The code for handling symbolic links has been changed to provide greater security when extracting files from archives.
Command line switch -snld20 can be used to bypass default security checks when creating symbolic links.
😕
1
👍
5
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
can somebody tell me which versions of 7-zip still receive patches, support and bug fixes? or should I just assume the latest stable version is the only active version?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
7-Zip 25.01 was released.
Download
7-Zip for 64-bit Windows x64:
https://7-zip.org/a/7z2501-x64.exe
7-Zip for 32-bit Windows x86:
https://7-zip.org/a/7z2501.exe
7-Zip for 64-bit Windows ARM64:
https://7-zip.org/a/7z2501-arm64.exe
7-Zip Extra: standalone console version, 7z DLL, Plugin for Far Manager:
https://7-zip.org/a/7z2501-extra.7z
7-Zip (console version) for 64-bit Linux x86-64 (AMD64):
https://7-zip.org/a/7z2501-linux-x64.tar.xz
7-Zip (console version) for 32-bit Linux x86:
https://7-zip.org/a/7z2501-linux-x86.tar.xz
7-Zip (console version) for 64-bit Linux ARM64:
https://7-zip.org/a/7z2501-linux-arm64.tar.xz
7-Zip (console version) for 32-bit Linux ARM:
https://7-zip.org/a/7z2501-linux-arm.tar.xz
7-Zip (console version) for macOS (ARM64 and x86-64):
https://7-zip.org/a/7z2501-mac.tar.xz
What's new in 7-Zip 25.01:
Command line switch -snld20 can be used to bypass default security checks when creating symbolic links.
can somebody tell me which versions of 7-zip still receive patches, support and bug fixes? or should I just assume the latest stable version is the only active version?
Seeing from the changelog, it's only the latest version that receives changes. This is not an official position, though.
Noticed on bluesnews.com website a link to the new 7-zip release on github: https://github.com/ip7z/7zip
is this legit? repo and user look new. is it an example of a supply chain attack?
Just thought I would mention it just in case. Source from bluesnews is some web page called broadband bulletin: https://broadbandbulletin.com/d/4195-7-zip-v2501-released
Best regards
mrfearless
Last edit: mrfearless 2025-08-05
Is legit!
Ok grand, just wanted to double check. No harm in verifying this i guess, specially nowadays with lots of shady stuff.
Thanks for letting me know.
Cheers.