diff --git a/zlib/trunk/PKGBUILD b/zlib/trunk/PKGBUILD
index 31d6ac079..ab2a16c86 100644
--- a/zlib/trunk/PKGBUILD
+++ b/zlib/trunk/PKGBUILD
@@ -4,19 +4,25 @@ pkgbase=zlib
 pkgname=(zlib minizip)
 epoch=1
 pkgver=1.2.11
-pkgrel=5
+pkgrel=6
 arch=('x86_64')
 license=('custom')
 url="https://www.zlib.net/"
 depends=('glibc')
 options=('staticlibs')  # needed by binutils testsuite
-source=("https://zlib.net/zlib-${pkgver}.tar.gz"{,.asc})
+source=("https://zlib.net/zlib-${pkgver}.tar.gz"{,.asc}
+         https://github.com/madler/zlib/commit/5c44459c3b.diff)
 sha256sums=('c3e5e9fdd5004dcb542feda5ee4f0ff0744628baf8ed2dd5d66f8ca1197cb1a1'
-            'SKIP')
+            'SKIP'
+            '71b451cd45ff1246b0146b78220b5c28eea2e098ea82c17970c5b65190c93665')
 validpgpkeys=('5ED46A6721D365587791E2AA783FCD8E58BCAFBA')
 
 prepare() {
 	cd "${srcdir}/zlib-$pkgver"
+
+	# CVE-2018-25032
+	patch -Np1 -i ../5c44459c3b.diff
+
 	grep -A 24 '^  Copyright' zlib.h > LICENSE
 }