Bug 2412315

Summary: 7z echoes a supplied password
Product: [Fedora] Fedora Reporter: muttmanor
Component: 7zipAssignee: Michel Lind <michel>
Status: CLOSED ERRATA QA Contact:
Severity: medium Docs Contact:
Priority: unspecified    
Version: 43CC: davide, michel
Target Milestone: ---Keywords: EasyFix, Security
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: 7zip-25.01-1.fc44 7zip-25.01-1.fc43 7zip-25.01-1.el10_2 7zip-25.01-1.el10_1 Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-11-26 17:58:15 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Screenshot that shows the problem none

Description muttmanor 2025-11-04 18:52:31 UTC 
When creating or extracting an encrypted archive, the password is shown in the terminal. This happens with 7zip-24.09-6.fc43.x86_64

This seems to be a known problem that was fixed here (fork of upstream): https://github.com/wesinator/7zip/commit/ece9df515b12f9bde2e8150f402db3f394d03db3

Reproducible: Always

Steps to Reproduce:
7z a -p test.7z test.txt
Actual Results:
7z a -p test.7z test.txt 

7-Zip 24.09 (x64) : Copyright (c) 1999-2024 Igor Pavlov : 2024-11-29
 64-bit locale=de_DE.UTF-8 Threads:16 OPEN_MAX:1024

Scanning the drive:
1 file, 15 bytes (1 KiB)

Creating archive: test.7z

Add new data to archive: 1 file, 15 bytes (1 KiB)


Enter password:thisshouldbeinvisible

    
Files read from disk: 1
Archive size: 170 bytes (1 KiB)
Everything is Ok


Expected Results:
Password should not be echoed.

Additional Information:
This used to work as expected in Fedora 42
Comment 1 muttmanor 2025-11-04 18:55:20 UTC 
Created attachment 2112677 [details]
Screenshot that shows the problem
Comment 2 Michel Lind 2025-11-26 15:32:54 UTC 
Ugh, and this is not fixed in 25.01 either it seems. Thanks, I'll see if I can get the fix to apply and get upstream to try and fix it
Comment 3 Fedora Update System 2025-11-26 16:11:48 UTC 
FEDORA-2025-b5a4903ea0 (7zip-25.01-1.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-b5a4903ea0
Comment 4 Fedora Update System 2025-11-26 17:15:16 UTC 
FEDORA-EPEL-2025-2bed30c65f (7zip-25.01-1.el10_2) has been submitted as an update to Fedora EPEL 10.2.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-2bed30c65f
Comment 5 Fedora Update System 2025-11-26 17:15:32 UTC 
FEDORA-2025-b6422d64f9 (7zip-25.01-1.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-b6422d64f9
Comment 6 Fedora Update System 2025-11-26 17:58:15 UTC 
FEDORA-2025-b5a4903ea0 (7zip-25.01-1.fc44) has been pushed to the Fedora 44 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 7 Fedora Update System 2025-11-27 00:47:42 UTC 
FEDORA-2025-b6422d64f9 (7zip-25.01-1.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 8 Fedora Update System 2025-11-27 00:57:24 UTC 
FEDORA-EPEL-2025-2bed30c65f (7zip-25.01-1.el10_2) has been pushed to the Fedora EPEL 10.2 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 9 Fedora Update System 2025-11-27 01:06:35 UTC 
FEDORA-EPEL-2025-0a81d38451 (7zip-25.01-1.el10_1) has been pushed to the Fedora EPEL 10.1 stable repository.
If problem still persists, please make note of it in this bug report.