Review Results

Comment

The only change in this diff is a version bump in .SRCINFO from 1.5.1 to 1.5.3. .SRCINFO is generated metadata and this hunk does not introduce any new sources, build steps, install scripts, permissions, or other executable content. No security-relevant behavior changes are visible in the provided diff.

@@ -1,6 +1,6 @@
 pkgbase = rustdesk-bin
 	pkgdesc = Yet another remote desktop software, written in Rust. Works out of the box, no configuration required.
-	pkgver = 1.5.1
+	pkgver = 1.5.3
 	pkgrel = 1
 	url = https://github.com/rustdesk/rustdesk
 	install = rustdesk-bin.install

Comment

The change is a straightforward version bump in .SRCINFO from RustDesk 1.5.1 to 1.5.3, with updated checksums and the same GitHub release URLs over HTTPS. No new sources, scripts, build steps, or packaging behavior are introduced by this diff. The only residual concern is that this is a prebuilt binary package, but that risk already existed and is not increased by this change.

@@ -24,9 +24,9 @@ pkgbase = rustdesk-bin
 	options = !strip
 	options = !lto
 	options = !debug
-	source_x86_64 = rustdesk-1.5.1-1-x86_64.pkg.tar.zst::https://github.com/rustdesk/rustdesk/releases/download/1.5.1/rustdesk-1.5.1-0-x86_64.pkg.tar.zst
-	sha256sums_x86_64 = b1dcad4d23ac91b6ce662a2a1495d69a92b5b1ae5d7b6c5b0e11a6cbfc9cccac
-	source_aarch64 = rustdesk-1.5.1-1-aarch64.rpm::https://github.com/rustdesk/rustdesk/releases/download/1.5.1/rustdesk-1.5.1-0.aarch64.rpm
-	sha256sums_aarch64 = b26753b64c9fcb26855bb9bd1fbefc22c146875d2376f892581ab6d79764f669
+	source_x86_64 = rustdesk-1.5.3-1-x86_64.pkg.tar.zst::https://github.com/rustdesk/rustdesk/releases/download/1.5.3/rustdesk-1.5.3-0-x86_64.pkg.tar.zst
+	sha256sums_x86_64 = e880bc2c3dfb5e22a4a9418945fbe963453f7579bc5692237f24cb59eb1a278f
+	source_aarch64 = rustdesk-1.5.3-1-aarch64.rpm::https://github.com/rustdesk/rustdesk/releases/download/1.5.3/rustdesk-1.5.3-0.aarch64.rpm
+	sha256sums_aarch64 = a36cb8ff424896ffd10df9e9cd8d73b6a00a70128202ac2b550169ff84dd6868
 
 pkgname = rustdesk-bin

Comment

The change only bumps rustdesk-bin from 1.5.1 to 1.5.3 and updates the corresponding SHA-256 checksums for the prebuilt upstream release artifacts. The source URLs remain HTTPS and point to the official GitHub releases for rustdesk, with no new build-time code execution, no added scripts, and no packaging logic changes. This is a routine version/checksum update with low security risk.

@@ -6,7 +6,7 @@
 
 pkgbase=rustdesk-bin
 pkgname=(rustdesk-bin)
-pkgver=1.5.1
+pkgver=1.5.3
 pkgrel=1
 pkgdesc="Yet another remote desktop software, written in Rust. Works out of the box, no configuration required."
 url="https://github.com/rustdesk/rustdesk"

Comment

The change only updates the SHA-256 checksums for the prebuilt upstream release artifacts referenced by HTTPS URLs. No new sources, build steps, scripts, permissions, or packaging logic were introduced. This is a routine integrity update and does not by itself indicate malicious behavior.

@@ -33,8 +33,8 @@ optdepends=(
 options=('!strip' '!lto' '!debug')
 source_x86_64=("${pkgbase%-bin}-${pkgver}-${pkgrel}-x86_64.pkg.tar.zst::$url/releases/download/${pkgver/_/-}/rustdesk-${pkgver/_/-}-0-x86_64.pkg.tar.zst")
 source_aarch64=("${pkgbase%-bin}-${pkgver}-${pkgrel}-aarch64.rpm::$url/releases/download/${pkgver/_/-}/rustdesk-${pkgver/_/-}-0.aarch64.rpm")
-sha256sums_x86_64=('b1dcad4d23ac91b6ce662a2a1495d69a92b5b1ae5d7b6c5b0e11a6cbfc9cccac')
-sha256sums_aarch64=('b26753b64c9fcb26855bb9bd1fbefc22c146875d2376f892581ab6d79764f669')
+sha256sums_x86_64=('e880bc2c3dfb5e22a4a9418945fbe963453f7579bc5692237f24cb59eb1a278f')
+sha256sums_aarch64=('a36cb8ff424896ffd10df9e9cd8d73b6a00a70128202ac2b550169ff84dd6868')
 
 install=$pkgname.install