7-Zip 26.04

7-Zip 26.04

• Some bugs and vulnerabilities were fixed.

7-Zip 26.03

7-Zip 26.03

• Improved support for Joliet ISO images and Compound archives.
• Some bugs and vulnerabilities were fixed.
• CVE-2026-58052 : 7-Zip failed to preserve the Mark-of-the-Web when extracting a crafted archive.

7-Zip 26.02

7-Zip 26.02

• Some bugs and vulnerabilities were fixed.
• CVE-2026-14266 : XZ Decompression Heap-based Buffer Overflow Remote Code Execution.

7-Zip 26.01

7-Zip 26.01

• linux version of 7-Zip can use huge pages (2 MB pages). It can increase compression speed for 10% for 7z/xz/LZMA/LZMA2 compression.
• new -spo[d|c|r] switch specifies the path generation mode for the output directory for archive extraction. The output directory path is generated from the path specified in the -o{dir_path} switch and the name of the archive being unpacked.
  -spod : for Linux/Posix/macOS: -o{dir_path} specifies the direct path to the output directory. The asterisk (*) character in {dir_path} will not be replaced by the archive name.
  -spoc : 7-Zip will concatenate the path specified in -o{dir_path} with the archive name to form the final path to the output directory.
  -spor : 7-Zip will replace asterisk (*) character in the path specified in the -o{dir_path} with the archive name. This is the default option.
• some bugs were fixed.
• CVE-2026-48092 : A heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds.
• CVE-2026-48095 : A heap buffer overflow in the NTFS archive handler.
• CVE-2026-48101 : An uninitialized memory disclosure vulnerability in the UEFI archive handler.
• CVE-2026-48102 : A heap out-of-bounds read in the UDF archive handler.
• CVE-2026-48103 : A heap out-of-bounds read in the WIM archive handler.
• CVE-2026-48104 : An uninitialized heap read in the SquashFS archive handler.
• CVE-2026-48111 : An out-of-bounds read vulnerability UEFI archive handler.
• CVE-2026-48112 : A heap out-of-bounds read in 7-Zip Ar archive handler.

26.00

7-Zip 26.00

• improved code for ZIP, CPIO, RAR, UFD, QCOW, Compound.
• 7-Zip File Manager: improved sorting order of the file list. It uses file name as secondary sorting key.
• 7-Zip File Manager: improved Benchmark to support systems with more than 64 CPU threads.
• the bug was fixed: 7-Zip could not correctly extract TAR archives containing sparse files.
• some bugs were fixed.

25.01

7-Zip 25.01

• The code for handling symbolic links has been changed to provide greater security when extracting files from archives.
  Command line switch -snld20 can be used to bypass default security checks when creating symbolic links.

25.00

7-Zip 25.00

• 7-Zip for Windows can now use more than 64 CPU threads for compression to zip/7z/xz archives and for the 7-Zip benchmark. If there are more than one processor group in Windows (on systems with more than 64 cpu threads), 7-Zip distributes running CPU threads across different processor groups.
• bzip2 compression speed was increased by 15-40%.
• deflate (zip/gz) compression speed was increased by 1-3%.
• improved support for zip, cpio and fat archives.
• fixed some bugs and vulnerabilities.

24.09

7-Zip 24.09

• The default dictionary size values for LZMA/LZMA2 compression methods were increased:

         dictionary size   compression level
  v24.08  v24.09  v24.09   
          32-bit  64-bit    
    8 MB   16 MB   16 MB   -mx4
   16 MB   32 MB   32 MB   -mx5 : Normal
   32 MB   64 MB   64 MB   -mx6
   32 MB   64 MB  128 MB   -mx7 : Maximum
   64 MB   64 MB  256 MB   -mx8
   64 MB   64 MB  256 MB   -mx9 : Ultra

The default dictionary size values for 32-bit versions of LZMA/LZMA2 don't exceed 64 MB.

• 7-Zip now can calculate the following hash checksums: SHA-512, SHA-384, SHA3-256 and MD5.
• APM and HFS support was improved.
• If an archive update operation uses a temporary archive folder and the archive is moved to the destination folder, 7-Zip shows the progress of moving the archive file, as this operation can take a long time if the archive is large.
• The bug was fixed: 7-Zip File Manager didn't propagate Zone.Identifier stream for extracted files from nested archives (if there is open archive inside another open archive).
• Some bugs were fixed.

24.08

7-Zip 24.08

• The bug in 7-Zip 24.00-24.07 was fixed:
  For creating a zip archive: 7-Zip could write extra zero bytes after the end of the archive, if a file included to archive cannot be compressed to a size smaller than original.
  The created zip archive is correct except for the useless zero bytes after the end of the archive.
  When unpacking such a zip archive, 7-Zip displays a warning:
  "WARNING: There are data after the end of archive".
• The bug was fixed: there was a leak of GDI objects (internal resources in Windows) in "Confirm File Replace" window, causing problems after 1600 displays of "Confirm File Replace" window from same running 7-Zip process.
• Some optimizations for displaying file icons in 7-Zip File Manager and in "Confirm File Replace" window.
• Some bugs were fixed.

24.07

7-Zip 24.07

• The bug was fixed: 7-Zip could crash for some incorrect ZSTD archives.