Recently some serious vulnerabilities have been found in 7zip libraries:
networkworld.com/article/306 ... -risk.html
How is DOpus affected? Will there be a release with an updated 7z.dll and opus7zip.dll?
Recently some serious vulnerabilities have been found in 7zip libraries:
networkworld.com/article/306 ... -risk.html
How is DOpus affected? Will there be a release with an updated 7z.dll and opus7zip.dll?
opus7zip.dll is unaffected and won't need updating.
You can drop 7z.dll from 7-Zip 16.00 (or later) into the /home/VFSPlugins folder if you want to update it ASAP. We'll include it in newer releases as well.
(Be sure to get the correct 32-bit or 64-bit version, and also update the opposite copy in the x86 or x64 folder in case you use USB Exports to another bitness.)
According to this detailed breakdown, the problems affect UDF (.iso) and HFS+ (.hfs) which are both disabled by default in Opus, so the risk should be minimal.
Update: You can check which things are enabled under Preferences / Zip & Other Archives / Archive and VFS Plugins.
Leo, thanks for your fast answer and help!