Skip to content

Releases: FadeHack/strypt

strypt v0.2.0

Choose a tag to compare

@github-actions github-actions released this 25 Sep 06:58

Built from 6f2b793fc6a0ec076dee6a2f0bc0f6092d598c4f by scripts/build-release.sh; each binary was built twice, byte-identical.
The GUI's .app and AppImages were packaged twice, byte-identical; the .dmg around the .app is not reproducible.
Each file has a CycloneDX SBOM, <file>.cdx.json, listed in SHA256SUMS.

sha256sum -c SHA256SUMS --ignore-missing
gh attestation verify <file> -R FadeHack/strypt

To rebuild, use this commit's rust-toolchain.toml on the same image and linker:

Target Runner image Linker
aarch64-apple-darwin macos15 20260907.0337.1 ld-1167.5
aarch64-unknown-linux-musl ubuntu24-arm64 20260920.129.1 GNU ld (GNU Binutils for Ubuntu) 2.42
x86_64-apple-darwin macos15 20260907.0337.1 ld-1167.5
x86_64-pc-windows-msvc win25-vs2026 20260907.229.1 Visual Studio 18.9.2
x86_64-unknown-linux-musl ubuntu24 20260920.314.1 GNU ld (GNU Binutils for Ubuntu) 2.42
aarch64-apple-darwin (GUI) macos15 20260907.0337.1 ld-1167.5
aarch64-unknown-linux-gnu (GUI) ubuntu24-arm64 20260920.129.1 GNU ld (GNU Binutils for Ubuntu) 2.38, in build-in-container.sh's image
x86_64-apple-darwin (GUI) macos15 20260907.0337.1 ld-1167.5
x86_64-pc-windows-msvc (GUI) win25-vs2026 20260922.246.2 Visual Studio 18.10.1
x86_64-unknown-linux-gnu (GUI) ubuntu24 20260920.314.1 GNU ld (GNU Binutils for Ubuntu) 2.38, in build-in-container.sh's image

strypt v0.1.2

Choose a tag to compare

@github-actions github-actions released this 21 Sep 12:11

A PDF whose page tree names one object more than once is now refused. Rewriting such a file
dropped an object, and in the file that found this it was the document's only page, reported as a
success. Every release up to and including 0.1.1 is affected. Nothing leaked and no output was
wrong, so this is not a security fix; the risk is a saved copy missing a page. Found by the pdf
fuzz target (ADR-0057,
CHANGELOG).


Built from 2f8c933137fa13f5213aa89e4761bfb0d957a50d by scripts/build-release.sh; each binary was built twice, byte-identical.
Each has a CycloneDX SBOM, <file>.cdx.json, listed in SHA256SUMS.

sha256sum -c SHA256SUMS --ignore-missing
gh attestation verify <file> -R FadeHack/strypt

To rebuild, use this commit's rust-toolchain.toml on the same image and linker:

Target Runner image Linker
aarch64-apple-darwin macos15 20260907.0337.1 ld-1167.5
aarch64-unknown-linux-musl ubuntu24-arm64 20260907.118.1 GNU ld (GNU Binutils for Ubuntu) 2.42
x86_64-apple-darwin macos15 20260907.0337.1 ld-1167.5
x86_64-pc-windows-msvc win25-vs2026 20260907.229.1 Visual Studio 18.9.2
x86_64-unknown-linux-musl ubuntu24 20260907.300.1 GNU ld (GNU Binutils for Ubuntu) 2.42

strypt v0.1.1

Choose a tag to compare

@github-actions github-actions released this 18 Sep 17:26

Security fix. 0.1.0 left the Exif (GPS, camera serial, author) of JPEG photos inside a PDF, and of its page thumbnails, while reporting the file clean. If you published a PDF cleaned by 0.1.0, check it with exiftool -ee. Details: GHSA-fxhm-mvqq-vhhx and CHANGELOG.md.

Built from 14b8af59e5405681a4581048da3786f13e68ddf7 by scripts/build-release.sh; each binary was built twice, byte-identical.
Each has a CycloneDX SBOM, <file>.cdx.json, listed in SHA256SUMS.

sha256sum -c SHA256SUMS --ignore-missing
gh attestation verify <file> -R FadeHack/strypt

To rebuild, use this commit's rust-toolchain.toml on the same image and linker:

Target Runner image Linker
aarch64-apple-darwin macos15 20260907.0337.1 ld-1167.5
aarch64-unknown-linux-musl ubuntu24-arm64 20260907.118.1 GNU ld (GNU Binutils for Ubuntu) 2.42
x86_64-apple-darwin macos15 20260907.0337.1 ld-1167.5
x86_64-pc-windows-msvc win25-vs2026 20260907.229.1 Visual Studio 18.9.2
x86_64-unknown-linux-musl ubuntu24 20260907.300.1 GNU ld (GNU Binutils for Ubuntu) 2.42

strypt v0.1.0

Choose a tag to compare

@github-actions github-actions released this 13 Sep 08:04

Built from c2f44034500368129df43ae1e7aca86fd37e8936 by scripts/build-release.sh; each binary was built twice, byte-identical.

shasum -a 256 -c SHA256SUMS --ignore-missing
gh attestation verify <file> -R FadeHack/strypt

To rebuild, use this commit's rust-toolchain.toml on the same image and linker:

Target Runner image Linker
aarch64-apple-darwin macos15 20260907.0337.1 ld-1167.5
aarch64-unknown-linux-musl ubuntu24-arm64 20260907.118.1 GNU ld (GNU Binutils for Ubuntu) 2.42
x86_64-apple-darwin macos15 20260907.0337.1 ld-1167.5
x86_64-pc-windows-msvc win25-vs2026 20260907.229.1 Visual Studio 18.9.2
x86_64-unknown-linux-musl ubuntu24 20260907.300.1 GNU ld (GNU Binutils for Ubuntu) 2.42