https://bugs.kde.org/show_bug.cgi?id=388423

--- Comment #13 from David Tonhofer <bugh...@gluino.name> ---
Hmmm....

$ rpm --query --file $(which 7z)
p7zip-plugins-16.02-9.fc27.x86_64

$ rpm --query --file $(which 7za)
p7zip-16.02-9.fc27.x86_64

Actually, if the version number of p7zip (the latest p7zip at sourceforge is
indeed 16.02) corresponds to the version number of 7z, it's a bit out of date.
The 7z latest is 18.01/2018-01-28, 16.02 was 2016-05-21. 

"Bugs have been fixed" in the meantime: 

http://www.7-zip.org/history.txt

Maybe it's one of those bugs.

(Incidentally, 15.05 was the one with the exploitable vulnerabilities:
http://blog.talosintelligence.com/2016/05/multiple-7-zip-vulnerabilities.html -
Completely unfunnily, the 7z history log says nothing about these; this does
not inspire confidence in 7z. At all. Langsec: Serious business!)

I will test this on a Windows machine nearby.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to