7-Zip vulnerability

hans_2

Update now to 7-Zip 16.0 to fix.

http://www.ghacks.net/2016/05/13/7zip-vulnerability-affects-security-software/

ChiefGrasscutter

Wait: so you mean an piece of open source source software has a bug in it.
Well colour me purple!

We have always been told (endlessly) how much safer open source is as the "community" will always find any bugs in it immediately.
Yeah right......

Meanwhile all those other programs that use the open source 7z libraries as part of their process (such as Malwarebytes) will be desperately pushing out updates.

esuhl

ChiefGrasscutter wrote: »

Wait: so you mean an piece of open source source software has a bug in it.
Well colour me purple!

We have always been told (endlessly) how much safer open source is as the "community" will always find any bugs in it immediately.
Yeah right......

It sounds like you don't really understand how software works. Any program could have a bug in it.

The benefit with open source software is that anyone can analyse it, identify flaws and submit improvements. It makes it harder for deliberate vulnerabilities to be concealed, and can reduce the likelihood of bugs depending on how many people are working on the project. It's no guarantee that open source software is "better" than closed source alternatives.

Given the choice of restrictive software that can't be examined and is released purely to generate profit, and unrestrictive software that can be examined and is only indirectly used to generate profit... I'd generally prefer the open source option, all other things being equal.