<?xml version="1.0"?>
<rss version="2.0">
<channel>
<title>SyMenu - Troubleshooting &amp; Bug Reports - 7zip security - Messages</title>
<link>https://www.ugmfree.it/forum/messages.aspx?TopicID=921</link>
<description>SyMenu - Troubleshooting &amp; Bug Reports - 7zip security - Messages</description>
<language>en-us</language>
<docs>http://blogs.law.harvard.edu/tech/rss</docs>
<pubDate>Mon, 06 Jan 2025 10:24:45 GMT</pubDate>
<lastBuildDate>Mon, 06 Jan 2025 10:24:45 GMT</lastBuildDate>
<item>
<link>https://www.ugmfree.it/forum/messages.aspx?TopicID=921</link>
<title>Message from Gianluca</title>
<description><![CDATA[Dear SiggiSy,<br/>Thank you for your report.<br/><br/><br/>According to the article you linked, the 7zip flaw has been patched with the 24.07 version.<br/>I released the 24.07 version with SyMenu 8.03 on June 27th 2024.<br/>Today SyMenu is at 8.04 version and carries 7zip 24.08.<br/>The next SyMenu version will carry 7zip 24.09.<br/>So,  as you can see, if you update SyMenu regularly, you'll always get the  latest version of all the third party software it uses, including the  compression libraries.<br/><br/>The  first time I evaluated Peazip, several years ago, there was a problem  with its CLI. As you can easily imagine, the CLI is the only way SyMenu  is able to talk with this kind of program. I don't remember if at that  time the  problem was the total absence or a partial inadequacy of the Peazip CLI.<br/>Anyway I'm curious on the reasons I should consider replacing 7zip with Peazip.<br/><br/>Differently  from 7zip that includes the compression algorithms in its own code,  Peazip is a simple launcher for the original compressing libraries. You  can find them inside the bin folder. So why should it be better than  7zip if, at the end, it uses 7zip?<br/>I'm ignorant about Peazip but what I'm seeing in using it are only cons:<br/>- it weight more than 7zip<br/>- it carries duplication on compression algorithms (see the overlapping among 7zip and FreeArc for example)<br/>-  it requires a double transfer when used through the CLI because I have to  create a script for Peazip that Peazip passes to the  right compression library.<br/><br/>But as I told you I'm a big ignorant about it. So what are the pros I'm not seeing?]]></description>
<pubDate>Mon, 06 Jan 2025 10:24:45 GMT</pubDate>
</item>
<item>
<link>https://www.ugmfree.it/forum/messages.aspx?TopicID=921</link>
<title>Message from SiggiSy</title>
<description><![CDATA[There are a lot of security flaws with 7zip.<br/><br/><a href="https://www.heise.de/en/news/7-Zip-flaw-enables-code-smuggling-with-manipulated-archives-10083922.html" target="_blank" rel="nofollow">https://www.heise.de/en/news/7-Zip-flaw-enables-code-smuggling-with-manipulated-archives-10083922.html</a><br/><br/>Please update 7zip as soon as possible and consider an alternative like <a href="https://peazip.github.io/" target="_blank" rel="nofollow">peazip</a><br/> <br/><br/><br/>Thanks!]]></description>
<pubDate>Sun, 05 Jan 2025 18:55:45 GMT</pubDate>
</item>
</channel>
</rss>
