UnratedFix available
zip2 v9.0.1 release notes
Type: patchSources: zip crate
zip2 v9.0.1 includes fixes for symlink handling during extraction and two arithmetic overflows in the implode decoder, along with other bug fixes.
- Products
- zip2
- Affected versions
- Not specified
- Fixed versions
- v9.0.1
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 20:00 UTC · Revision 1
Source evidence
zip2 v9.0.1 includes fixes for symlink handling during extraction and two arithmetic overflows in the implode decoder, along with other bug fixes.
v9.0.1 🐛 Bug Fixes set_permissions was still following symlinks in non-streaming extraction (#1038) two arithmetic overflows in the implode decoder (#1028)
zip2
Fixed versions: v9.0.1
Complete source record
{
"id": "881482d85e4889d89adc484fb6904f6aca944c21f7c7d866acbc72847caf7dae",
"url": "https://github.com/zip-rs/zip2/releases/tag/v9.0.1",
"method": "llm",
"payload": {
"kind": "patch",
"title": "zip2 v9.0.1 release notes",
"summary": "zip2 v9.0.1 includes fixes for symlink handling during extraction and two arithmetic overflows in the implode decoder, along with other bug fixes.",
"evidence": "v9.0.1\n\n🐛 Bug Fixes set_permissions was still following symlinks in non-streaming extraction (#1038) two arithmetic overflows in the implode decoder (#1028)",
"products": [
{
"name": {
"value": "zip2",
"evidence": "Release notes from zip2"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "v9.0.1",
"evidence": "v9.0.1"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-zip-rs-zip2",
"document_id": 22945,
"published_at": "2026-10-10T06:11:03+00:00"
}