You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When both unzip and 7zip are installed, MSI extraction fails. When only 7zip is installed it succeeds.
To reproduce
Steps to reproduce the behaviour:
scan using these flags/this config --log debug
on this file https://s3.amazonaws.com/ddagent-windows-stable/datadog-agent-7-latest.amd64.msi
a. Retrieve the file using curl -O -sS https://s3.amazonaws.com/ddagent-windows-stable/datadog-agent-7-latest.amd64.msi
Expected behaviour: Extracts and scans the MSI.
Actual behaviour: Fails to extract the MSI.
Version/platform info
Version of CVE-bin-tool( e.g. output of cve-bin-tool --version): 3.4
Installed from pypi or github? github
Operating system: Linux/Windows (other platforms are unsupported but feel free to report issues anyhow)
Linux: Linux kim-mason 5.15.0-1077-aws #84~20.04.1-Ubuntu SMP Mon Jan 20 22:14:54 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Python version: 3.11.5
Running in any particular CI environment we should know about? (e.g. Github Actions)
Description
When both unzip and 7zip are installed, MSI extraction fails. When only 7zip is installed it succeeds.
To reproduce
Steps to reproduce the behaviour:
--log debug
https://s3.amazonaws.com/ddagent-windows-stable/datadog-agent-7-latest.amd64.msi
a. Retrieve the file using
curl -O -sS https://s3.amazonaws.com/ddagent-windows-stable/datadog-agent-7-latest.amd64.msi
Expected behaviour: Extracts and scans the MSI.
Actual behaviour: Fails to extract the MSI.
Version/platform info
Version of CVE-bin-tool( e.g. output of
cve-bin-tool --version
): 3.4Installed from pypi or github? github
Operating system: Linux/Windows (other platforms are unsupported but feel free to report issues anyhow)
Linux: Linux kim-mason 5.15.0-1077-aws #84~20.04.1-Ubuntu SMP Mon Jan 20 22:14:54 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Python version: 3.11.5
Running in any particular CI environment we should know about? (e.g. Github Actions)
Anything else?
Feel free to add any other context here.
I have created a PR to fix this at #4973.
The text was updated successfully, but these errors were encountered: