Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [QUIET] · [TECHNOLOGY]
3 clusters · 8 sources · 42 days · First seen · Last updated
Portable software platform and utility updates
Overview
PortableApps.com released version 30.5 of its Platform as a September maintenance update. This version included an update to 7-Zip for the platform’s backup and restore utility and updates to multiple locales.
Subsequent reports highlighted the PortableApps.com Platform alongside updates to PeaZip 11.3.0. While the Platform continues to serve as an open-source tool for managing portable applications on external drives or cloud-synced folders, PeaZip updates introduced the ability to read ZIM archives, allowing users to preview directory structures and extract specific elements.
In a more recent release, the PeaZip Project issued version 11.3.0, which features significant security enhancements and backend updates to 7z/p7zip 26.03 and Pea 1.33. This version introduces improved support for ZPAQ archives, a new test function for PEA archives, and a mandatory master password requirement for its integrated Password Manager. Security-focused improvements include enhanced DLL loading processes on Windows, better handling of metadata characters, and fixes for crashes involving encrypted ZPAQ archives. The software remains compatible with Windows, Linux, macOS, and BSD, supporting over 240 file extensions.
Following this, PeaZip released version 11.4.0, a security-focused update intended to harden the software against vulnerabilities such as remote code execution (RCE) bugs, specifically citing CVE-2026-102514. A major technical change in this version is the removal of full console subprocesses for archiving and extraction tasks. By eliminating reliance on terminal environments like cmd or bash, the update aims to mitigate command-injection risks where untrusted data within an archive could be executed as shell commands. This version also includes stricter input validation, enabled range checking, and updated backends including 7z/p7zip 26.04 and Pea 1.34.
Entities
PeaZip · 7-Zip · PortableApps.com · WinRAR · WinZip
Timeline
-
[TECHNOLOGY] 2 sourcesPeaZip releases 11.4.0 with security hardening
PeaZip 11.4.0 has launched, introducing security hardening to prevent command-injection and RCE vulnerabilities by removing console subprocesses and implementing stricter input validation.
-
[TECHNOLOGY] 4 sourcesPeaZip releases version 11.3.0 with security updates
PeaZip has released version 11.3.0, featuring enhanced security, mandatory master passwords for its password manager, and updated backends for improved archive management.
-
[TECHNOLOGY] 2 sourcesPortableApps.com releases Platform version 30.5
PortableApps.com has launched Platform version 30.5, a maintenance release featuring 7-Zip updates and locale improvements.
Sources
chip.de · iguru.gr · launchpad.net · linuxcompatible.org · pcastuces.com · portable.info.pl · portableapps.com · thinkit.co.jp
This summary has been updated 2 times: see revision history