1 files changed, 9 insertions, 3 deletions
diff --git a/PKGBUILD b/PKGBUILD
index 24c7d3de15f1..45b505f276f7 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -3,7 +3,7 @@
 pkgname=h2o-2.2
 _pkgname=h2o
 pkgver=2.2.6
-pkgrel=4
+pkgrel=5
 pkgdesc="Optimized HTTP server with support for HTTP/1.x and HTTP/2"
 arch=('i686' 'x86_64')
 depends=('libuv' 'libyaml' 'openssl' 'wslay' 'zlib')
@@ -11,14 +11,20 @@ makedepends=('gcc' 'bison' 'cmake' 'libtool' 'make' 'pkg-config' 'ruby')
 url="https://github.com/h2o/h2o"
 license=('MIT')
 source=($_pkgname-$pkgver.tar.gz::https://codeload.github.com/h2o/$_pkgname/tar.gz/v${pkgver/_/-}
-        h2o.service)
+        h2o.service
+        CVE-2023-44487.patch::https://github.com/h2o/h2o/commit/770208bbe3955c47e005a1e8cb08266e4a8dfc9a.patch)
 b2sums=('8474751ca9832ddae2022710654ca58a93ebf9ca01afe934950209b04357b7548b05c598c49fe92684b2910fd6309d6fc3923a0b01cdeeb4b0dc65b08842255f'
-        '59b86cec57d06c3754b0634adef46da6b86ce4b251c5f864ab866e94a169ca2ed9357521a9b645ff38ea463ab168b4f07c0104a34945c4f2fb73df837312d5a7')
+        '59b86cec57d06c3754b0634adef46da6b86ce4b251c5f864ab866e94a169ca2ed9357521a9b645ff38ea463ab168b4f07c0104a34945c4f2fb73df837312d5a7'
+        '828182eabdf5f1e5383be9d3d8f22f6129250c7a26cee39ea3204543202b1bf311c7f8c875bfdd29abf2ef1ef10a22bc12ab18d9f0e2f1c24972d34f8635f5f8')
 backup=('etc/h2o.conf')
 options=(!lto)
 provides=('h2o' 'libh2o')
 conflicts=('libh2o' 'h2o' 'h2o-git')
 
+prepare() {
+    patch --directory="$_pkgname-${pkgver/_/-}" --forward --strip=1 --input="${srcdir}/CVE-2023-44487.patch"
+}
+
 build() {
   cd "$srcdir/$_pkgname-${pkgver/_/-}"