Hello Guys, it has been a longg longg time. Actually I finished this weeks ago but the site is not updated to its place yet. So I couldn’t be bother.
Anyhow, as usual. Enjoy!
Version 6.02
1. ZIP SFX module refuses to process SFX commands stored in archive
comment if such comment is resided after beginning of Authenticode
digital signature. It is done to prevent possible attacks with
inclusion of ZIP archive into the signature body.
We already prohibited extracting contents of such malformed archives
in WinRAR 6.01.
We are thankful to Jacob Thompson - Mandiant Advantage Labs
for reporting this issue.
2. WinRAR uses https instead of http in the web notifier window,
home page and themes links. It also implements additional checks
within the web notifier. This is done to prevent a malicious web page
from executing existing files on a user's computer. Such attack
is only possible if the intruder has managed to spoof or otherwise
control user's DNS records. Some other factors are also involved
in limiting the practical application of this attack.
We would like to express our gratitude to Igor Sak-Sakovskiy
for bringing this issue to our attention.
3. Where appropriate, SFX archive displays the additional line
with detailed error information provided by operating system.
For example, previously such archive would display "Cannot create file"
message alone. Now this message is followed by a detailed reason
like access denied or file being used by another process.
In the past this extended error information was available in WinRAR,
but not in SFX archives.
4. Switch -idn hides archived names also in 'v' and 'l' commands.
It can be useful if only the archive type or total information
is needed.
5. If -ibck -ri<priority> switches are used together, WinRAR process
sets the priority specified in -ri switch. Previous versions ignored
-ri and set the priority to low in the presence of -ibck switch.
6. When using "File/Change drive" command, WinRAR saves the last folder
of previous drive and restores it if that drive is selected again
later.
7. Name of unpacking file is now included into WinRAR incorrect password
warning for RAR5 archives. It can be helpful when unpacking
a non-solid archive containing files encrypted with different passwords.
8. Bugs fixed:
a) "Convert archives" command issued erroneous "The specified password
is incorrect" message after succesfully converting RAR archive
with encrypted file names if new password was set and archive
was opened in WinRAR shell;
b) if command progress window was resized up and then quickly resized
down to original dimensions, window contents could be positioned
incorrectly.
Version 6.01
1. Ctrl+A keyboard shortcut selects the entire text in WinRAR comment
window.
2. If -idn switch is used together with -t or -df in console RAR
when archiving, it additionally disables "Deleting <filename>"
or "Testing <filename>" messages, normally issued by these switches.
Also -idn disables folder creation messages when extracting
a file to non-existing folder.
3. WinRAR and ZIP SFX module refuse to extract contents of ZIP SFX
archives if ZIP central directory is resided after beginning
of Authenticode digital signature. It is done to prevent possible
attacks with inclusion of ZIP archive into signature body.
4. Bugs fixed:
a) "Convert archives" command could incorrectly convert Unicode
comments in RAR archives.
b) if two archive information windows had been opened from Explorer
context menu, the compression ratio bar in the first window
could erroneously display a value for second archive.
It did not affect the ratio and other text details at the right
of window. Only the vertical bar at the left could be updated
to a wrong value;
c) if "Wait if other WinRAR copies are active" option was enabled
in extraction dialog, "Waiting for another WinRAR copy" title
was not set in command progress window while waiting;
d) when extracting a symbolic link, previous versions did not
overwrite existing symbolic links even if user requested it
in overwrite prompt.