zchunk: upgrade 1.5.4 -> 1.5.5

- Fix out-of-bounds read
- Harden multipart download parsing against malicious servers
- Harden chunk decompression and header parsing

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
Ankur Tyagi authored and Khem Raj committed 2026-10-29 06:51:17 -07:00
1 parent 58a51944b5
commit c05facf29a
1 file changed
+2 -2
@@ -3,9 +3,9 @@ DESCRIPTION = "A file format designed for highly efficient deltas while maintain
LICENSE = "BSD-2-Clause"
LIC_FILES_CHKSUM = "file://LICENSE;md5=daf6e68539f564601a5a5869c31e5242"
SRC_URI = "git://github.com/zchunk/zchunk.git;protocol=https;nobranch=1;tag=${PV}"
SRC_URI = "git://github.com/zchunk/zchunk.git;protocol=https;branch=main;tag=${PV}"
SRCREV = "99e51afa38c723e7c25834c2c3b305d20ef55d04"
SRCREV = "ae8e9f5b1e820a906c39f7eaf231e71bef72a3a6"
DEPENDS = "zstd"
DEPENDS:append:libc-musl = " argp-standalone"