Fix some CVEs

2 files changed, 29 insertions, 9 deletions

diff --git a/.SRCINFO b/.SRCINFO
index f7f64fb7fea1..41a0c21919e9 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,13 +1,20 @@
+# Generated by mksrcinfo v8
+# Sat Jan 26 15:08:43 UTC 2019
 pkgbase = arc
 	pkgdesc = Arc file archiver and compressor. Long since superceeded by zip/unzip but useful if have old .arc files need to unpack.
 	pkgver = 5.21p
-	pkgrel = 3
+	pkgrel = 4
 	url = http://sourceforge.net/projects/arc
-	arch = i686
 	arch = x86_64
 	license = GPL
 	source = http://download.sourceforge.net/arc/arc-5.21p.tar.gz
-	sha1sums = e68e358b86a67c68e8a1cb95a840f380bfda3684
+	source = arc-5.21p-directory-traversel.patch::https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=774527;filename=arc-5.21p-directory-traversel.patch;msg=10
+	source = arc-5.21p-fix-arcdie.patch::https://bugs.debian.org/cgi-bin/bugreport.cgi?att=2;bug=774527;filename=arc-5.21p-fix-arcdie.patch;msg=10
+	source = arc-5.21p-hdrv1-read-fix.patch::https://bugs.debian.org/cgi-bin/bugreport.cgi?att=3;bug=774527;filename=arc-5.21p-hdrv1-read-fix.patch;msg=10
+	sha256sums = eacf870a245f155a4ba8c6f8e0fbb2e8a267aafa157f56ba7a8cb1d74fd8b5a1
+	sha256sums = a2b96695d5714c7c74d47809e01eded3d95c31dc9b435de47cb3c8f4693f0cb4
+	sha256sums = bcaa49fae5c139792e8a7117c03c357e0cfc135844f31fcb7c2cbdd8bf407a5e
+	sha256sums = b7d4adbb6b32c46929a6f69a53d983449276d0ffcc59d4ce53cde0a1939accd6
 
 pkgname = arc
 
diff --git a/PKGBUILD b/PKGBUILD
index bdcd373d8a8b..cc60eba877e5 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -3,19 +3,32 @@
 
 pkgname=arc
 pkgver=5.21p
-pkgrel=3
+pkgrel=4
 pkgdesc="Arc file archiver and compressor. Long since superceeded by zip/unzip but useful if have old .arc files need to unpack."
-arch=('i686' 'x86_64')
+arch=('x86_64')
 url='http://sourceforge.net/projects/arc'
 license=('GPL')
-source=("http://download.sourceforge.net/${pkgname}/${pkgname}-${pkgver}.tar.gz")
-sha1sums=('e68e358b86a67c68e8a1cb95a840f380bfda3684')
+source=("http://download.sourceforge.net/arc/arc-${pkgver}.tar.gz"
+        'arc-5.21p-directory-traversel.patch::https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=774527;filename=arc-5.21p-directory-traversel.patch;msg=10'
+        'arc-5.21p-fix-arcdie.patch::https://bugs.debian.org/cgi-bin/bugreport.cgi?att=2;bug=774527;filename=arc-5.21p-fix-arcdie.patch;msg=10'
+        'arc-5.21p-hdrv1-read-fix.patch::https://bugs.debian.org/cgi-bin/bugreport.cgi?att=3;bug=774527;filename=arc-5.21p-hdrv1-read-fix.patch;msg=10'
+        )
+sha256sums=('eacf870a245f155a4ba8c6f8e0fbb2e8a267aafa157f56ba7a8cb1d74fd8b5a1'
+            'a2b96695d5714c7c74d47809e01eded3d95c31dc9b435de47cb3c8f4693f0cb4'
+            'bcaa49fae5c139792e8a7117c03c357e0cfc135844f31fcb7c2cbdd8bf407a5e'
+            'b7d4adbb6b32c46929a6f69a53d983449276d0ffcc59d4ce53cde0a1939accd6'
+            )
 
+prepare() {
+  patch -d "arc-${pkgver}" -p1 -i "${srcdir}/arc-5.21p-hdrv1-read-fix.patch"
+  patch -d "arc-${pkgver}" -p1 -i "${srcdir}/arc-5.21p-fix-arcdie.patch"
+  patch -d "arc-${pkgver}" -p1 -i "${srcdir}/arc-5.21p-directory-traversel.patch"
+}
 
 build() {
-  make -C "${pkgname}-${pkgver}"
+  make -C "arc-${pkgver}"
 }
 
 package() {
-  make -C "${pkgname}-${pkgver}" PREFIX=/usr DESTDIR="${pkgdir}" install
+  make -C "arc-${pkgver}" PREFIX=/usr DESTDIR="${pkgdir}" install
 }