From c05facf29ab087776c15166a581cbf2b3e8d8342 Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Thu, 29 Oct 2026 22:26:40 +1300 Subject: [PATCH] zchunk: upgrade 1.5.4 -> 1.5.5 - Fix out-of-bounds read - Harden multipart download parsing against malicious servers - Harden chunk decompression and header parsing Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj --- .../zchunk/{zchunk_1.5.4.bb => zchunk_1.5.5.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-oe/recipes-support/zchunk/{zchunk_1.5.4.bb => zchunk_1.5.5.bb} (81%) diff --git a/meta-oe/recipes-support/zchunk/zchunk_1.5.4.bb b/meta-oe/recipes-support/zchunk/zchunk_1.5.5.bb similarity index 81% rename from meta-oe/recipes-support/zchunk/zchunk_1.5.4.bb rename to meta-oe/recipes-support/zchunk/zchunk_1.5.5.bb index 9d587debfd..f84cd8d6fe 100644 --- a/meta-oe/recipes-support/zchunk/zchunk_1.5.4.bb +++ b/meta-oe/recipes-support/zchunk/zchunk_1.5.5.bb @@ -3,9 +3,9 @@ DESCRIPTION = "A file format designed for highly efficient deltas while maintain LICENSE = "BSD-2-Clause" LIC_FILES_CHKSUM = "file://LICENSE;md5=daf6e68539f564601a5a5869c31e5242" -SRC_URI = "git://github.com/zchunk/zchunk.git;protocol=https;nobranch=1;tag=${PV}" +SRC_URI = "git://github.com/zchunk/zchunk.git;protocol=https;branch=main;tag=${PV}" -SRCREV = "99e51afa38c723e7c25834c2c3b305d20ef55d04" +SRCREV = "ae8e9f5b1e820a906c39f7eaf231e71bef72a3a6" DEPENDS = "zstd" DEPENDS:append:libc-musl = " argp-standalone"