openSUSE Leap 16.0 zchunk Update Fixes Crafted File Crash

Critical WordPress Flaw Exploited in the Wild: Learn how to protect your site and check your core update window. ×

This update for zchunk fixes the following issue:

- CVE-2026-117556: heap out-of-bounds read in `read_preface()` allows attackers to cause an application crash via a

crafted `.zck` file (bsc#1288144).

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch openSUSE-Leap-16.0-2064=1

- openSUSE Leap 16.0:

libzck-devel-1.5.1-160000.3.1

libzck1-1.5.1-160000.3.1

zchunk-1.5.1-160000.3.1

*

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases