Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: ag-python/pyzipper
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: master
Choose a base ref
...
head repository: danifus/pyzipper
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: master
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 18 commits
  • 34 files changed
  • 1 contributor

Commits on May 12, 2026

  1. Update tests from cPython to run with newer Python versions

    @danifus
    danifus committed May 12, 2026
    Configuration menu
    Copy the full SHA
    721fa63 View commit details
    Browse the repository at this point in the history

  2. Update dependency versions

    @danifus
    danifus committed May 12, 2026
    Configuration menu
    Copy the full SHA
    29a9d57 View commit details
    Browse the repository at this point in the history

  3. Update python versions in tox.ini

    @danifus
    danifus committed May 12, 2026
    Configuration menu
    Copy the full SHA
    d8fccde View commit details
    Browse the repository at this point in the history

  4. Update trove python versions

    @danifus
    danifus committed May 12, 2026
    Configuration menu
    Copy the full SHA
    4941937 View commit details
    Browse the repository at this point in the history

  5. Update github test workflow

    @danifus
    danifus committed May 12, 2026
    Configuration menu
    Copy the full SHA
    5ba7962 View commit details
    Browse the repository at this point in the history

  6. Move to pyproject.toml to fix build issues 

    Includes other package improvements such as properly referencing
Python's license.
    @danifus
    danifus committed May 12, 2026
    Configuration menu
    Copy the full SHA
    08c0046 View commit details
    Browse the repository at this point in the history

  7. Remove shield pictures from README

    @danifus
    danifus committed May 12, 2026
    Configuration menu
    Copy the full SHA
    d69b1ee View commit details
    Browse the repository at this point in the history

Commits on May 13, 2026

  1. Remove unused docs / appveyor files

    @danifus
    danifus committed May 13, 2026
    Configuration menu
    Copy the full SHA
    3e25a21 View commit details
    Browse the repository at this point in the history

  2. Quote python versions in github workflow to fix 3.10

    @danifus
    danifus committed May 13, 2026
    Configuration menu
    Copy the full SHA
    61d3529 View commit details
    Browse the repository at this point in the history

  3. Merge pull request danifus#42 from danifus/update202605 

    Update for newer python versions / Repo cleanup
    @danifus
    danifus authored May 13, 2026
    Configuration menu
    Copy the full SHA
    919e199 View commit details
    Browse the repository at this point in the history

  4. Remove CRC32 values from file entries for small files (CVE-2026-44722) 

    Fixes a bug where the CRC32 values were not being removed from file
entries for small files.

The CRC32 value could leak the original contents through brute-forcing
candidate plaintexts through CRC32(candidate) and comparing against the
stored value. In practice, this attack is feasible today only against
small or low-entropy files, as CRC32 exhaustion across a large plaintext
space is computationally prohibitive on current hardware. Files with
high-entropy or large content are not practically at risk under current
computing constraints.

pyzipper now doesn't write CRC32 values to the file entries by default.
An option to conditionally write the CRC32 values for files larger than
a specified size has been added.
    @danifus
    danifus committed May 13, 2026
    Configuration menu
    Copy the full SHA
    93ce88e View commit details
    Browse the repository at this point in the history

  5. Update README.rst with CRC information

    @danifus
    danifus committed May 13, 2026
    Configuration menu
    Copy the full SHA
    85ce9a5 View commit details
    Browse the repository at this point in the history

  6. Add SECURITY.rst

    @danifus
    danifus committed May 13, 2026
    Configuration menu
    Copy the full SHA
    bf7a6bd View commit details
    Browse the repository at this point in the history

  7. Update HISTORY.rst and version

    @danifus
    danifus committed May 13, 2026
    Configuration menu
    Copy the full SHA
    43b001b View commit details
    Browse the repository at this point in the history

  8. Fix README.rst block quote

    @danifus
    danifus committed May 13, 2026
    Configuration menu
    Copy the full SHA
    9d2a95c View commit details
    Browse the repository at this point in the history

  9. Update README to include information about the CRC bug

    @danifus
    danifus committed May 13, 2026
    Configuration menu
    Copy the full SHA
    4c23f26 View commit details
    Browse the repository at this point in the history

  10. Update test to loop through all compression methods

    @danifus
    danifus committed May 13, 2026
    Configuration menu
    Copy the full SHA
    6836583 View commit details
    Browse the repository at this point in the history

Commits on May 14, 2026

  1. Merge commit from fork 

    Fix CRC32 leak for small files (CVE-2026-44722)
    @danifus
    danifus authored May 14, 2026
    Configuration menu
    Copy the full SHA
    a814388 View commit details
    Browse the repository at this point in the history
Loading