p7zip

p7zip, a port/fork of 7-Zip for UNIX systems, has been unmaintained upstream. Additionally, 7-Zip security fixes are unfortunately not isolated, hence hard to locate, backport and test.

To address security vulnerabilities, we now regularly replace p7zip with a recent 7-Zip (which now supports GNU/Linux natively), slightly modified to make it reasonably compatible with p7zip, along with a specific DEP-8 test.

Manual testing:

  • GUIs: engrampa/file-roller, ark, lxqt-archiver; in particular symlinks handling

  • CLI wrappers: mc, atool…

  • Antivirus: amavisd-new

  • Usage in test suites: libio-compress-lzma-perl (autopkgtest)

  • Illegal usage of (private) 7z.so: android-platform-external-libunwind (build); Crc* and Xz* symbols remained stable over time so far

  • SFX (SelF-eXtracting archive): concatenating /usr/lib/p7zip/7zCon.sfx with a .7z file and executing it

  • Password encryption: -p (encrypt content), -mhe=on (encrypt headers/metadata)

  • p7zip-rar module (non-free): ensure it remains compatible

Sample bookworm SPUs:

Copyright (C) 2026 Sylvain Beucler