B4J Library Zip4J - Library version updates

Zip4J library, by Srikanth Reddy Lingala

Version 2.9.0 - 2021-06-29

Improvements:
Support JDK 7
Implement close() on ZipFile

Bug Fixes:
Fix compression method check in AddStreamTask

Jar file available for download HERE.
 

Claudio Oliveira

Active Member
Licensed User
Longtime User
Version 2.9.1 - 2021-11-18

Improvements:
  • Add caching to Travis build process
  • Add PasswordCallback for encrypted Input Streams

Bug fixes:
  • Skip checking for directory when reading entries
  • Extract contents of sub-directory even when sub-directory entry does not exist
  • Fix bug in sub-folder extraction when folder name appears at the end of central directory
  • Avoid replacing Windows file name separator
  • Improve file header equals check to include offset of local file header
  • Use exception type WRONG_PASSWORD when password is null or empty for AES
Jar file available for download HERE.
 

Claudio Oliveira

Active Member
Licensed User
Longtime User
Version 2.11.1 - 2022-06-23

Bug fixes:
  • Use case sensitive comparison for file headers
  • Replace Windows file separator with zip separator
  • Remove file attributes check
Jar file available for download HERE.
 

Claudio Oliveira

Active Member
Licensed User
Longtime User
Version 2.11.2 - 2022-09-12

Improvements:

  • Use SecureRandom instead of Random to implement a cryptographically strong random number

Bug fixes:

  • Fix null check
  • Append file separator to path check only if required
  • Fix endOfCentralDirectory location calculation when setting comment
  • Use Path comparison over String comparison for Path traversal vulnerability
  • Set lastModifiedFileTime for all entries and not just directories
  • Use charset when generating AES vendor id info
Jar file available for download HERE.
 

Claudio Oliveira

Active Member
Licensed User
Longtime User
Version 2.11.3 - 2023-01-25

Security fixes:
  • Fix CVE-2023-22899
This update adresses and corrects the following bug:
"This library possesses a bug where the MAC is not checked when decrypting the zip file, if certain conditions are met. This is the case whenever a Threema backup is restored, meaning that any tampering with the zip would not be detected."

Further information on this issue can be found here and here.

Jar file available for download HERE.

Regards,
 

Claudio Oliveira

Active Member
Licensed User
Longtime User
Version 2.11.4 - 2023-02-09

Bug fixes:

#484 Use getPath instead of toPath to avoid java nio (Zip4j not working on android 21 JDK7)
#486 Set symlink as a file even if it points to directory (Symlinks to directories fail to zip properly)

Jar file available for download HERE.
 

Claudio Oliveira

Active Member
Licensed User
Longtime User
Version 2.11.5 - 2023-02-22

Improvements:

#476 & #493 Allow overriding empty files even if it is not a zip file

Jar file available for download HERE.
 
Top