Review Results

Comment

The only change in this diff is a version bump in .SRCINFO from 2.4.70 to 2.4.71. No build logic, sources, checksums, install scripts, or packaging behavior changed in the reviewed hunk. .SRCINFO is metadata only, so this change does not introduce a security concern by itself. One minor note is that the URL remains HTTP in metadata, but that is pre-existing and unchanged here.

@@ -1,6 +1,6 @@
 pkgbase = apache-tools
 	pkgdesc = Useful Apache tools - htdigest, htpasswd, ab (Apache Benchmark), htdbm
-	pkgver = 2.4.70
+	pkgver = 2.4.71
 	pkgrel = 1
 	url = http://httpd.apache.org/
 	arch = i686

Comment

The change is a straightforward upstream version bump in .SRCINFO from httpd 2.4.70 to 2.4.71 with the corresponding checksum update. The source remains an HTTPS download from the official Apache CDN, and there are no new sources, scripts, build steps, or privilege-related changes introduced in this diff. Based on the provided hunk alone, this does not add security risk beyond the normal trust in the upstream tarball.

@@ -14,9 +14,9 @@ pkgbase = apache-tools
 	depends = apr-util
 	depends = pcre
 	conflicts = apache
-	source = https://dlcdn.apache.org/httpd/httpd-2.4.70.tar.bz2
+	source = https://dlcdn.apache.org/httpd/httpd-2.4.71.tar.bz2
 	source = apache-tools-Makefile.patch
-	sha256sums = 1eefd7dc95836c5872894ce8e6a37f773d5a6764f0766869d39b8bcf0b1bafc3
+	sha256sums = 2bc5da5a33c247341de082717d4ebcb5cb49e8b73a05b7fddf7d5d6dc2f8de62
 	sha256sums = 2dc48d34773b0c873d10e3542f77a4f7b50d5fb9bd8c52e3bb28b76ff9587f3f
 
 pkgname = apache-tools

Comment

The change is a straightforward version bump in PKGBUILD from 2.4.70 to 2.4.71 with no accompanying changes to sources, build logic, install scripts, dependencies, or packaging behavior. Based on the provided diff, there are no new security red flags such as added network fetches, privilege changes, or suspicious artifacts.

@@ -1,5 +1,5 @@
 pkgname=apache-tools
-pkgver=2.4.70
+pkgver=2.4.71
 pkgrel=1
 pkgdesc="Useful Apache tools - htdigest, htpasswd, ab (Apache Benchmark), htdbm"
 arch=("i686" "x86_64" "armv6h" "armv7h" "aarch64")

Comment

The change is a routine upstream version bump from httpd 2.4.70 to 2.4.71 with the corresponding SHA-256 checksum update. The source remains the official Apache CDN over HTTPS, and there are no new build steps, scripts, or privilege-related changes in the diff. No security red flags are introduced by this hunk.

@@ -11,7 +11,7 @@ conflicts=(apache)
 #source=("https://downloads.apache.org/httpd/httpd-$pkgver.tar.bz2"
 source=("https://dlcdn.apache.org/httpd/httpd-$pkgver.tar.bz2"
         "$pkgname-Makefile.patch")
-sha256sums=('1eefd7dc95836c5872894ce8e6a37f773d5a6764f0766869d39b8bcf0b1bafc3'
+sha256sums=('2bc5da5a33c247341de082717d4ebcb5cb49e8b73a05b7fddf7d5d6dc2f8de62'
             '2dc48d34773b0c873d10e3542f77a4f7b50d5fb9bd8c52e3bb28b76ff9587f3f')
 
 prepare() {