NanaZip 6.0.1698.0 Security Update Fixes Multiple CVEs (GHSL-2026)

Vulnerability Overview NanaZip 6.0 Update 5 (6.0.1698.0) resolves multiple security vulnerabilities reported by JarLob (Jaroslav Lobačevski). The specific vulnerability identifiers are as follows: GHSL-2026-124, CVE-2026-54616 GHSL-2026-125, CVE-2026-44215 GHSL-2026-126, CVE-2026-47222 GHSL-2026-127, CVE-2026-47223 GHSL-2026-128, CVE-2026-42446 GHSL-2026-129, CVE-2026-47224 GHSL-2026-130, CVE-2026-42442 GHSL-2026-131, CVE-2026-42443 GHSL-2026-132, CVE-2026-42445 GHSL-2026-133, CVE-2026-42355 GHSL-2026-134, CVE-2026-42444 Affected Scope These vulnerabilities exist within the and files in NanaZip, which are part of the 7-Zip source code. Users who have forked 7-Zip and enabled these handlers must synchronize their code with 7-Zip 26.01 to obtain the fixes. Remediation NanaZip 6.0 Update 5 (6.0.1698.0) has patched all the aforementioned vulnerabilities. Users can resolve these issues by downloading and installing this version. Additional Information The current NanaZip 6.5 Preview has not yet addressed these issues; it is recommended to wait for the next 6.5 Preview release. Developers should note that GHSL-2026-126, GHSL-2026-127, and GHSL-2026-129 originate from issues present in the 7-Zip source code. These require synchronization with 7-Zip 26.01 to obtain the fixes. Download Links MSIX Package: NanaZip_6.0.1698.0.msixbundle License XML: NanaZip_6.0.1698.0.xml Portable package: NanaZip_6.0.1698.0_Binaries.zip Debug Symbols: NanaZip_6.0.1698.0_DebugSymbols.zip Notes This version also fixes several other issues, including codec problems, the unavailability of the Sponsor Dialog, updates to the installation instructions documentation, updates to the system requirements documentation, and the update of Mile.Windows.Internal to version 1.0.3566.

Goal Reached Thanks to every supporter — we hit 100%!

NanaZip 6.0.1698.0 Security Update Fixes Multiple CVEs (GHSL-2026)

More from this source