Review Results

Comment

The change only bumps the package version and resets pkgrel in .SRCINFO from 4.5.0-2 to 4.6.1-1. No sources, checksums, install scripts, build commands, or packaging metadata affecting trust boundaries were changed in the provided hunk. Based on this diff alone, there is no security-relevant issue to flag.

@@ -1,7 +1,7 @@
 pkgbase = netatalk
 	pkgdesc = Open-source implementation of the Apple Filing Protocol
-	pkgver = 4.5.0
-	pkgrel = 2
+	pkgver = 4.6.1
+	pkgrel = 1
 	url = https://netatalk.io
 	arch = x86_64
 	arch = i686

Comment

The change is a straightforward version bump in .SRCINFO from netatalk 4.5.0 to 4.6.1, with the source URL updated to the corresponding official GitHub release tarball and the checksum updated accordingly. No new sources, build-time network fetches, scripts, or packaging behavior are introduced in this diff. Based on the provided hunk alone, there are no security red flags.

@@ -48,7 +48,7 @@ pkgbase = netatalk
 	backup = etc/macipgw.conf
 	backup = etc/papd.conf
 	backup = etc/pam.d/netatalk
-	source = https://github.com/Netatalk/netatalk/releases/download/netatalk-4-5-0/netatalk-4.5.0.tar.xz
-	md5sums = d5578640a87c5366f0ec0b948aa1dcbe
+	source = https://github.com/Netatalk/netatalk/releases/download/netatalk-4-6-1/netatalk-4.6.1.tar.xz
+	md5sums = 522e2f475fbfc8a4a71c3109a2e3e938
 
 pkgname = netatalk

Comment

The change is a straightforward version bump of the upstream tarball from 4.5.0 to 4.6.1 with an updated checksum. The source remains an HTTPS GitHub release URL for the official project, and there are no new build-time commands, extra sources, install scripts, or packaging changes that would introduce persistence, privilege escalation, or network-fetch behavior. Based on the provided diff, this looks low risk.

@@ -5,15 +5,15 @@
 # Contributor: Farhan Yousaf <farhany at xaviya dot com>
 
 pkgname=netatalk
-pkgver=4.5.0
-pkgrel=2
+pkgver=4.6.1
+pkgrel=1
 pkgdesc='Open-source implementation of the Apple Filing Protocol'
 url='https://netatalk.io'
 license=('GPL-2.0-or-later')
 
 source=("https://github.com/Netatalk/${pkgname}/releases/download/${pkgname}-${pkgver//./-}/${pkgname}-${pkgver}.tar.xz")
 
-md5sums=('d5578640a87c5366f0ec0b948aa1dcbe')
+md5sums=('522e2f475fbfc8a4a71c3109a2e3e938')
 
 arch=('x86_64' 'i686' 'pentium4' 'armv6h' 'armv7h' 'aarch64')