> ## Content Index
> Fetch the complete content index at: https://connortumbleson.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Apktool v2.9.2 Released
- URL: https://connortumbleson.com/2024/01/05/apktool-v2-9-2-released/
- Published: 2024-01-05T12:22:07.000Z
- Updated: 2025-02-04T11:42:25.000Z
- Description: Apktool v2.9.2 has been released with a security fix.
- Author: Connor Tumbleson
- Tags: Apktool

![](https://connortumbleson.com/content/images/2024/01/292-1.png)

Apktool v2.9.2 has been released! This release is a hot-fix on top of the previous v2.9.1 release for 1 security fix.

Discovered by Yusuf at Denuvo Apktool would infer file names from the respective resource names, which if made malicious would result in a file being written outside of the directory in which Apktool was operating (ie path traversal). This can be read in more detail at the issue report: [CVE-2024-21633 (GHSA-2hqv-2xv4-5h5w)](https://github.com/iBotPeaches/Apktool/security/advisories/GHSA-2hqv-2xv4-5h5w?ref=connortumbleson.com)

**Sponsors**

I launched [GitHub Sponsors](https://github.com/sponsors/iBotPeaches?ref=connortumbleson.com) to help provide another alternative for folks showing appreciation. I want to remind folks of two companies that continue to hold a monthly donation for the project.

- [Emerge Tools](https://www.emergetools.com/?ref=connortumbleson.com) came online to sponsor the tool.
- [Sourcetoad](https://sourcetoad.com/?ref=connortumbleson.com) (self employer) additionally joined to sponsor (as well as a few other projects).

---

**This release had 3 commits by 1 person**

- Connor Tumbleson (iBotPeaches) - 3 commits

---

# Changes since 2.9.1

- \[[#3484](https://github.com/iBotPeaches/Apktool/pull/3484?ref=connortumbleson.com)\] Fix [#GHSA-2hqv-2xv4-5h5w](https://github.com/iBotPeaches/Apktool/security/advisories/GHSA-2hqv-2xv4-5h5w?ref=connortumbleson.com) (Arbitrary file writes). (Thanks 0x33c0unt)

## Notes

- The v2.9.x releases have moved to aapt2 being the default. If you'd like to return to the previous behavior, please use `--use-aapt1` during build stage.

## Download

[Download Apktool 2.9.2](https://bitbucket.org/iBotPeaches/apktool/downloads/apktool%5F2.9.2.jar?ref=connortumbleson.com)

- [Apktool 2.9.2](https://bitbucket.org/iBotPeaches/apktool/downloads/apktool%5F2.9.2.jar?ref=connortumbleson.com)  
  - `352f85721fa95847f03a10fa7ea78322` (md5)
  - `831f0ffc97b6f20f511d6183cbf6785464d341aacb0fb7e6f22ef0c7b228911a` (sha256)
  - Rename to `apktool.jar` and follow the [Instruction Guide](https://apktool.org/docs/install?ref=connortumbleson.com) if you need help.
- [2.9.2 Doc Site Post](https://apktool.org/blog/apktool-2.9.2?ref=connortumbleson.com)

## Links

- [Project Site](https://apktool.org/?ref=connortumbleson.com)
- [GitHub](https://github.com/iBotPeaches/Apktool?ref=connortumbleson.com)
- [Bug Tracker](https://github.com/iBotPeaches/Apktool/issues?ref=connortumbleson.com)
- [XDA Thread](https://forum.xda-developers.com/showthread.php?t=1755243&ref=connortumbleson.com)
- [GitHub Sponsors](https://github.com/sponsors/iBotPeaches?ref=connortumbleson.com)
- [Buy me a ~~Coffee~~ Beer](https://www.buymeacoffee.com/iBotPeaches?ref=connortumbleson.com)