clwu5724 wrote:
以前都靠這個補充知識.
這個差一點就找不到, 找了很久,才在一張 CDROM 找到備份.
小州之前還有一位 x吉的也很熱心解答一些網友們的問題.
BBS 整個 打包 賊牛.
Xantia_L wrote:
在吹啊。
不是說鍵盤。
吱吱吱。賊賊賊。
WIN 鍵 在哪。
你 發文 要 引 全文全文全文,
常 看不懂 你 在 寫 啥鬼.
★★★ "我要留言" 不回, 只回 1 般回文. ★★★
Version 7.23
1. Heap overflow vulnerability is fixed in RAR5 recovery volume
data reconstruction code. It affects WinRAR, RAR and UnRAR.
UnRAR.dll library doesn't include recovery volume processing,
so it is not affected.
We are thankful to Arjun Basnet from Securin Labs for letting us know
about this security issue.
2. Symbolic link pointing outside of destination folder could be created
even without -ola switch, when extracting a specially crafted
RAR archive by WinRAR, RAR, UnRAR or UnRAR.dll library.
Further check in extraction code prevents placing files to such folder
even in case of multiple extraction commands, excluding the possibility
of path traversal attack for WinRAR, RAR or UnRAR based extraction.
It limits the potential threat to a case where another tool uses this
symbolic link to store files.
We are thankful to scofaild23-bnomran for letting us know about this
security issue.
3. 7zxa.dll 7z extraction library is updated to version 26.02 to include
bug and vulnerability fixes by the library developer.
4. Switch -iver prints RAR version even if -idc is specified
in the command line, configuration file or RARINISWITCHES environment
variable. Previously -idc blocked -iver action.
Also a new line character is added to -iver output.
★★★ "我要留言" 不回, 只回 1 般回文. ★★★
內文搜尋