From 80f10cc846f8a15e7eb134b5e56648c6806edea9 Mon Sep 17 00:00:00 2001
From: Kamil Dudka <kdudka@redhat.com>
Date: Tue, 4 Sep 2018 16:04:45 +0200
Subject: [PATCH] update to latest upstream release: 5.6

Resolves: CVE-2018-0502
Resolves: CVE-2018-13259
---
 sources              |  2 +-
 zsh-5.5.1.tar.xz.asc | 11 -----------
 zsh-5.6.tar.xz.asc   | 16 ++++++++++++++++
 zsh.spec             |  7 +++++--
 4 files changed, 22 insertions(+), 14 deletions(-)
 delete mode 100644 zsh-5.5.1.tar.xz.asc
 create mode 100644 zsh-5.6.tar.xz.asc

diff --git a/sources b/sources
index 97eb4a1..e562bd1 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (zsh-5.5.1.tar.xz) = 37156ff682f8ec337526c8f93a0a2031000bb0b4b2a59e04158aae3f0fb667f4d9898d6f2bae8abe3dd2839f760f2e335484e016564a4a59097273a1f64da0c2
+SHA512 (zsh-5.6.tar.xz) = 791cbeff45a5ef86608341147724f8b301a50eae1500f94eaaef1074c14c516c32d3f5628b8b16dbe42b7ad812c1a221240c1d4c5cd240144a00976c196f0735
diff --git a/zsh-5.5.1.tar.xz.asc b/zsh-5.5.1.tar.xz.asc
deleted file mode 100644
index c4f8955..0000000
--- a/zsh-5.5.1.tar.xz.asc
+++ /dev/null
@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iQEcBAABCAAGBQJa1Op5AAoJEKcdmp1L2yezMOoH/3d9WE9GurXK9ZLF/IF3RZjj
-G82A1FIylBIO+JCbZLHLqX359HNC42/6p/DuzrgtfTJpSXLKGyNeiuKDhLWD75B9
-mpVfOeNXXWyyxgT0NW9L2mPYOUfwn4GyYO/+CC7z68fCLoXDGjTDIkPZOEIPHhvg
-/QWD/0qCRcBr1OaDKowtRS4+Dvj5AH0YRzWYuqPYMPcDfZ20IVZ2HPKROir9coGu
-PyI5ToAswA6OFwCsq4WGgwUno2JiaOoFDR0imkNetvkqz7RXgwghu8r+a6GPPWOf
-eydUuUmvlj0COoeAJmJ8KL2u6GnVgUmTCswo3VNOpUE9USxcP0oB44+SyeZ6KDk=
-=uo1d
------END PGP SIGNATURE-----
diff --git a/zsh-5.6.tar.xz.asc b/zsh-5.6.tar.xz.asc
new file mode 100644
index 0000000..19699dc
--- /dev/null
+++ b/zsh-5.6.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=1CeE
+-----END PGP SIGNATURE-----
diff --git a/zsh.spec b/zsh.spec
index 2d13c7e..3122a27 100644
--- a/zsh.spec
+++ b/zsh.spec
@@ -1,7 +1,7 @@
 Summary: Powerful interactive shell
 Name: zsh
-Version: 5.5.1
-Release: 2%{?dist}
+Version: 5.6
+Release: 1%{?dist}
 License: MIT
 URL: http://zsh.sourceforge.net/
 Source0: https://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.xz
@@ -167,6 +167,9 @@ fi
 %doc Doc/*.html
 
 %changelog
+* Tue Sep 04 2018 Kamil Dudka <kdudka@redhat.com> - 5.6-1
+- update to latest upstream release (fixes CVE-2018-0502 and CVE-2018-13259)
+
 * Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 5.5.1-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild