This fixes CVE-2022-24884. Also update the package URL to match the source repository. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> (cherry picked from commit de5671e582)
de5671e582