diff --git a/firejail/trunk/PKGBUILD b/firejail/trunk/PKGBUILD
index 2fc7472e187..8570dd44b46 100644
--- a/firejail/trunk/PKGBUILD
+++ b/firejail/trunk/PKGBUILD
@@ -3,7 +3,7 @@
 
 pkgname=firejail
 pkgver=0.9.62
-pkgrel=1
+pkgrel=2
 pkgdesc="Linux namespaces sandbox program"
 arch=(x86_64)
 license=(GPL2)
@@ -15,9 +15,21 @@ depends=('apparmor')
 validpgpkeys=('F951164995F5C4006A73411E2CCB36ADFC5849A7')
 install=firejail.install
 #source=(${pkgname}-${pkgver}.tar.gz::https://github.com/netblue30/${pkgname}/archive/$pkgver.tar.gz)
-source=(https://sourceforge.net/projects/firejail/files/firejail/firejail-${pkgver}.tar.xz{,.asc})
+source=(https://sourceforge.net/projects/firejail/files/firejail/firejail-${pkgver}.tar.xz{,.asc}
+https://github.com/netblue30/firejail/commit/2c734d6350ad321fccbefc5ef0382199ac331b37.patch
+https://github.com/netblue30/firejail/commit/34193604fed04cad2b7b6b0f1a3a0428afd9ed5b.patch)
 sha256sums=('0568081ce950c5240e1b2fca7014b798f589657249e17283a14e20e41f8d5ae0'
-            'SKIP')
+            'SKIP'
+            '131d87e6816bd687535111e3b31b46b23a79c71eca76584ceef46464b83d10d5'
+            '982eb1690454c6c7daef0d0860c5d513dc3b88d54d6cda87a6610cc9c2601ac9')
+
+prepare() {
+	cd "${srcdir}/${pkgname}-${pkgver}"
+	# CVE-2020-17367
+	patch -Np1 < ../2c734d6350ad321fccbefc5ef0382199ac331b37.patch
+	# CVE-2020-17368
+	patch -Np1 < ../34193604fed04cad2b7b6b0f1a3a0428afd9ed5b.patch
+}
 
 build() {
 	cd "${srcdir}/${pkgname}-${pkgver}"