Date: Thursday, April 29, 2021 @ 20:52:32 Author: arojas Revision: 414015
Fix CVE-2021-31855 Modified: messagelib/trunk/PKGBUILD ----------+ PKGBUILD | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2021-04-29 18:43:41 UTC (rev 414014) +++ PKGBUILD 2021-04-29 20:52:32 UTC (rev 414015) @@ -2,7 +2,7 @@ pkgname=messagelib pkgver=21.04.0 -pkgrel=1 +pkgrel=2 pkgdesc='KDE PIM messaging library' arch=(x86_64) url='https://kontact.kde.org' @@ -9,13 +9,19 @@ license=(LGPL) depends=(kmailtransport libgravatar kidentitymanagement kmbox qca) makedepends=(extra-cmake-modules boost) -source=(https://download.kde.org/stable/release-service/$pkgver/src/$pkgname-$pkgver.tar.xz{,.sig}) +source=(https://download.kde.org/stable/release-service/$pkgver/src/$pkgname-$pkgver.tar.xz{,.sig} + CVE-2021-31855.patch::https://invent.kde.org/pim/messagelib/commit/3b5b171e.patch) sha256sums=('2fa33e75aef77ce89f91a777b14dafe9f51fffc431dfd975767e830167c65be3' - 'SKIP') + 'SKIP' + 'a44b119ea2bcc80a131dc8c62cc54f7358c0811e48251c6681b3f8cb877a55b1') validpgpkeys=(CA262C6C83DE4D2FB28A332A3A6A4DB839EAA6D7 # Albert Astals Cid <[email protected]> F23275E4BF10AFC1DF6914A6DBD2CE893E2D1C87 # Christoph Feck <[email protected]> D81C0CB38EB725EF6691C385BB463350D6EF31EF) # Heiko Becker <[email protected]> +prepare() { + patch -d $pkgname-$pkgver -p1 < CVE-2021-31855.patch +} + build() { cmake -B build -S $pkgname-$pkgver \ -DBUILD_TESTING=OFF
