Py7zr try checking symbolic links strictly and raise ValueError when bad link is requested,īut it does not guarantee to block all the bad cases.

Supported algorithmsĪ feature handling symbolic link is basically compatible with p7zip implementation,īut not work with original 7-zip because the original does not implement the feature. Py7zr is also able to encrypt and decrypt data using 3rd party encryption library. It also supports ZStandard, Brotli and PPMd with third party libraries. Py7zr supports algorithms and filters which lzma module and liblzma support,Īnd supports BZip2 and Deflate that are implemented in python core libraries, Matteo Cosentino for notification and coorporation on security improvement. You are recommend to update immediately to version 0.20.2 or later, 0.19.2 or 0.18.12 Īffected versions are vulnerable to Directory Traversal due to insufficient checks in the ‘py7zr.py’ and ‘helpers.py’ files Version 0.20.0, 0.19.0, 0.18.10 or before has a vulnerability for path traversal attack.ĭetails are on “CVE-2022-44900: path traversal vulnerability in py7zr” disclose article. The icon is cute, but lacks some contrast to see what it is for folks like myself with less than optimum vision.Py7zr is a library and utility to support 7zip archive compression, decompression,Įncryption and decryption written by Python programming language. Anyway, minor gripe aside, it's a great app that functions as intended. Maybe everyone looks at the photos on the store page, but I downloaded it from my purchase history. If you look at it with a fresh pair of eyes, the window doesn't declare it's intent anywhere for someone coming in fresh. So, in the interest of being clear with your UX, please add a line or indication that the first window that opens is a drop target for files to be compressed, that the format selection in the top right is actually the format that will be used on the intended output, that kind of stuff. So when I closed that window, there was another settings window, which only further confused me. I assumed it was asking maybe what default format and options I wanted. Since I hadn't looked at the store page, I had no idea what the window that popped up was for. I don't remember what Keka was like when I first purchased(?) it, but I recently wanted to archive a bunch of files to send off, only to open the app and be stumped by the UX understanding implied by your interface design. I'm not primarily a Mac user and have extended durations away from the platform. I've had Keka on my account for quite some time. Minor Quibbles, Good Archiver Replacement

Extract 7z on mac