[arch-commits] Commit in messagelib/trunk (PKGBUILD)

[Antonio Rojas]

    Date: Thursday, April 29, 2021 @ 20:52:32
  Author: arojas
Revision: 414015

Fix CVE-2021-31855

Modified:
  messagelib/trunk/PKGBUILD

----------+
 PKGBUILD |   12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2021-04-29 18:43:41 UTC (rev 414014)
+++ PKGBUILD	2021-04-29 20:52:32 UTC (rev 414015)
@@ -2,7 +2,7 @@
 
 pkgname=messagelib
 pkgver=21.04.0
-pkgrel=1
+pkgrel=2
 pkgdesc='KDE PIM messaging library'
 arch=(x86_64)
 url='https://kontact.kde.org'
@@ -9,13 +9,19 @@
 license=(LGPL)
 depends=(kmailtransport libgravatar kidentitymanagement kmbox qca)
 makedepends=(extra-cmake-modules boost)
-source=(https://download.kde.org/stable/release-service/$pkgver/src/$pkgname-$pkgver.tar.xz{,.sig})
+source=(https://download.kde.org/stable/release-service/$pkgver/src/$pkgname-$pkgver.tar.xz{,.sig}
+        CVE-2021-31855.patch::https://invent.kde.org/pim/messagelib/commit/3b5b171e.patch)
 sha256sums=('2fa33e75aef77ce89f91a777b14dafe9f51fffc431dfd975767e830167c65be3'
-            'SKIP')
+            'SKIP'
+            'a44b119ea2bcc80a131dc8c62cc54f7358c0811e48251c6681b3f8cb877a55b1')
 validpgpkeys=(CA262C6C83DE4D2FB28A332A3A6A4DB839EAA6D7  # Albert Astals Cid <aacid at kde.org>
               F23275E4BF10AFC1DF6914A6DBD2CE893E2D1C87  # Christoph Feck <cfeck at kde.org>
               D81C0CB38EB725EF6691C385BB463350D6EF31EF) # Heiko Becker <heiko.becker at kde.org>
 
+prepare() {
+  patch -d $pkgname-$pkgver -p1 < CVE-2021-31855.patch
+}
+
 build() {
   cmake -B build -S $pkgname-$pkgver \
     -DBUILD_TESTING=OFF