7-Zip Stable Releases & Discussion

You can pack perl programing into an executable file using 7zip Software! And without re-compiling executable use the 7zip File Manager to edit exe file format!

 

Memory Corruptions via RAR PPMd (CVE-2018-5996)

ZIP Shrink: Heap Buffer Overflow (CVE-2017-17969)

More information:
7-Zip: Multiple Memory Corruptions via RAR and ZIP
January 23, 2018
https://landave.io/2018/01/7-zip-multiple-memory-corruptions-via-rar-and-zip/

 

Hello,

A new stable version of 7-Zip has been released: 18.01.
Website
Download
Forum/Discussion

History/Changelog (changes since last stable version 16.04)

 

@puff-m-d Thanks a lot !

Could someone ask the developer to publish SHA-256 for 7-zip installers?

 

Hello @Mister X,

You are most welcome ...

 

Sourceforge is providing checksums (MD5 + SHA1), but the latest version is not yet available on Sourceforge.
Example:

 

Exactly that's my point. He releases a new version but hashes are missing, usually. He publishes them hours or days afterwards, no good.

 

Why don't you ask him?

 

At the time I asked up there I didn't know how to contact him.
Now I joined sourceforge and post a comment. Lets wait and see.

 

FYI: Comment

 

7-Zip Portable 18.01 (file archiver) Released (January 29, 2018) (PortableApps.com)

 

this new version is not signed, the certificate is not signed, is normal?

 

Yes, this is normal. The installer and the executables are not digitally signed.

 

In fact, they have never been signed iirc.

 

ah, ok thanks

 

I don't understand the fascination with security around 7-zip, really don't.
Mrk

 

I keep version 16.04 x64 in a desktop folder with various other unorganized goodies and frankly use it only to extract 7z files mostly.

If it bit the dust 2 years ago I would still use it for just that purpose. WinRAR is onboard for their extensions and some others rarely used but 7-zip is been ok. Security is really not an issue with a belly full of everything else to catch anything that might be hazardous which I yet to found in ages actually with 7z files.

BUT, since a version 18 is up think i'll bring it onboard anyway. Thank You for the link and other opinions replied to about this ole hat archiver.

 

Ok is this BS theoretical or would I run into this? And if not 7zip, what then?

I've used 7zip so long that when I used to send people files I'd 7z them. They'd be ****** because their weak winzip wouldn't work. I'd lmao.

 

For what it's worth, 7-Zip runs extremely well with Arbitrary Code Guard (ACG) mitigation enabled in WDEG.

 

Hello,

A new beta version of 7-Zip has been released: 18.02.
Website
Download
Forum/Discussion
History/Changelog

 

It also runs very well with all the mitigations in EMET 5.x on win7/8.

Mrk

 

Th.
I replaced the new files in the 7z folder of my Bandizip 5.20.

 

Hello @Sampei Nihira,

You are most welcome ...

 

Hello,

A new beta version of 7-Zip has been released: 18.03.
Website
Download
Forum/Discussion

History/Changelog