upgpkg: wordpress-git 5.2.1.r75.gce21465841-2

2 files changed, 14 insertions, 4 deletions

diff --git a/.SRCINFO b/.SRCINFO
index d8d9c8dcf3c4..a3edb08eb0fe 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,7 +1,7 @@
 pkgbase = wordpress-git
 	pkgdesc = Blog tool, publishing platform and CMS
 	pkgver = 5.2.1.r75.gce21465841
-	pkgrel = 1
+	pkgrel = 2
 	url = https://wordpress.org/
 	install = wordpress.install
 	arch = any
@@ -14,6 +14,8 @@ pkgbase = wordpress-git
 	provides = wordpress
 	conflicts = wordpress
 	source = git://core.git.wordpress.org/
+	source = password_reset_exploit.patch::https://git.archlinux.org/svntogit/community.git/plain/trunk/password_reset_exploit.patch?h=packages/wordpress
+	sha256sums = SKIP
 	sha256sums = SKIP
 
 pkgname = wordpress-git
diff --git a/PKGBUILD b/PKGBUILD
index 110dd8485f64..7d97f6050a84 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -2,7 +2,7 @@
 
 pkgname=wordpress-git
 pkgver=5.2.1.r75.gce21465841
-pkgrel=1
+pkgrel=2
 pkgdesc="Blog tool, publishing platform and CMS"
 arch=('any')
 url="https://wordpress.org/"
@@ -15,10 +15,18 @@ optdepends=('apache: Web server for serving WordPress'
 provides=('wordpress')
 conflicts=('wordpress')
 install=wordpress.install
-source=("git://core.git.wordpress.org/")
-sha256sums=('SKIP')
+source=("git://core.git.wordpress.org/"
+        "password_reset_exploit.patch::https://git.archlinux.org/svntogit/community.git/plain/trunk/password_reset_exploit.patch?h=packages/wordpress")
+sha256sums=('SKIP'
+            'SKIP')
 
 
+prepare() {
+  cd "core"
+
+  patch -Np1 -i "$srcdir/password_reset_exploit.patch"
+}
+
 pkgver() {
   cd "core"