So, it seems that the real issue is in consio.cpp and wasnt in 3.7.2 ... Patch attached for 3.5.4
** Attachment added: "Patch for version 3.5.4 of unrar-nonfree" http://librarian.launchpad.net/6394099/new_fix_cve -- Security update for rar/unrar (CVE-2007-0855) https://launchpad.net/bugs/84657 -- ubuntu-backports mailing list ubuntu-backports@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-backports