Bug 2483951

Summary: CVE-2026-48095 (RCE) is fixed in 26.01 - please update 7zip
Product: [Fedora] Fedora Reporter: Patrick <patrick>
Component: 7zipAssignee: Michel Lind <michel>
Status: CLOSED DUPLICATE QA Contact:
Severity: high Docs Contact:
Priority: unspecified    
Version: 44CC: davide, michel
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
URL: https://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2026-06-15 16:02:23 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Patrick 2026-06-02 12:46:19 UTC
Can you please update 7zip to version 26.01 as it fixes CVE-2026-48095 (RCE).

Reproducible: Always

Steps to Reproduce:
1. use 7zip
2. RCE
3. no profit

Comment 2 Michel Lind 2026-06-15 16:02:23 UTC

*** This bug has been marked as a duplicate of bug 2485481 ***