Big Vulnerability hits 7-Zip file archiver - gets patched - Download v18.05

by Hilbert Hagedoorn on: 05/03/2018 08:00 AM | source: | 16 comment(s)

If you use, you can and should download v18.05 of the popular 7-Zip file archiver. The free to use WinZip replacement has a very critical vulnerability for which all it needed was a specially prepped RAR file.

This has been addressed with the release of has been fixed with v18.05, I am highlighting this new v18.05 release this much as this is a pretty bad one as it allows remote execution, based on just a RAR file. The security researcher (landave.io) who discovered the vulnerability informed the developer of 7-Zip on the 6th of March this year. it has patched with the release of 7-Zip 18.05, which not only fixes the vulnerability but also adds ASLR security measures.

7-Zip is one of the most popular archivers available on the web, downloaded nearly 450 million times from Sourceforge alone. All users of 7-Zip are advised to update the software to the latest version, I've made a local mirror on Guru3D, which can be downloaded from here.

> Download

2 pages 1 2

heffeque
Senior Member

Posts: 3928
Joined: 2003-03-03

#5544031 Posted on: 05/05/2018 01:06 AM

Nice tool, but that program is a little toy compared to Choco:

"There are 5762 community maintained packages" (currently)

This one is the Windows equivalent of Ubuntu package manager... it can install, uninstall, update software, look for new software in various categories, etc. I a completely different class than that little tool.

Oh, and there is a GUI as well (which I'm using), so I don't mess around with commandline:
https://chocolatey.org/packages/ChocolateyGUI
First you disregard it for being a simple and easy GUI tool, then you say that you are using ChocolateyGUI. Very coherent reasoning.

Sincerely, IMHO PatchMyPC is more than enough for my needs and most people's. Chocolatey is overkill and overly complicated for most commoners.

2 pages 1 2

Post New Comment

Click here to post a comment for this news story on the message forum.