mirrors/meta-openembedded
1
0 Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-11-13 03:37:15 +00:00
Code Issues Projects Releases Wiki Activity

zchunk: upgrade 1.5.4 -> 1.5.5

Browse Source 
- Fix out-of-bounds read
- Harden multipart download parsing against malicious servers
- Harden chunk decompression and header parsing

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Handle CVE-2026-117556.
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Ankur Tyagi authored and Anuj Mittal committed 2026-11-09 08:44:36 +05:30
1 parent 5ee7fc71d3
commit 6397229d31
1 file changed
+2 -2
Download Patch File Download Diff File Expand all files Collapse all files
meta-oe/recipes-support/zchunk/zchunk_1.5.4.bb → meta-oe/recipes-support/zchunk/zchunk_1.5.5.bb
+2 -2
View File
@@ -3,9 +3,9 @@ DESCRIPTION = "A file format designed for highly efficient deltas while maintain
LICENSE = "BSD-2-Clause"
LIC_FILES_CHKSUM = "file://LICENSE;md5=daf6e68539f564601a5a5869c31e5242"
SRC_URI = "git://github.com/zchunk/zchunk.git;protocol=https;nobranch=1;tag=${PV}"
SRC_URI = "git://github.com/zchunk/zchunk.git;protocol=https;branch=main;tag=${PV}"
SRCREV = "99e51afa38c723e7c25834c2c3b305d20ef55d04"
SRCREV = "ae8e9f5b1e820a906c39f7eaf231e71bef72a3a6"
DEPENDS = "zstd"
DEPENDS:append:libc-musl = " argp-standalone"