Skip to content

Upgrading zip 1 to 2

Breaking1.3.1 → 2.6.1Breaking2Security1New8Changed12Fixed59Other32

Full comparisonBack to zip
BreakingUpgrade verdict

2 breaking changes and a security fix.

In plain terms
  • Copying a file into an archive now fails instead of silently replacing an existing entry.
  • A helper function now returns a standard I/O result type instead of its previous type, so code using it may need updating.
  • Incorrect path canonicalization during Archive Extraction Leading to Arbitrary File Write
Must act 3 items need code or config changes

What you must change

Breaking2
deep_copy_file no longer allows overwriting an existing file, matching shallow_copy_file.
deep_copy_fileshallow_copy_file
2.1.4GitHub ReleaseSummarizedView source
Changes the invalid_state() return type to io::Result<T>.
invalid_state()io::Result
2.1.5GitHub ReleaseSummarizedView source
Security1
Incorrect path canonicalization during Archive Extraction Leading to Arbitrary File Write
2.3.0GitHub AdvisoryOriginalView source