Jump to content

Outdated vulnerable version of 7z.exe embedded in Vortex as of right now


Aldao444
Go to solution Solved by Nagev,

Recommended Posts

1 hour ago, Pickysaurus said:

Do you definitely have the latest version of Vortex? I'm pretty sure we did and update to 7z a while back now. 

Yes, a while back. The last 7z update was over a year ago (based on github history). This vulnerability has been published last week.

So yes, I agree with the OP, Vortex is probably affected by this.

Link to comment
Share on other sites

  • Solution

Thank you for the heads up - noticed this a bit too late and didn't get to add it to todays patch release; but will make sure we take care of this for the next one.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...