ELBA-2024-25227

ELBA-2024-25227 - zchunk Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2024-07-29

Description

[1.5.1-1]
- Fix memory leak
- Ensure version is set properly inside zchunk

[1.5.0-1]
- Fix bug when managing different contexts in different threads

[1.4.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[1.4.0-1]
- Add native OpenSSL 3 compatibility
- Add new function for getting zchunk context from chunk
- Fix bug when assembling from multiple sources

[1.3.2-1]
- Fix a couple of unsigned integer overflow bugs

[1.3.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[1.3.1-1]
- Fix a few low severity security bugs including
- An off-by-one overflow when reading compressed integers from a
malicious zchunk file
- Error handling being skipped when the number of bytes read doesn't
match what's expected
- Not freeing memory when attempting to reallocate to size 0

[1.3.0-1]
- Add option to generate a zchunk header from an uncompressed file without
actually creating a zchunk file

[1.2.4-1]
- Fix test compatibility with zstd-1.5.4

[1.2.3-2]
- Rebuilt to change Python shebangs to /usr/bin/python3.6 on EPEL 8

[1.2.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

[1.2.3-1]
- Fixed some small formatting issues

[1.2.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[1.2.2-1]
- Fixed a number of small issues highlighted by Coverity

[1.2.1-1]
- Fixed bug that limited size of file that could be compressed using zchunk to 2GB
- Fixed memory leak

[1.2.0-1]
- Add --uncompressed option to zck, allowing for embedding of uncompressed
digests in the header
- Various small bug fixes

[1.1.15-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[1.1.15-3]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	zchunk-1.5.1-1.el8.src.rpm	9198a0fcf93d0b805ae855301a827bee92c3b81272a47cb35540e64bfd26a340	-	ol8_aarch64_developer_EPEL
	zchunk-1.5.1-1.el8.aarch64.rpm	ee51d80e101014c814a5e4b1e8f678fcafd12c7fea89aee6171127f407fbb3af	-	ol8_aarch64_developer_EPEL
	zchunk-devel-1.5.1-1.el8.aarch64.rpm	30551df6d380eea4644d805566b3668e1e95f1616b0eff4f3bf6e8033de367d7	-	ol8_aarch64_developer_EPEL
	zchunk-libs-1.5.1-1.el8.aarch64.rpm	7dad9e24e1c4e74b9a02a165fa513c55a828d0805a40a5453bc715a8bdf48db9	-	ol8_aarch64_developer_EPEL
Oracle Linux 8 (x86_64)	zchunk-1.5.1-1.el8.src.rpm	9198a0fcf93d0b805ae855301a827bee92c3b81272a47cb35540e64bfd26a340	-	ol8_x86_64_developer_EPEL
	zchunk-1.5.1-1.el8.x86_64.rpm	5680d59d5d0164c8e3415593658053457ae29322a9ce6e72d29cd9e851cece71	-	ol8_x86_64_developer_EPEL
	zchunk-devel-1.5.1-1.el8.x86_64.rpm	2245b518327837e972c1d4f6b9121383f9f824a9bd035c16de185d37cd02235b	-	ol8_x86_64_developer_EPEL
	zchunk-libs-1.5.1-1.el8.x86_64.rpm	a6a31c12a3ba4634793277b7feded8084fe5390a947c6f4da55ea6830d5f79b5	-	ol8_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team