diff --git a/PKGBUILD b/PKGBUILD
index 9f5edd9..50520e4 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -13,16 +13,21 @@ groups=('base')
 depends=('sh' 'libutil-linux')
 makedepends=('bc' 'util-linux')
 source=("http://downloads.sourceforge.net/sourceforge/${pkgname}/${pkgname}-${pkgver}.tar.gz"
+	'e2fsprogs-CVE-2015-1572.patch::https://git.kernel.org/cgit/fs/ext2/e2fsprogs.git/patch/?id=49d0fe2a14f2a23da2fe299643379b8c1d37df73'
         'MIT-LICENSE')
 backup=('etc/mke2fs.conf')
 options=('staticlibs')
 install=${pkgname}.install
 sha1sums=('083c1bb0d1e85672e8038a2fadf70b24e7409db7'
+          '7d0a46b59ea298e517f983f8ff67d29a0307f1ba'
           'f4a0d5b0cdb980e3fedd6f5e7dde0b0ffb7bbdfb')
 
 prepare() {
   cd "${srcdir}/${pkgname}-${pkgver}"
 
+  # fix CVE-2015-1572
+  patch -Np1 < "${srcdir}/e2fsprogs-CVE-2015-1572.patch"
+
   # Remove unnecessary init.d directory
   sed -i '/init\.d/s|^|#|' misc/Makefile.in
 }