[arch-commits] Commit in ark/trunk (PKGBUILD)

[Antonio Rojas]

    Date: Thursday, July 30, 2020 @ 06:05:55
  Author: arojas
Revision: 392721

Fix CVE-2020-16116

Modified:
  ark/trunk/PKGBUILD

----------+
 PKGBUILD |   12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2020-07-29 22:39:27 UTC (rev 392720)
+++ PKGBUILD	2020-07-30 06:05:55 UTC (rev 392721)
@@ -4,7 +4,7 @@
 
 pkgname=ark
 pkgver=20.04.3
-pkgrel=1
+pkgrel=2
 pkgdesc='Archiving Tool'
 arch=(x86_64)
 url='https://kde.org/applications/utilities/ark/'
@@ -14,12 +14,18 @@
 optdepends=('p7zip: 7Z format support' 'unrar: RAR decompression support' 'unarchiver: RAR format support'
             'lzop: LZO format support' 'lrzip: LRZ format support')
 groups=(kde-applications kde-utilities)
-source=("https://download.kde.org/stable/release-service/$pkgver/src/$pkgname-$pkgver.tar.xz"{,.sig})
+source=("https://download.kde.org/stable/release-service/$pkgver/src/$pkgname-$pkgver.tar.xz"{,.sig}
+         CVE-2020-16116.patch::"https://invent.kde.org/utilities/ark/-/commit/0df59252.patch")
 sha256sums=('e7251b0b6f12291ffbaa328bf7f8e101ebeef6fd110dabbcf76d8ad7cfd305bc'
-            'SKIP')
+            'SKIP'
+            'e7ed5bf094e85af9320c6b0be02a858dfa95c06c8f642bad112fe17e16d68a87')
 validpgpkeys=(CA262C6C83DE4D2FB28A332A3A6A4DB839EAA6D7  # Albert Astals Cid <aacid at kde.org>
               F23275E4BF10AFC1DF6914A6DBD2CE893E2D1C87) # Christoph Feck <cfeck at kde.org>
 
+prepare() {
+  patch -d $pkgname-$pkgver -p1 -i ../CVE-2020-16116.patch
+}
+
 build() { 
   cmake -B build -S $pkgname-$pkgver \
     -DBUILD_TESTING=OFF