diff --git a/poppler/trunk/PKGBUILD b/poppler/trunk/PKGBUILD
index 90154cc5..9a44c02b 100644
--- a/poppler/trunk/PKGBUILD
+++ b/poppler/trunk/PKGBUILD
@@ -4,7 +4,7 @@
 pkgbase=poppler
 pkgname=('poppler' 'poppler-glib' 'poppler-qt5' 'poppler-qt6')
 pkgver=22.08.0
-pkgrel=1
+pkgrel=2
 arch=(x86_64)
 license=('GPL')
 makedepends=('libjpeg' 'gcc-libs' 'cairo' 'fontconfig' 'openjpeg2' 'gtk3' 'pkgconfig' 'lcms2' 
@@ -14,14 +14,19 @@ options=('!emptydirs' 'debug')
 url="https://poppler.freedesktop.org/"
 # https://gitlab.freedesktop.org/poppler/poppler
 source=(https://poppler.freedesktop.org/${pkgbase}-${pkgver}.tar.xz{,.sig}
+        https://gitlab.freedesktop.org/poppler/poppler/-/commit/27354e9d96.patch
         test::git+https://anongit.freedesktop.org/git/poppler/test/#commit=920c89f8f43bdfe8966c8e397e7f67f5302e9435)
 sha256sums=('b493328721402f25cb7523f9cdc2f7d7c59f45ad999bde75c63c90604db0f20b'
             'SKIP'
+            '24dfe6d35cebecadb9032e1f5f3f51c7a6bbe6e2667e18fcc0431c04d6d54766'
             'SKIP')
 validpgpkeys=('CA262C6C83DE4D2FB28A332A3A6A4DB839EAA6D7') # "Albert Astals Cid <aacid@kde.org>"
 
 prepare() {
   mkdir build
+  cd ${pkgname}-${pkgver}
+  # CVE-2022-38171
+  patch -Np1 < ../27354e9d96.patch
 }
 
 build() {