Review Results

Comment

The change only bumps pkgver in .SRCINFO from 1.43.5.11029 to 1.43.5.11079. No source URLs, checksums, build logic, install scripts, or packaging metadata affecting execution/persistence were modified in the reviewed hunk. On its face this is a routine version update with no security-relevant red flags in the diff provided.

@@ -1,6 +1,6 @@
 pkgbase = plex-media-server
 	pkgdesc = The back-end media server component of Plex.
-	pkgver = 1.43.5.11029
+	pkgver = 1.43.5.11079
 	pkgrel = 1
 	url = https://plex.tv/
 	install = plex-media-server.install

Comment

The change only updates .SRCINFO to point at a newer Plex upstream release and refreshes the corresponding checksums for the architecture-specific binary packages. The source URLs remain HTTPS and still reference the official Plex download domain; there are no new build steps, scripts, or privilege-related artifacts introduced by this diff. No security-relevant red flags are visible in this hunk alone.

@@ -26,13 +26,13 @@ pkgbase = plex-media-server
 	sha256sums = c597bee0bcbb59ed791651555a904e5f7e9d2e82f6c6986b6352e5fc38e5b557
 	sha256sums = b7ff6525a3c7a8be885edc85bb523095f8e25ddb38873127e2a4e97b28f2c7ad
 	sha256sums = dbfb5a9a7146a975863c0932f1a68c4b040ec5d7e693361f39ddfbf60885e631
-	source_x86_64 = https://downloads.plex.tv/plex-media-server-new/1.43.5.11029-6bf8af3f0/redhat/plexmediaserver-1.43.5.11029-6bf8af3f0.x86_64.rpm
-	sha256sums_x86_64 = 10bcea4e21088c018a11c018bb017255ba32629803314270d280b96361b283f0
-	source_i686 = https://downloads.plex.tv/plex-media-server-new/1.43.5.11029-6bf8af3f0/redhat/plexmediaserver-1.43.5.11029-6bf8af3f0.i686.rpm
-	sha256sums_i686 = befc40d9979cd002528f6970d658653ca80da10572934636ff1b2aa1bf3ac7b3
-	source_armv7h = https://downloads.plex.tv/plex-media-server-new/1.43.5.11029-6bf8af3f0/debian/plexmediaserver_1.43.5.11029-6bf8af3f0_armhf.deb
-	sha256sums_armv7h = 02fdcf29f378de74905140df0e7671014e764fd09358f9b3e264e4c699a5cb9c
-	source_aarch64 = https://downloads.plex.tv/plex-media-server-new/1.43.5.11029-6bf8af3f0/debian/plexmediaserver_1.43.5.11029-6bf8af3f0_arm64.deb
-	sha256sums_aarch64 = b289c218db9c4efa81effab8efb82ca9aba5576f58e95aeb7c485b07db41ec1b
+	source_x86_64 = https://downloads.plex.tv/plex-media-server-new/1.43.5.11079-b3b13e506/redhat/plexmediaserver-1.43.5.11079-b3b13e506.x86_64.rpm
+	sha256sums_x86_64 = 3c1939e0225b2a4774a2eda7102f90d2af3caf8a470cc91730e21670865b4562
+	source_i686 = https://downloads.plex.tv/plex-media-server-new/1.43.5.11079-b3b13e506/redhat/plexmediaserver-1.43.5.11079-b3b13e506.i686.rpm
+	sha256sums_i686 = 4a6b5fe0f9b0e4a1e361984218918210eaf7812ce10c559195e5d28ffe373fbc
+	source_armv7h = https://downloads.plex.tv/plex-media-server-new/1.43.5.11079-b3b13e506/debian/plexmediaserver_1.43.5.11079-b3b13e506_armhf.deb
+	sha256sums_armv7h = 73d1cbca351c47db93d75f996c9ea91257ae04da1d0a3c2dd37ad826f7c87747
+	source_aarch64 = https://downloads.plex.tv/plex-media-server-new/1.43.5.11079-b3b13e506/debian/plexmediaserver_1.43.5.11079-b3b13e506_arm64.deb
+	sha256sums_aarch64 = 8af36b17f886e344140a8b47e4e2ef653f31c786d2eaa7387442f5b606200717
 
 pkgname = plex-media-server

Comment

The change is a straightforward version bump in PKGBUILD: pkgver and the corresponding source checksum placeholders were updated for all architectures. I do not see any new build logic, network behavior, privilege escalation, install-script changes, or packaging red flags introduced by this diff. The security posture remains the same as before; any trust concerns are limited to the usual need to verify the upstream Plex release artifacts, not this PKGBUILD change itself.

@@ -10,8 +10,8 @@
 # Contributor: Praekon <praekon@googlemail.com>
 
 pkgname=plex-media-server
-pkgver=1.43.5.11029
-_pkgsum=6bf8af3f0
+pkgver=1.43.5.11079
+_pkgsum=b3b13e506
 pkgrel=1
 pkgdesc='The back-end media server component of Plex.'
 arch=('x86_64' 'i686' 'armv7h' 'aarch64')

Comment

The change only bumps Plex Media Server to a newer upstream release and updates the corresponding per-architecture SHA256 checksums. No new sources, no build-script logic changes, no added network fetches, and no packaging/install-script behavior changes are introduced in the diff. Based on the provided hunk, this is a routine version/checksum refresh with no evident security regression.

@@ -39,10 +39,10 @@ sha256sums=('398ba7958598609453f5289b3d5f2389d2756158b340cf28e83c39d9ed60280b'
             'c597bee0bcbb59ed791651555a904e5f7e9d2e82f6c6986b6352e5fc38e5b557'
             'b7ff6525a3c7a8be885edc85bb523095f8e25ddb38873127e2a4e97b28f2c7ad'
             'dbfb5a9a7146a975863c0932f1a68c4b040ec5d7e693361f39ddfbf60885e631')
-sha256sums_x86_64=('10bcea4e21088c018a11c018bb017255ba32629803314270d280b96361b283f0')
-sha256sums_i686=('befc40d9979cd002528f6970d658653ca80da10572934636ff1b2aa1bf3ac7b3')
-sha256sums_armv7h=('02fdcf29f378de74905140df0e7671014e764fd09358f9b3e264e4c699a5cb9c')
-sha256sums_aarch64=('b289c218db9c4efa81effab8efb82ca9aba5576f58e95aeb7c485b07db41ec1b')
+sha256sums_x86_64=('3c1939e0225b2a4774a2eda7102f90d2af3caf8a470cc91730e21670865b4562')
+sha256sums_i686=('4a6b5fe0f9b0e4a1e361984218918210eaf7812ce10c559195e5d28ffe373fbc')
+sha256sums_armv7h=('73d1cbca351c47db93d75f996c9ea91257ae04da1d0a3c2dd37ad826f7c87747')
+sha256sums_aarch64=('8af36b17f886e344140a8b47e4e2ef653f31c786d2eaa7387442f5b606200717')
 
 prepare() {
   if [[ $CARCH = armv7h ]] || [[ $CARCH = aarch64 ]]; then