--- PKGBUILD.orig	2021-03-16 09:37:13.317711074 +0100
+++ PKGBUILD	2021-03-16 09:54:32.859170639 +0100
@@ -6,7 +6,7 @@
 
 pkgname=libssh2
 pkgver=1.9.0
-pkgrel=2
+pkgrel=3
 pkgdesc="A library implementing the SSH2 protocol as defined by Internet Drafts"
 url="https://www.libssh2.org/"
 arch=('x86_64')
@@ -15,9 +15,16 @@
 provides=('libssh2.so')
 validpgpkeys=('27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2'   # Daniel Stenberg
               '914C533DF9B2ADA2204F586D78E11C6B279D5C91')  # Daniel Stenberg (old key)
-source=("https://www.libssh2.org/download/$pkgname-$pkgver.tar.gz"{,.asc})
-md5sums=('1beefafe8963982adc84b408b2959927'
-         'SKIP')
+source=("https://www.libssh2.org/download/$pkgname-$pkgver.tar.gz"{,.asc}
+        'CVE-2019-17498.patch::https://github.com/libssh2/libssh2/commit/1c6fa92b77e34d089493fe6d3e2c6c8775858b94.patch')
+sha256sums=('d5fb8bd563305fd1074dda90bd053fb2d29fc4bce048d182f96eaa466dfadafd'
+            'SKIP'
+            'c5de5f8ae901675c66deb5a7c9a1b30ca0bcd66e9de7aedff04fb29263d635c9')
+
+prepare() {
+  cd "${pkgname}-${pkgver}"
+  patch --forward --strip=1 --input="${srcdir}/CVE-2019-17498.patch"
+}
 
 build() {
   cd "$pkgname-$pkgver"
@@ -26,6 +33,10 @@
   make
 }
 
+check() {
+  make -C "$pkgname-$pkgver" check
+}
+
 package() {
   cd "$pkgname-$pkgver"