da8bd82ef060f4e4a9784a84652c9b99a70ee5b65be743e18962f3a4e75931fd5085c660
 
 pkgname = linux-pf
 	pkgdesc = The pf-kernel and modules

Comment

The change only bumps the pinned upstream kernel revision and package version from pf5 to pf6. No new sources, build steps, install scripts, permissions, or network-fetching behavior are introduced by this diff. Based on the provided hunk alone, this is a routine version update with no evident security impact.

@@ -3,8 +3,8 @@
 pkgbase="linux-pf"
 _suffix=""
 pkgname=(${pkgbase}${_suffix} ${pkgbase}-headers${_suffix})
-_rev=fc5cd7c3ebd530aeb32c8b7c461e8f391067d566
-pkgver=7.3.pf5
+_rev=d6b883dac65d6256aa348ed1016022d4dfe9e10b
+pkgver=7.3.pf6
 pkgrel=1
 pkgdesc="pf-kernel"
 arch=(x86_64)

Comment

The change only updates the B2 checksum for the upstream kernel source tarball in PKGBUILD. The source URL remains HTTPS and points to the upstream Codeberg project, there are no new build steps, no added scripts, and no packaging/persistence changes. This is a low-risk integrity metadata update, with no evidence of malicious behavior in the diff provided.

@@ -15,7 +15,7 @@ options=(!debug !strip)
 source=(https://codeberg.org/pf-kernel/linux/archive/${_rev}.tar.gz
 		config)
 b2sums=(SKIP
-		'2929b4636d1c798548527e3e9abee581abc586bf4a20ea0a85123464a25c147700f41f08adbc3aef0bc8e693ec31ea4aa327ff8eacebd9e7149774d8dfda6b49')
+		'f2c027b674eb65ae645a6ad3ce1cdcd54e228277e8bbda4d96a2f5f5da8bd82ef060f4e4a9784a84652c9b99a70ee5b65be743e18962f3a4e75931fd5085c660')
 
 export KBUILD_BUILD_HOST=archlinux
 export KBUILD_BUILD_USER=${pkgbase}

Comment

The only change in this diff is a version bump in the generated kernel config comment from pf5 to pf6. There are no changes to build logic, sources, patches, install scripts, permissions, or runtime behavior. Based on the provided hunk, this is a harmless metadata update with no security impact.

@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 7.3.0-pf5 Kernel Configuration
+# Linux/x86 7.3.0-pf6 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (GCC) 16.2.1 20260810"
 CONFIG_CC_IS_GCC=y

Comment

The change only bumps kernel config version constants for Rust and Rust-LLVM (109900->109901, 230101->230103). This is a metadata/version alignment update with no executable code, build logic, source URL, or packaging behavior changes. No security-relevant impact is evident from the provided diff.

@@ -11,9 +11,9 @@ CONFIG_AS_VERSION=24700
 CONFIG_LD_IS_BFD=y
 CONFIG_LD_VERSION=24700
 CONFIG_LLD_VERSION=0
-CONFIG_RUSTC_VERSION=109900
+CONFIG_RUSTC_VERSION=109901
 CONFIG_RUST_IS_AVAILABLE=y
-CONFIG_RUSTC_LLVM_VERSION=230101
+CONFIG_RUSTC_LLVM_VERSION=230103
 CONFIG_RUSTC_LLVM_MAJOR_VERSION=23
 CONFIG_CC_CAN_LINK=y
 CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y

Comment

The only change in this hunk is an update to the embedded Rust compiler version string in the kernel config from 1.99.0 to 1.99.1. This is metadata-only and does not alter build logic, sources, dependencies, install scripts, or runtime behavior. No security-relevant red flags are present in the reviewed diff.

@@ -348,7 +348,7 @@ CONFIG_PERF_EVENTS=y
 CONFIG_SYSTEM_DATA_VERIFICATION=y
 CONFIG_PROFILING=y
 CONFIG_RUST=y
-CONFIG_RUSTC_VERSION_TEXT="rustc 1.99.0 (b940084d7 2026-09-28) (Arch Linux rust 1:1.99.0-1)"
+CONFIG_RUSTC_VERSION_TEXT="rustc 1.99.1 (58cf8f9c3 2026-10-13) (Arch Linux rust 1:1.99.1-1)"
 CONFIG_BINDGEN_VERSION_TEXT="bindgen 0.73.2"
 CONFIG_TRACEPOINTS=y