diff --git a/lrzip/trunk/PKGBUILD b/lrzip/trunk/PKGBUILD
index 0b54dc3d..ad250bd8 100644
--- a/lrzip/trunk/PKGBUILD
+++ b/lrzip/trunk/PKGBUILD
@@ -3,8 +3,8 @@
 # Contributor: <kastor@fobos.org.ar>
 
 pkgname=lrzip
-pkgver=0.641
-pkgrel=2
+pkgver=0.651
+pkgrel=1
 pkgdesc='Multi-threaded compression with rzip/lzma, lzo, and zpaq'
 url='https://github.com/ckolivas/lrzip'
 license=('GPL')
@@ -14,6 +14,12 @@ makedepends=('git')
 source=("git+https://github.com/ckolivas/lrzip#tag=v$pkgver")
 sha256sums=('SKIP')
 
+prepare() {
+  cd "$pkgname"
+  # CVE-2018-5786
+  git cherry-pick -n 3495188cd8f2215a9feea201f3e05c1341ed95fb
+}
+
 build() {
   cd "$pkgname"