← Packages
zchunk
Compressed file format that allows easy deltas
- Current
- 1.5.3
- Candidate
- 1.5.5Stale
- License
- BSD-2-Clause AND MIT
Advisory · 1
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface()OSV
- Fixed events
- 02b371a64bf98245df97315d07c684a0ca5ea1df, ae8e9f5b1e820a906c39f7eaf231e71bef72a3a6OSV
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 0.328%FIRST
- Aliases
- —OSV
- KEV
- NoCISA
- CVSS_V4
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:NOSV
Description
zchunk is a compressed file format that splits the file into independent chunks. This allows you to only download the differences when downloading a new version of the file, and also makes zchunk files efficient over rsync. zchunk files are protected with strong checksums to verify that the file you downloaded is in fact the file you wanted.
Changelog
PR · 1
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Stale Repository refresh: git fetch exited 128 (authentication) | ||
Stale Source last confirmed at 2026-11-12T12:09:42+00:00; repository refresh overdue. | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Not configured No reliable monitor identity/configuration. | — | |
Not configured No reliable monitor identity/configuration. | — | |
Checked Repository query; subpackage and local-patch applicability are not evaluated. | Last attempted | |
Not configured No reliable monitor identity/configuration. | — |