7-Zip patches a flaw that could run malware just from opening a bad file

Researchers have uncovered a fresh vulnerability in the open-source file archiver. The bug lies in the decompression routine for XZ data, where a buffer overflow could eventually let attackers run malicious code remotely. A patch is already out, though 7-Zip still has no built-in auto-update mechanism – users have to...