Fedora Account System
Red Hat Associate
Red Hat Customer
Please branch and build 7zip in epel9. Notes: I'm aware of p7zip being available in epel9, but this software seems to be outdated/not maintained anymore. Several CVEs are reported for it. To prevent interfering with p7zip, the epel9 build of 7zip maybe should not have the "Provides: p7zip-plugins" setting (which the epel10 version has).
It appears the p7zip project was abandoned after the 7zip team started publishing a Linux version in 2016 (https://sourceforge.net/projects/p7zip/files/p7zip/16.02/). The last version available is 16.02, which is the version included in EPEL9 (https://koji.fedoraproject.org/koji/buildinfo?buildID=2560490). Currently Wiz is flagging this package because it is vulnerable to CVE-2025-53816 (https://www.cve.org/CVERecord?id=CVE-2025-53816) and CVE-2025-53817 (https://www.cve.org/CVERecord?id=CVE-2025-53817). I see the 7zip package, version 25.01, which solves these two CVEs, has been released for EPEL10 (https://koji.fedoraproject.org/koji/buildinfo?buildID=2866256), and it would be very helpful to have it for EPEL9 as Enterprise Linux 9 is still under active development and support. Thank you.
Sorry to spam this bug, but after posting the above, I came across Debian's errata regarding p7zip and CVE-2025-53816 in which they indicate essentially the same as above, that p7zip is abandoned and backporting the fix would require a major refactor of the 16.02 code. Their solution was to release the 7zip version 25.00 as p7zip '16.02-really25.00'. https://lists.debian.org/debian-lts-announce/2026/05/msg00021.html
FEDORA-EPEL-2026-f9c4dcd003 (7zip-26.02-1.el9) has been submitted as an update to Fedora EPEL 9. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f9c4dcd003
FEDORA-EPEL-2026-f9c4dcd003 has been pushed to the Fedora EPEL 9 testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f9c4dcd003 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-EPEL-2026-f9c4dcd003 (7zip-26.02-1.el9) has been pushed to the Fedora EPEL 9 stable repository. If problem still persists, please make note of it in this bug report.