new file mode 100644

@@ -0,0 +1,32 @@

+https://sourceforge.net/p/zsh/code/ci/259ac472eac291c8c103c7a0d8a4eaf3c2942ed7

+Commit [259ac4]  Maximize  History

+42519, CVE-2018-1083: check bounds on PATH_MAX-sized buffer used for file completion candidates

+--- a/Src/Zle/compctl.c

+@@ -2176,6 +2176,8 @@

+     if (prpre && *prpre) {

+ 	pathpref = dupstring(prpre);

+ 	unmetafy(pathpref, &pathpreflen);

++	if (pathpreflen > PATH_MAX)

++	    return;

+ 	/* system needs NULL termination, not provided by unmetafy */

+ 	pathpref[pathpreflen] = '\0';

+     } else {

+@@ -2218,6 +2220,8 @@

+ 		     * the path buffer by appending the filename.       */

+ 		    ums = dupstring(n);

+ 		    unmetafy(ums, &umlen);

++		    if (umlen + pathpreflen + 1 > PATH_MAX)

++			continue;

+ 		    memcpy(q, ums, umlen);

+ 		    q[umlen] = '\0';

+ 		    /* And do the stat. */

+@@ -2232,6 +2236,8 @@

+ 			/* We have to test for a path suffix. */

+ 			int o = strlen(p), tt;

+ 

++			if (o + strlen(psuf) > PATH_MAX)

++			    continue;

+ 			/* Append it to the path buffer. */

+ 			strcpy(p + o, psuf);

+ 

\ No newline at end of file

@@ -3,7 +3,7 @@

 Summary:      Z shell

 Name:         zsh

 Version:      5.3.1

-Release:      6%{?dist}

+Release:      7%{?dist}

 License:      MIT

 URL:          http://zsh.sourceforge.net/

 Group:        System Environment/Shells

@@ -15,6 +15,7 @@ Source1:      zprofile.rhs

 Source2:      zshrc

 Patch0:       zsh-CVE-2018-7548.patch

 Patch1:       zsh-CVE-2018-7549.patch

+Patch2:       zsh-CVE-2018-1083.patch

 BuildRequires: coreutils

 BuildRequires: tar

@@ -62,6 +63,7 @@ This package contains the Zsh manual in html format.

 %setup -q

 %patch0 -p1

 %patch1 -p1

+%patch2 -p1

 %build

 # make loading of module's dependencies work again (#1277996)

@@ -148,6 +150,8 @@ fi

 %doc Doc/*.html

 %changelog

+*   Tue Apr 24 2018 Xiaolin Li <xiaolinl@vmware.com> 5.3.1-7

+-   Fix CVE-2018-1083

 *   Tue Apr 17 2018 Xiaolin Li <xiaolinl@vmware.com> 5.3.1-6

 -   Fix CVE-2018-7549

 *   Mon Mar 19 2018 Xiaolin Li <xiaolinl@vmware.com> 5.3.1-5