Comment

Comment on Wide-ranging 7-zip vulnerability with 8.8 CVE rating allows for code execution — hundreds of millions of machines potentially at risk

<- View Parent

Prove_your_argument@piefed.social ⁨17⁩ ⁨hours⁩ ago

…and because i’m sure people still won’t read the article, this also includes countless things that use 7zip libraries to do zipping actions, including things like file browsers, chocolatey and probably other stuff. 7zip is foss and widely used for all kinds of things t hat go beyond consumer gui usage.

source

Sort:hotnew top

T4V0@lemmy.pt ⁨5⁩ ⁨hours⁩ ago
More often than not, I don’t read the article due to a lemming summing it up nicely for us in the comments lol.

source
aeronmelon@lemmy.world ⁨16⁩ ⁨hours⁩ ago
That’s exactly why I asked for clarification. Is this an issue with their executable or is it their compression code?

I use Keka for macOS, which uses 7zip’s code for handling .7z archives. So I should probably hope for a quick update from them.

source
- 4am@lemmy.zip ⁨15⁩ ⁨hours⁩ ago
  You asked if it was the application or the file format.
  
  Sounds like neither, it’s the compression library.
  
  source
  - Mihies@programming.dev ⁨11⁩ ⁨hours⁩ ago
    It’s both - library and apps that use it.
    
    source