Skip to content

Multiple vulnerabilities in 7-zip version 24.09 #99

@dglom

Description

@dglom

Can someone update the 7-zip binaries to version 25.01. Both version 25.00 and version 25.01 have closed some vulnerabilities.

What's new in 7-Zip 25.00:
7-Zip for Windows can now use more than 64 CPU threads for compression
to zip/7z/xz archives and for the 7-Zip benchmark. If there are more than one processor group in Windows (on systems with more than 64 cpu threads), 7-Zip distributes running CPU threads across different processor groups.
bzip2 compression speed was increased by 15-40%.
deflate (zip/gz) compression speed was increased by 1-3%.
improved support for zip, cpio and fat archives.
fixed some bugs and vulnerabilities.

What's new in 7-Zip 25.01:
The code for handling symbolic links has been changed to provide greater security when extracting files from archives.
Command line switch -snld20 can be used to bypass default security checks when creating symbolic links.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions