7Zip Security Vulnerability

[DDRRE]

Hi,

Is there any patch planned to address the recent 7Zip vulnerability? I would've attached a URL but I can't due to the anti-spam system.

[Dalai]

Since TC uses a renamed 7zxa.dll you can download the current Extra package available from this page, extract 7zxa.dll to TC dir and rename it to tc7z.dll, overwriting the existing file. I recommend to make a backup of the existing DLL though.

You can also use one of the 7z plugins, namely Total7zip which uses the "normal" 7zip installation.

Regards
Dalai

[ghisler(Author)]

It's only necessary for Total7zip: The first vulnerability only affects MacOS X, the second only unpacking of certain ISO files. Both TC's internal unpacker and the 7zip plugin only support .7z files, so they are not affected. Total7zip can unpack also ISO, so it's probably affected.