After you patched WinRAR, now patch 7-ZIP

Posted by systonia_@reddit | sysadmin | View on Reddit | 23 comments

Hi  so since we now all patched our WinRAR installations (really?) and suggested each other to use 7Zip: [https://www.zerodayinitiative.com/advisories/ZDI-23-1164/](https://www.zerodayinitiative.com/advisories/ZDI-23-1164/) [https://www.zerodayinitiative.com/advisories/ZDI-23-1165/](https://www.zerodayinitiative.com/advisories/ZDI-23-1165/) Possible Code-execution by opening a bad file.

Reply to Post

23 Comments

[-]

Avas_Accumulator@reddit

I by chance patched 7zip yesterday for all. Will be good when W11 natively supports 7zip though.

[-]

Imobia@reddit

Is win11 capable of multithreaded unzip now. Or is it still slow as treacle? Like why in 2023 is the frigin copy, zip and god knows what else still stuck in win xp! It’s not even like MS can’t make a good file copy function just look at robocopy.

[-]

AnticJoe79@reddit

Neowin did some performance tests: https://www.neowin.net/news/windows-11-gets-native-rar-support-here-is-how-it-compares-to-winrar-and-other-apps/ tl;dr: It's very slow

[-]

aprimeproblem@reddit

**Dave Plummer enters the chat**

[-]

AnticJoe79@reddit

Didn't see that name for a very long time.

[-]

aprimeproblem@reddit

He’s got a wonderful YouTube channel. He actually talks about the development of the zip functionality in a couple of them.

[-]

PlennieWingo@reddit

I agree! His youtube channel is great

[-]

MeanE@reddit

I still like having the native support. I mostly only uncompress relatively small files

[-]

ctskifreak@reddit

https://www.bleepingcomputer.com/news/microsoft/windows-11-getting-native-support-for-7-zip-rar-and-gz-archives/

[-]

purplemonkeymad@reddit

I don't know about the insiders version, but yea it's still basically the same since win7. Hopefully the new features also bring other improvements and allow it to work faster.

[-]

sidneydancoff@reddit

No proof of concept video has been released?

[-]

Livid-Setting4093@reddit

Weird.. I don't remember updating it on my machine for at least a year but it says it's 23.01 (2023-06-20)

[-]

Sure_Fold9386@reddit

It drives me insane that native Windows unzip alters the Last modified time stamp of the extracted files.

[-]

Ilrkfrlv@reddit

Patch for this is out since late june

[-]

systonia_@reddit (OP)

Vulnerability has been made public 7 days ago

[-]

BrainWaveCC@reddit

That's how it's done. Disclosure is made to the vendor, patches are developed, fixed code is released, and after it has been out for a little bit, the disclosure is made broadly. As long as it's not active in the wild, which would require a more expedited schedule, this is what responsible disclosure looks like.

[-]

After you patched WinRAR, now patch 7-ZIP

Reply to Post

23 Comments

Avas_Accumulator@reddit

Imobia@reddit

AnticJoe79@reddit

aprimeproblem@reddit

AnticJoe79@reddit

aprimeproblem@reddit

PlennieWingo@reddit

MeanE@reddit

ctskifreak@reddit

purplemonkeymad@reddit

sidneydancoff@reddit

Livid-Setting4093@reddit

Sure_Fold9386@reddit

Ilrkfrlv@reddit

systonia_@reddit (OP)

BrainWaveCC@reddit

WackoSamurai@reddit

981flacht6@reddit

Rocky_Mountain_Way@reddit

pdp10@reddit

Rocky_Mountain_Way@reddit

sibble@reddit

swimmityswim@reddit