| View previous topic :: View next topic |
| Author |
Message |
ChrisJumper
Advocate
Joined: 12 Mar 2005
Posts: 2403
Location: Germany
|
 Posted: Thu Jun 30, 2022 7:30 pm Post subject: Question to rar / unrar and issue with Zimbra [solved] |
 |
|
Hello,
i was a bit confused by the News about Zimbra.
Gentoo already fixed the Bug, but why we have two packages?
| Code: | [I] app-arch/unrar
Verfügbare Versionen: 6.1.7(0/6)
Installierte Versionen: 6.1.7(0/6)(xx:xx:xx 2x.06.2022)
Startseite: https://www.rarlab.com/rar_add.htm
Beschreibung: Uncompress rar files |
| Code: | [I] app-arch/rar
Verfügbare Versionen: 6.12^md {all-sfx}
Installierte Versionen: 6.12^md(xx:xx:xx 2x.06.2022)(-all-sfx)
Startseite: https://www.rarlab.com/
Beschreibung: RAR compressor/uncompressor
|
rar Version 6.12 is fixed, i just was confused about unrar have a different Version Number. And as far as i understood, the Antivirus Server open rar packages... so the Version Number to defend an Attack by email should be unrar and not rar.
This post is just for the record and because i was a little confused about.
Thank you very much for your work, and have a good Summer! By the Way if you look for Jobs. Programming Algorithms to processing Big Data (Streams) is a hype right now.
Last edited by ChrisJumper on Fri Jul 01, 2022 8:22 pm; edited 1 time in total |
|
| Back to top |
|
 |
freke
Veteran
Joined: 23 Jan 2003
Posts: 1051
Location: Somewhere in Denmark
|
| Posted: Thu Jun 30, 2022 8:44 pm Post subject: |
|
|
They are seperate, and doesn't the link itself say that?
| Quote: | Am I affected?
The official security patch by RarLab is contained in the UnRar source code version 6.1.7 and is included with the binaries of version 6.12. Any previous version may be vulnerable. Only the Unix binaries (excluding Android) are affected by this vulnerability. WinRAR is free of this bug. |
https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/ |
|
| Back to top |
|
|
ChrisJumper
Advocate
Joined: 12 Mar 2005
Posts: 2403
Location: Germany
|
| Posted: Fri Jul 01, 2022 8:22 pm Post subject: |
|
|
| Thank you freke, you are right about. I just read first a German IT News Portal, and they missed to mention the two Versions about Unrar and rar. Thank you for answering and sorry for my post here. I'll take more time to read the Source precisely. |
|
| Back to top |
|
|
|
Networking & Security
