Skip to content

HatchZip v0.1.10

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Nov 06:58
· 19 commits to main since this release
v0.1.10
e56b4ce
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

Update if you extract archives you didn't make yourself.

  • Names a filesystem treats as one file could overwrite each other. Two entries like straße.txt and STRASSE.txt, or the two encodings of é, are one file on macOS, on Windows and in casefolded Linux folders. HatchZip compared names only by lowercasing, so such a pair could land on one file after the archive was freed. Names are now compared the way filesystems fold them, and such pairs are refused wherever they could meet. A resume also no longer deletes a file whose name on disk is spelled differently from the archive entry. (GHSA-rrfc-2x66-j7xh, thanks @plusky)

New

  • LZ4 and Brotli in 7z archives made with 7-Zip ZS. Zstandard already worked. (#75, thanks @011010 and @AbhikRao)
  • Folders get their permissions and modified times back after extraction, as the archive stored them. Folders that already existed are left alone. (#47, thanks @jayhemnani9910 and @garvrao80)
  • Spanish. The app's main window now also comes in Spanish. (#87, thanks @011010)

Fixes

  • A 7z with a method HatchZip can't decode (LZ5, Lizard) is refused before anything changes. Before, the run stopped at that block with the archive partly freed. (#84, thanks @011010 and @AbhikRao)
  • Names with : extract on Linux and macOS, such as a Wine prefix's dosdevices/c: or meeting 10:30.txt. A drive letter at the start of a path is still refused everywhere. (#81, thanks @jayhemnani9910)
  • The buttons stay reachable when the window is at its smallest size. (#54, thanks @garvrao80)

Downloads

Every file comes with a SHA-256 checksum and signed build provenance. To check a download:

gh attestation verify HatchZip-x64.msi --repo xevrion/hatchzip

Checksums and VirusTotal links for every file: Verify your download.

On Windows, HatchZip-x64-portable.zip runs without installing anything.

Package managers: brew install xevrion/tap/hatchzip (command line), brew install --cask xevrion/tap/hatchzip (app), scoop bucket add xevrion https://github.com/xevrion/scoop-bucket followed by scoop install xevrion/hatchzip, and cargo binstall hatchzip.

RAR archives are decoded by UnRAR, under its own license, included with every download.

HatchZip is free and open source. If it saved you some disk space, sponsoring keeps it going.

Full Changelog: v0.1.9...v0.1.10

Contributors

plusky, 011010, and 3 other contributors
Assets 29
Loading