Date: Monday, February 27, 2023 @ 13:57:39 Author: arojas Revision: 1405483
upgpkg: qbittorrent 4.5.1-2: Fix path traversal vulnerability Modified: qbittorrent/trunk/PKGBUILD ----------+ PKGBUILD | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2023-02-27 13:50:26 UTC (rev 1405482) +++ PKGBUILD 2023-02-27 13:57:39 UTC (rev 1405483) @@ -10,7 +10,7 @@ pkgbase=qbittorrent pkgname=(qbittorrent qbittorrent-nox) pkgver=4.5.1 -pkgrel=1 +pkgrel=2 arch=(x86_64) url='https://www.qbittorrent.org' license=(custom GPL) @@ -17,11 +17,17 @@ depends=(libtorrent-rasterbar qt6-base) makedepends=(cmake boost qt6-tools qt6-svg) optdepends=('python: needed for torrent search tab') -source=(https://downloads.sourceforge.net/sourceforge/qbittorrent/${pkgname}-${pkgver}.tar.xz{,.asc}) +source=(https://downloads.sourceforge.net/sourceforge/qbittorrent/${pkgname}-${pkgver}.tar.xz{,.asc} + https://github.com/qbittorrent/qBittorrent/commit/58a654a7.patch) sha256sums=('0527a5887454d6a5f386846f3c73029a6fbeec3d1a4c92e1dc485c485c16add0' - 'SKIP') + 'SKIP' + '598069b8937eda072635dbf1172505e6c05dbdc2b947edc26cf3febde82752a2') validpgpkeys=('D8F3DA77AAC6741053599C136E4A2D025B7CC9A2') # sledgehammer999 <[email protected]> +prepare() { + patch -d $pkgbase-$pkgver -p1 < 58a654a7.patch # https://github.com/qbittorrent/qBittorrent/issues/18618 +} + build() { cmake -B build -S $pkgbase-$pkgver \ -DCMAKE_INSTALL_PREFIX=/usr \
