There is this report of a bug on 7-Zip that may be concerning from a security point of view.
Opus is using one of the vulnerable versions (16.2). Previous posts seem to suggest that it is safe for the user to manually replace it with a newer version. Those concerned may want to install the version 18 (beta).
Thanks for the heads-up.
We don't normally include beta versions of the 7z.dll with Opus, but it sounds like it might be worth doing so in this case.
People who want to can replace 7z.dll under /home/VFSPlugins with the version of their choice if they want to update their copy sooner than we roll out a new version of Opus. Just makes sure you get the right 32-bit or 64-bit version as appropriate for your version.
You can use the Description column to check this; look for AMD64 if you're on 64-bit Windows/Opus and I386 on 32-bit (or if you're updating /home/x86/VFSPlugins which is used when making a 32-bit USB export from a 64-bit install).
The Description column will also tell you the versions you currently have installed.
Those bugs probably won't affect most Opus users, by the way. We don't normally use 7z for RAR (unrar.dll is the default now, although you can turn that off via Preferences), nor for Zip (unless ZipX is enabled in Preferences).
So you probably don't need to worry about this in Opus, but we'll update to 18.00 beta anyway to make things more secure when those Preferences are changed. And if you have 7-Zip itself installed, you will want to update that, and potentially other things that use 7z.dll (e.g. Beyond Compare is popular around here, and uses it; you can use Tools > Find Files to find other uses, and the Description column to check versions and bitness).
Edit: CBZ archives would also be affected, since they go through 7z.dll and are really Zip.
7-Zip 18.01 just came out as a stable version, so we don't need to worry about it being a beta now, either. We'll include the 18.01 DLLs in the next update.
