WinRAR 7.13 Beta 1 released

1. Another directory traversal vulnerability, differing from that in WinRAR 7.12, has been fixed.
    
   When extracting a file, previous versions of WinRAR, Windows versions of RAR, UnRAR, portable UnRAR source code and UnRAR.dll can be tricked into using a path, defined in a specially crafted archive, instead of user specified path.
    
   Unix versions of RAR, UnRAR, portable UnRAR source code and UnRAR library, also as RAR for Android, are not affected.
    
   We are thankful to Anton Cherepanov, Peter Kosinar, and Peter Strycek from ESET for letting us know about this security issue.
    
   
2. Bugs fixed:
    
   
   1. WinRAR 7.12 "Import settings from file" command failed to restore settings, saved by WinRAR versions preceding 7.12;
       
      
   2. WinRAR 7.12 set a larger than specified recovery size for compression profiles, created by WinRAR 5.21 and older.
       
      

About win.rar GmbH:
win.rar GmbH has been the official distributor of WinRAR and RARLAB products since February 2002 and handles all support, marketing and sales related to WinRAR & rarlab.com. win.rar GmbH is registered in Germany and is represented worldwide by local partners in more than 40 countries on six continents. win.rar's declared objective is to provide first-class quality support and to optimize its software to meet customer's requirements in accordance with their valued feedback. For more information about WinRAR and win.rar GmbH please visit our website: www.win-rar.com