Differences
This shows you the differences between the selected revisions of the page.
| history 2009-10-27 | history 2026-11-06 (current) | ||
| Line 1: | Line 1: | ||
| ====== Recent Version History ====== | ====== Recent Version History ====== | ||
| - | This is list of changes for each release of WinSCP. See also [[project_history|project history]]. | + | This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. |
| - | ===== Not Released Yet ===== | + | ===== [[6.8]] 6.8 (not released yet) ((2026-11-06)) ===== |
| - | === 2009-10-27 === | + | |
| - | ··* Bug fix: When master password changing was canceled, message informing about successful change appeared anyway. | + | |
| - | ===== [[4.2.4]] 4.2.4 beta ===== | + | ··* Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]] |
| - | === 2009-10-25 === | + | * Support client certificates with intermediate certificate. [[bug>2475]] |
| - | ··* File search. [[bug>92]] | + | * Allow opening file properties from S3 servers that keep no object ACLs. [[bug>2472]] |
| - | * Stored session passwords can be encrypted by AES cipher using master password. [[bug>273]] | + | * Not loading S3 tags for directories to avoid errors when opening directory Properties from servers that do not implement directory tags. [[bug>2473]] |
| - | * Path relative to startup directory can be used in initial session local directory. [[bug>492]] | + | * Bug fix: Failure when SSH authentication banner is displayed while reconnecting a session. [[bug>2474]] |
| - | * Up to 255 characters long SFTP server commands are allowed. [[bug>495]] | + | * Bug fix: Parsing of multiline VMS FTP listing entries is broken. [[bug>1950]] |
| - | * Value ''off'' of ''reconnecttime'' script option is case-insensitive. [[bug>491]] | + | * Bug fix: Dragging file from long path directory to remote panel results in uploading the file with 8.3 filename. [[bug>2480]] |
| - | * SFTP status code is not logged as status/error code anymore. [[bug>484]] | + | * Bug fix: Ampersand in group box caption is duplicated in preferences search results. |
| - | * While downloading trailing dot in filenames is replaced with ''%2E'', as Windows trim them. [[bug>452]] | + | * Bug fix: Failure when system fails to provide timezone information for specific year. [[bug>2481]] |
| - | * WinSCP can load plain text tunnel password from configuration (new attribute ''TunnelPasswordPlain''). If possible, it automatically converts the password to encrypted form. [[bug>497]] | + | |
| - | * SSH core upgraded to [[&url(puttywishlist)|the latest development snapshot of PuTTY]] (2008-09-27, revision 8665). It brings following changes: | + | |
| - | * Bug fix: Minor memory leaks. | + | |
| - | * Bug fix: Uploads of large files with FTP were restarting. [[bug>157]] | + | |
| - | * Bug fix: Error when opening separate shell session. [[bug>477]] | + | |
| - | * Bug fix: Backslash in remote path broke path label. [[bug>482]] | + | |
| - | * Bug fix: Using passive mode was suggested when connection fails even when used already. [[bug>485]] | + | |
| - | * Bug fix: Operation hanged for a while when transfer of file was skipped with FTP protocol. [[bug>486]] | + | |
| - | * Bug fix: Operation hanged occasionally when both control and transfer connection were closed at the same time with FTP protocol. [[bug>487]] | + | |
| - | * Bug fix: Quote escaping did not work with console interface tool. [[bug>494]] | + | |
| - | * Bug fix: ''Ctrl+C'' in console windows occasionally interrupted more than one prompt. | + | |
| - | * Bug fix: Failed connection in script closed last active session simultaneously. | + | |
| - | * Bug fix: It was not possible to copy remote files using drag&drop within remote panel with FTP protocol. | + | |
| - | * Bug fix: Problem minimizing progress windows while performing operation executed from command-line. [[bug>475]] | + | |
| - | * Bug fix: WinSCP hanged on some systems, when remote file with name reserved on Windows appeared in directory listing. [[bug>152]] | + | |
| - | * Bug fix: Backslash was inserted to remote path when running custom command from synchronization checklist dialog. [[bug>498]] | + | |
| - | ===== [[4.2.3]] 4.2.3 beta ===== | + | ===== [[6.7.1]] 6.7.1 (not released yet) ((2026-11-06)) ===== |
| - | === 2009-08-18 === | + | |
| - | * Configurable keyboard shortcuts for custom commands and shared bookmarks. [[bug>103]] | + | |
| - | * FTP proxy support. [[bug>27]] | + | |
| - | * FTPS server certificate is shown on Server and protocol information dialog. [[bug>438]] | + | |
| - | * Existing remote file can be opened in editor by typing its name. [[bug>366]] | + | |
| - | * Workaround for Momentum server limit of 32 KiB for reading/writing. [[bug>440]] | + | |
| - | * Added missing descriptions of ''certificate'', ''implicit'', ''explicitssl'' and ''explicittls'' switches for command-line and scripting. | + | |
| - | * Empty SSH keyboard interactive prompts are ignored. [[bug>388]] | + | |
| - | * 256x256 icon is deployed with WinSCP. [[bug>445]] | + | |
| - | * WinSCP prevents computer from being suspended during operation. [[bug>265]] | + | |
| - | * It can be configured how long WinSCP should keep trying reconnect broken sessions. [[bug>460]] | + | |
| - | * Change: Double double-quote is treated as a single double-quote within value of command-line parameter. [[bug>454]] | + | |
| - | * For FTP servers know not to support ''LIST -a'' command (Personal FTP server), ''LIST'' only is used by default. [[bug>458]] | + | |
| - | * Errors when deleting local files after upload finishes are reported. [[bug>462]] | + | |
| - | * Pressing ''Enter'', while having selected an open session without hostname, loads the session. [[bug>463]] | + | |
| - | * Session name can be optionally used as part of the path to temporary copies of remote files. [[bug>385]] | + | |
| - | * Remote path may optionally not be used as part of the path to temporary copies of remote files. [[bug>229]] | + | |
| - | * Option for substituting FTP passive mode IP address with connection address. [[bug>376]] | + | |
| - | * Change: Once dot-only filenames are obscured from Windows, all security checks which hide dot-only filenames from user are removed. [[bug>452]] | + | |
| - | · * Bug fix: Overwrite confirmations were shown even when target file did not exist when uploading with SFTP protocol. [[bug>442]] | + | |
| - | * Bug fix: //Mask hints// label on transfer settings dialogs was improperly placed when localized. | + | |
| - | * Bug fix: Failure when closing session while having log window opened and custom commands toolbar displayed. [[bug>441]] | + | |
| - | * Bug fix: Passive FTP transfers with IPv6 did not work. [[bug>446]] | + | |
| - | * Bug fix: ''Ctrl+R'' in the internal editor opened Replace dialog instead of reloading current document. [[bug>444]] | + | |
| - | * Bug fix: Meaning of UTF-8 encoding for filenames option was reversed for FTP. [[bug>450]] | + | |
| - | * Bug fix: Skipped files are shown in progress list on console. [[bug>451]] | + | |
| - | * Bug fix: Values were overlapped on progress window when //Calculate total size// transfer settings was disabled. [[bug>456]] | + | |
| - | * Bug fix: "There is no disk in drive" message was sometimes shown on startup. [[bug>19]] | + | |
| - | * Bug fix: Failure when configuration was changed, while file from closed internal editor was still being uploaded. [[bug>461]] | + | |
| - | * Bug fix: Failure when file was opened in editor while still being uploaded after closing editor. [[bug>465]] | + | |
| - | * Bug fix: Transfer progress was not shown on console when moving files to local directory. [[bug>443]] | + | |
| - | * Bug fix: Error when uploading empty folder that already existed on the server with FTP. [[bug>466]] | + | |
| - | * Bug fix: Failure when FTP data connection was lost. [[bug>467]] | + | |
| - | * Bug fix: Memory leak in drag&drop shell extension. [[bug>471]] | + | |
| - | * Bug fix: Failure when installing on Windows 2000. [[bug>447]] | + | |
| - | * Bug fix: OpenCandy DLL was installed even if user chose not to use it. [[bug>455]] | + | |
| - | * Bug fix: Icon was not displayed properly on Windows 2000. [[bug>473]] | + | |
| - | * Bug fix: Timeout may occurred earlier that configured with FTP. [[bug>472]] | + | |
| - | ===== [[4.2.2]] 4.2.2 beta ===== | + | ··* Translation updated: Brazilian Portuguese. |
| - | === 2009-06-28 === | + | * XML parser upgraded to Expat 2.10.0. |
| - | ··* [[http://winscp.net/forum/viewtopic.php?t=6854|New icon]] by [[http://jhnet.co.uk/|Jonathan Heathcote]] | + | * Installer upgraded to Inno Setup 6.7.4. |
| - | * [[opencandy|OpenCandy]] advertising network is used in installation application. | + | * Bug fix: Memory leak in encrypted HTTP/S3/WebDAV connections. [[bug>2476]] |
| - | * Each selected file/directory can be optionally added individually to background transfer queue. [[bug>97]] | + | * Bug fix: Recursive SCP directory download allows local path traversal when replacing of invalid characters in filenames is disabled. [[bug>2477]] |
| - | * It is possible to schedule computer shutdown at the end of operation or once the background transfer queue is empty. [[bug>292]] | + | * Bug fix: Failure when dragging remote file with drag&drop shell extension enabled in 64-bit build. [[bug>2478]] |
| - | * New switches ''-append'' and ''-resume'' to scripting commands ''put'' and ''get'' to append file/resume transfer respectively. [[bug>298]] | + | * Failure when showing a message box on a system that does not support annotating accessible elements. [[bug>2482]] |
| - | * Added switch ''/certificate'' to command-line and ''open'' script command to automatically accept SSL certificate with given fingerprint. [[bug>430]] | + | |
| - | * Change: SSH host key or SSL/TLS certificate can no longer be automatically verified using scripting batch mode. [[bug>411]] | + | |
| - | * When renaming a file within file panel, whole filename (including an extension) can be optionally selected again. [[bug>255]] | + | |
| - | * In Commander interface the directory tree can be optionally shown left of file list. [[bug>5]] | + | |
| - | * Broken idle sessions are optionally automatically reconnected. [[bug>30]] | + | |
| - | * Local custom commands that work both with remote and local file (diff-style) can be executed from synchronization checklist for pairs of files. [[bug>54]] | + | |
| - | * SSH core upgraded to [[&url(puttywishlist)|the latest development snapshot of PuTTY]] (2008-04-26, revision 8519). It brings following changes: | + | |
| - | * Empty SSH keyboard interactive prompts are ignored. [[bug>388]] | + | |
| - | * SSL core upgraded to OpenSSL 0.9.8k. | + | |
| - | * FTPS session can be opened from script explicitly. [[bug>396]] | + | |
| - | * It is possible to turn off both modification time and file size comparison criteria, synchronizing thus only by file existence. [[bug>368]] | + | |
| - | * List of parameters can be passed to script using ''/parameter'' command-line parameter. The parameters are resolved in the script using ''%N%'' pattern. [[bug>197]] | + | |
| - | * For synchronization, when comparison by modification time is disabled, it is possible to turn off preserving of timestamp. [[bug>368]] | + | |
| - | * Empty password can be specified explicitly on command-line and in script to allow password-less authentication with FTP. [[bug>428]] | + | |
| - | * Speed limit can be set as part of transfer settings. [[bug>302]] | + | |
| - | * It can be configured how long script should keep trying reconnect broken sessions. [[bug>367]] | + | |
| - | * On download names of files reserved in Windows (such as ''NUL'') are appended with ''%00'' to allow saving them. [[bug>58]] | + | |
| - | * Appending to log file with XML format is disallowed. | + | |
| - | * Dialogs are showed on-screen even if center of the main window is off-screen. [[bug>360]] | + | |
| - | * Changed usage to discourage specification of session on command-line for console use. | + | |
| - | * Console interface tool usage shows only command-line parameters relevant for console use. | + | |
| - | * Limited number of HTTP redirects when checking for updates. | + | |
| - | * When opening connection in FTP active mode fails, using passive mode is suggested. | + | |
| - | * Workaround for Windows 7 incompatibility, preventing loading translation plugins. [[bug>423]] | + | |
| - | * For compatibility with Fedora 11, dot (''.'') after permissions in directory listing is ignored [[bug>436]] | + | |
| - | * Transfer settings controls reorganized so that //Clear 'Archive' attribute// fits to //Upload options//. [[bug>108]] | + | |
| - | * In //Mirror// synchronization mode it is possible to turn off comparison by modification time. | + | |
| - | * It is not possible to change XML log file name in middle of session. [[bug>393]] | + | |
| - | * Bug fix: Failure when downloading file from non-current directory with FTPS protocol. [[bug>390]] | + | |
| - | * Bug fix: //Edit With// dialog had wrong layout. | + | |
| - | * Bug fix: Overwriting new or updated files only was not working with SFTP when overwrite confirmations were disabled. [[bug>408]] | + | |
| - | * Bug fix: Occasional failure when closing commander window. [[bug>419]] | + | |
| - | * Bug fix: Local shortcuts were not followed. [[bug>420]] | + | |
| - | * Bug fix: //Commander// tab of Preferences dialog did not have help screen associated. | + | |
| - | * Bug fix: Selection did not follow focus after reloading of directory. [[bug>432]] | + | |
| - | * Bug fix: Stray empty line was printed on console on failed connections. | + | |
| - | * See also change list for [[history#4.1.9|4.1.9]]. | + | |
| - | ===== [[4.2.1]] 4.2.1 beta ===== | + | ===== [[6.7]] 6.7 ((2026-10-14)) ===== |
| - | === 2009-02-27 === | + | |
| - | ··* Bug fix: It was not possible to open Preferences dialog. [[bug>381]] | + | |
| - | * Bug fix: Error message was appearing during installation. [[bug>382]] | + | |
| - | ===== [[4.2]] 4.2 beta ===== | + | ··* Allowing to report abnormal program terminations. |
| - | === 2009-02-26 === | + | * Bug fix: Failure when keeping remote directory up to date. [[bug>2468]] |
| - | ··* FTPS (FTP over TLS/SSL) support using OpenSSL 0.9.8j. [[bug>36]] | + | * Bug fix: Failure when using options in button drop down menus on Overwrite confirmation box. [[bug>2469]] |
| - | * It is possible to change group/owner of a remote file by UID/GID. [[bug>333]] | + | ·* Bug fix: File handle leak. [[bug>2470]] |
| - | * XML logging for more formal and machine-readable representation of operations performed during the session. [[bug>95]] | + | * Bug fix: Failure when using ''rmdir'' command with WebDAV protocol. [[bug>2471]] |
| - | * Filter for file panel. [[bug>56]] | + | |
| - | * New set of bookmarks/location profiles that is shared among all sessions. [[bug>284]] | + | |
| - | * Timestamps of uploaded files are preserved with FTP. [[bug>293]] | + | |
| - | * SSH core upgraded to [[&url(puttywishlist)|the latest development snapshot of PuTTY]] (2008-02-23, revision 8461). It brings following changes: | + | |
| - | * Improved flow control with SSH-2, what improved transfer speed, particularly for downloads. [[bug>17]] [[pbug>flow-control]] [[pbug>flow-control-filexfer]] | + | |
| - | * Support for SSH-2 RSA key exchange. [[pbug>ssh2-rsa-kex]] | + | |
| - | * Improved robustness when dealing with servers that does not respect WinSCP window size. [[pbug>ssh2-window-overrun]] | + | |
| - | * Improved robustness when dealing with servers that does not respect WinSCP packet size limit (e.g. GlobalSCAPE). [[bug>314]] [[pbug>ssh2-bug-maxpkt]] | + | |
| - | * Switched to PuTTY's own implementation of Kerberos/GSSAPI. It brings following changes: [[pbug>kerberos-gssapi]] | + | |
| - | * GSS key exchange algorithms are no longer supported. | + | |
| - | * Session option //Service principal name// is no longer supported. | + | |
| - | ····* Bug fix: WinSCP tried password authentication with SSH-1 even if the server says not to. [[pbug>ssh1-no-password]] | + | |
| - | ···* Bug fix: In CBC modes, decrypting the packet length could leak information. [[pbug>ssh2-cbc-pktlen-weakness]] | + | |
| - | * When checking for updates, beta versions are by default not reported. | + | |
| - | * Any file mask can include exclude masks (separated by pipe). [[bug>328]] | + | |
| - | * Position of internal editor window is remembered. [[bug>317]] | + | |
| - | * It is possible to synchronize remote files with name that is not allowed on Windows. [[bug>31]] | + | |
| - | * Console window of ''.exe'' can be minimized to task bar status area. [[bug>243]] | + | |
| - | * For external editors, WinSCP no longer waits for editor process to be closed by default. It keeps edited remote file in temporary directory until WinSCP closes instead. Previous behavior can be forced using editor preference option //External editor opens each file in separate window (process)//. [[bug>334]] | + | |
| - | * In editor preferences list, editing certain files with an associated application can be configured. [[bug>283]] | + | |
| - | * It is possible to edit files in ad hoc selected editor. [[bug>291]] | + | |
| - | * Using of switch ''-a'' with FTP ''LIST'' command is configurable. [[bug>275]] | + | |
| - | * For messages without associated help page, WinSCP can initiate search of whole documentation site. | + | |
| - | * File mask hint shows file size mask syntax. | + | |
| - | * Number of not shown hidden files is indicated on status bar. | + | |
| - | * Expanding/collapsing capability of create directory dialog removed. | + | |
| - | * Bug fix: File externally hidden was not removed from file panel. | + | |
| - | * Improvements and fixes back-propagated to [[history#4.1.9|4.1.9]] hotfix release. | + | |
| - | ===== [[4.1.9]] 4.1.9 (hotfix) ===== | + | ===== [[6.6.4]] 6.6.4 RC ((2026-10-07)) ===== |
| - | === 2009-04-23 === | + | · |
| - | * Back-propagates some improvements and fixes from [[history#4.2|4.2 beta]] release: | + | * TLS/SSL core upgraded to OpenSSL 3.5.9. |
| - | ····* Workaround for problem with Tectia SFTP server corrupting remote file if resumed transfer fails again. [[bug>351]] | + | * XML parser upgraded to Expat 2.9.0. |
| - | * Errors while keeping session alive with FTP protocol are ignored. | + | * Increased length limit of proxy host name for updates preferences. [[bug>2456]] |
| - | ···* Bug fix: When synchronizing timestamps of local files, update of non-existing local files was offered. [[bug>346]] | + | * Optionally default to keeping Login dialog open after opening session in PuTTY. [[bug>2459]] |
| - | * Bug fix: When name of destination remote file was changed on overwrite confirmation dialog, timestamps and permissions were yet set on the original filename (SFTP only). | + | * Improving placement of windows, particularly those opened, while the main window is not visible (notably during command-line operations). |
| - | ···* Bug fix: Change of name of destination remote file on overwrite confirmation dialog was not reflected properly for resumable file transfers (SFTP only). | + | * Not scanning local directory symlinks pointing to network drives. |
| - | * Bug fix: Failure during dummy listing of remote directory with FTP as form of keepalive, while error message of failed regular directory listing was shown. | + | * Show keyboard accelerators on Overwrite confirmation box when keyboard modifier is pressed. [[bug>2463]] |
| - | * Bug fix: Failure after closing internal editor. [[bug>349]] | + | * Removed no longer working OneDrive code. |
| - | * Bug fix: Infinite loop when FTP directory listing with ''-a'' switch fails. [[bug>352]] | + | * Updated to JCL library 2.9 commit 10b92737. |
| - | * Bug fix: Paste in an internal editor could not be undone. [[bug>354]] | + | * Using themed button drop down menu on Overwrite confirmation box. |
| - | * Bug fix: Script switch ''-preservetime'' did not work. [[bug>361]] | + | * Bug fix: When selecting a site to perform a command-line operation with, it was possible to select a workspace or a folder, resulting in unexpected behaviour or failure. [[bug>2457]] |
| - | ····* Bug fix: Repetitive prompts for adding bookmark when switching between "bookmark" and "location profile" mode. | + | ·* Bug fix: After opening session in PuTTY, WinSCP process is never closed. [[bug>2458]] |
| - | * Bug fix: Suspending background transfer was not working with FTP. [[bug>341]] | + | ·* Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] |
| - | ···* Bug fix: Occasional failure when showing main window. [[bug>369]] | + | ·* Bug fix: Fix crashes or unexpected behaviour when user saves a site and a workspace with the same name. [[bug>2462]] |
| - | * Bug fix: Status bar on log file window always indicated no log file. [[bug>370]] | + | ·* Bug fix: System context menus always show in dark mode. [[bug>2467]] |
| - | ····* Bug fix: Just leaved directory was not focused in file panel when paths as reported by remote server ended with slash. [[bug>371]] | + | ·* Bug fix: Temporary directory structure for edited remote file reflected the current remote directory path rather than an actual path of the edited file. [[bug>2466]] |
| - | * Bug fix: Opening session in PuTTY was not working for ad-hoc sessions. [[bug>372]] | + | |
| - | ····* Bug fix: Incorrectly URL-encoded character in session specification may caused the session to be silently ignored. [[bug>373]] | + | |
| - | * Bug fix: Failure of authentication was not shown on authentication dialog with FTP protocol. | + | |
| - | ····* Bug fix: Directories with no transferred files were not created on upload with FTP. [[bug>137]] | + | |
| - | * Back-propagates some improvements and fixes from upcoming 4.2.2 release: | + | |
| - | * Improved logging of FTP protocol events and errors. | + | |
| - | * Password for tunnel session is also remembered for background transfers. [[bug>400]] | + | |
| - | ···* Timestamps of local and remote file are compared with respect to their precision when transferring updated files only. [[bug>409]] | + | |
| - | * Bug fix: File selection was broken after sorting on Windows Vista. [[bug>383]] | + | |
| - | * Bug fix: Main window stopped responding if directory listing with SFTP started with file with suspicious name. [[bug>384]] | + | |
| - | * Bug fix: No overwrite confirmation when dropping local files to local panel of Commander interface. [[bug>387]] | + | |
| - | * Bug fix: Local and remote panels were inconsistently sorted by extension. [[bug>389]] | + | |
| - | ····* Bug fix: The //Update subdirectories// checkbox of Keep remote directory up to date did not apply to synchronization on start. [[bug>395]] | + | |
| - | * Bug fix: When changing directory with FTP failed due to new remote path being different to requested one, respective error message missed to report a cause. [[bug>398]] | + | |
| - | * Bug fix: Remembered password of main session was in some cases reused to authenticate tunnel session for background transfers. [[bug>400]] | + | |
| - | ···* Bug fix: Blank lines of command output were not shown in console window. [[bug>402]] | + | |
| - | * Bug fix: Button-like controls disappeared when accelerators were about to be shown on Windows Vista. [[bug>329]] | + | |
| - | ···* Bug fix: Last modification date was not shown in local file panel with some rare system date/time formats. [[bug>406]] | + | |
| - | ···* Bug fix: Transfer to temporary file was disabled when transferring file to/from editor. [[bug>407]] | + | |
| - | * Bug fix: Overwrite confirmation prompt was showing timestamps not adjusted for DST with FTP. [[bug>412]] | + | |
| - | ···* Bug fix: Failure while uploading file when timestamp of remote file was not retrieved with FTP protocol. [[bug>413]] | + | |
| - | ···* Bug fix: WinSCP hanged when FTP connection was closed while waiting for reply to keepalive. [[bug>414]] | + | |
| - | * Bug fix: FTP command scheduled for execution just before connection is closed was executed out of the order after reconnect. [[bug>415]] | + | |
| - | ===== 4.1.8 ===== | + | ===== [[6.6.3]] 6.6.3 RC ((2026-09-03)) ===== |
| - | === 2008-12-01 === | + | |
| - | * Expanding/collapsing capability of message boxes removed. | + | * Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish. |
| - | * Bug fix: Icon on Properties dialog is shrunk to fit, if shell icon size is too large. [[bug>323]] | + | * Some parts of GUI (panel headers, scrollbars, buttons, checkboxes) show dark in dark theme even when system-wide app theme is light. |
| - | * Bug fix: Dragging of item in editor list was not correctly stopped. | + | * SSH core and private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. \\ It brings the following change: |
| - | * Bug fix: Error when moving current remote directory to different location (e.g. by dragging tree node). [[bug>330]] | + | * Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>pageant-deferred-decryption-uaf]] |
| - | * Bug fix: Duplicating session in new window was not working. [[bug>332]] | + | * Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]] |
| - | * Bug fix: Color of file panel border was not updated in some cases. | + | * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] |
| - | * Bug fix: Error on startup when initial local directory as reported by Windows starts with lowercase drive letter. [[bug>319]] | + | * Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] |
| - | * Bug fix: Size of externally removed local files was not detracted from total file size shown on status bar. | + | * Bundled SSH private key tools (PuTTYgen and Pageant) are 64-bit. |
| - | * Bug fix: File statistics on status bar was not updated with automatic update of local file panel on external change. | + | * On Windows 11, using system dark tab theme, that uses different shades for active and disabled/disconnected tabs. [[bug>2452]] |
| - | * Bug fix: Controls on some dialogs (e.g. editor preferences dialog) were occasionally corrupted. [[bug>336]] | + | * TLS/SSL core upgraded to OpenSSL 3.5.8. |
| + | * XML parser upgraded to Expat 2.8.4. | ||
| + | * Source code package build script supports 64-bit target. | ||
| + | * Installer upgraded to Inno Setup 6.7.3. | ||
| + | * 64-bit build is identified in version information. | ||
| + | * Resolving version of pwsh installed with MSIX. | ||
| + | * Thirdparty information from the About dialog can be copied to the clipboard even when the browser control malfunctions. | ||
| + | * Bug fix: No error is shown when connection fails. | ||
| + | * Bug fix: ''x-name'' URL parameter was incorrectly decoded. | ||
| + | * Bug fix: Incorrect number validation. | ||
| + | * Bug fix: Some controls (notably list view headers) do not correctly apply dark mode in 64-bit build. [[bug>2453]] | ||
| + | * Bug fix: 64-bit build did not identify its system to be 64-bit, what among other prevented it from identifying 64-bit COM registrations. | ||
| + | * Bug fix: Some strings use incorrect translation in 64-bit version. [[bug>2455]] | ||
| + | |||
| + | ===== [[6.6.2]] 6.6.2 RC ((2026-06-17)) ===== | ||
| + | |||
| + | * Experimental 64-bit version of WinSCP. [[bug>618]] | ||
| + | * Optionally not showing error message when connection is lost while idle. [[bug>2360]] | ||
| + | * SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.84]]. \\ It brings the following changes: | ||
| + | * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | ||
| + | * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | ||
| + | ····* Bug fix: spurious //"Network error: Socket is not connected"// when authenticating to some HTTP proxies. [[pbug>http-proxy-auth-wsaenotconn]] | ||
| + | * TLS/SSL core upgraded to OpenSSL 3.5.7. | ||
| + | * XML parser upgraded to Expat 2.8.1. | ||
| + | * Restored faster C TLS/SSL AES implementation. | ||
| + | * Configurable warning when opening large file in an internal editor. [[bug>2437]] | ||
| + | * Informing that when preserving directory timestamps is enabled, using multiple connections for transfer is not possible. [[bug>2439]] | ||
| + | * Warning when pasting a session URL with unsafe settings. | ||
| + | * When opening session in PuTTY to a host for which WinSCP has multiple host keys cached, using the last key or the key that PuTTY has cached. [[bug>2440]] | ||
| + | * Always (re)registering drag&drop shell extension during installation, even when the extension is not replaced. | ||
| + | * Allowed Console interface tool to have ''.exe'' extension to avoid false positive detections by some antiviruses. [[bug>2434]] | ||
| + | * Using //"username"// and //"hostname"// as one word. | ||
| + | * Reading all system settings from 64-bit registry. | ||
| + | * Allow assigning ''null'' to ''Session.SessionLogPath''. [[bug>2438]] | ||
| + | * Avoiding using ''SSH_FXF_EXCL'' together with ''SSH_FXF_TRUNC'' SFTP file opening flags. [[bug>2444]] | ||
| + | * Optimized file system monitoring when looking for dummy directory during drag&drop downloads. [[bug>2445]] | ||
| + | * Change: Not allowing WebDAV redirects to other hosts by default. [[bug>2447]] | ||
| + | * Change: Not allowing WebDAV redirects to an unencrypted URL by default. [[bug>2448]] | ||
| + | * Updated to JCL library 2.9 commit c669fd12. | ||
| + | * Bug fix: Failure when trying to connect via HTTP proxy to FTP host with excessively long login details. [[bug>2435]] | ||
| + | * Bug fix: Buffer overflow in Console interface tool. [[bug>2436]] | ||
| + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| + | * Bug fix: Message boxes from secondary windows (like the internal editor) caused application to move to the background when when the main window was minimized. [[bug>2443]] | ||
| + | * Bug fix: Heap over-read via crafted encrypted filename. [[bug>2449]] | ||
| + | * Bug fix: Slashes in filenames can cause path traversal when invalid filename characters replacement is disabled. [[bug>2450]] | ||
| + | |||
| + | ===== [[6.6.1]] 6.6.1 beta ((2026-04-01)) ===== | ||
| + | |||
| + | * Support for OpenSSH ssh-agent. [[bug>1682]] | ||
| + | * Optionally connecting all workspace/folder sessions immediately. [[bug>1026]] | ||
| + | * Preserving panel scroll position after rename. [[bug>2425]] | ||
| + | * ''Ctrl+C'' works in list views on 'Server and protocol information' dialog. | ||
| + | * Preventing moving or copying a file or folder over ancestor folder with the same name. [[bug>2427]] | ||
| + | * WebDAV/HTTP core upgraded to neon 0.37.1. | ||
| + | * XML parser upgraded to Expat 2.7.5. | ||
| + | * Bug fix: Some menus were not working on displays to the left or above the primary display. [[bug>2423]] | ||
| + | * Bug fix: Mouse wheel downwards scrolling did not work on toolbar drop down lists. | ||
| + | * Bug fix: Once any control of permissions popup box was focused the popup no longer closed when user clicked outside of it. | ||
| + | * Bug fix: Failure when closing Transfer settings dialog with //X// button while a permissions popup box control is focused. [[bug>2420]] | ||
| + | * Bug fix: Failure when switching to a session that is being reconnected. | ||
| + | * Bug fix: Failure when the first bit of an SFTP response is set. [[bug>2422]] | ||
| + | * Bug fix: Copying to clipboard with ''Ctrl+C'' from 'Server and protocol information' was broken. | ||
| + | * Bug fix: Protocol additional information scrolling was broken. | ||
| + | * Bug fix: Master password dialog was missing //Help// button. | ||
| + | * Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]] | ||
| + | * Bug fix: Wrapped settings values from Raw Site Settings dialog were not preserved. | ||
| + | * Bug fix: Some files modified by local custom command in SCP session fail to upload back. [[bug>2428]] | ||
| + | * Bug fix: Whole //Key exchange// page was incorrectly hidden when //"Handles SSH key re-exchange badly"// bug was enabled. | ||
| + | * Bug fix: Some message boxes leak GDI handle. [[bug>2430]] | ||
| + | * Bug fix: Login dialog leaks GDI handles. [[bug>2431]] | ||
| + | |||
| + | ===== [[6.6]] 6.6 beta ((2026-02-02)) ===== | ||
| + | |||
| + | * Synchronizing two local directories. [[bug>2020]] | ||
| + | * Compiler upgraded to Clang/bcc32c. [[bug>618]] | ||
| + | * Inactive sessions can be automatically reconnected. [[bug>2232]] | ||
| + | * Added dark theme support to: [[bug>1696]] | ||
| + | * Login dialog. [[bug>2345]] | ||
| + | * Transfer Options dialog. | ||
| + | * Message boxes. | ||
| + | * Queue column headers. [[bug>2356]] | ||
| + | * Progress window. | ||
| + | * Authentication Progress window. [[bug>2358]] | ||
| + | ····* Bug fix: Scrollbar colors did not always reflect the color theme | ||
| + | * Using modern directory selection dialog that scales correctly and allows creating new directory. [[bug>2373]] [[bug>2389]] | ||
| + | * Optimized GUI when working with large subdirectory selection. [[bug>2396]] | ||
| + | * Change: Default to UTF-8 encoding in internal editor. [[bug>2397]] | ||
| + | * New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries. | ||
| + | * TLS/SSL core upgraded to OpenSSL 3.5.5. | ||
| + | * WebDAV/HTTP core upgraded to neon 0.36.0. | ||
| + | * XML parser upgraded to Expat 2.7.4. | ||
| + | * Installer upgraded to Inno Setup 6.7.0 with dark mode support enabled. | ||
| + | * Increased WinSCP memory limit to 4 GB. [[bug>2412]] | ||
| + | * Defined and implemented interface for the .NET library. By @mjkent. [[bug>856]] | ||
| + | * Optimized TLS/SSL AES implementation. | ||
| + | * Restoring ability to restart Explorer to allow upgrade of drag&drop shell extension, when installing for current user, as after-restart replacement is not possible without Administrator privileges. [[bug>2381]] | ||
| + | * MSI toolset updated to WiX 5. | ||
| + | * Commands to copy paths to the clipboard on the Synchronization checklist window. | ||
| + | * Cryptography optimization. | ||
| + | * Support long AWS/S3 session tokens. [[bug>2403]] | ||
| + | * Prevent hang when new device is attached or removed while some mapped network drive is not available. [[bug>2382]] | ||
| + | * Copy and paste improvements: | ||
| + | * Consistently renaming local files dropped or pasted back to their source directory to avoid collisions. | ||
| + | * Bug fix: When copying local files to clipboard from system context menu, "cut" state of previously cut files was not cleared. | ||
| + | * Not redundantly verifying WebDAV or S3 certificate in Windows Certificate store if it is already marked as trusted in session settings. [[bug>2404]] | ||
| + | * Provide SNI when opening FTP data connection. [[bug>2410]] | ||
| + | * Optimized synchronization checklist sorting. | ||
| + | * Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] | ||
| + | * Convert unsupported SSH proxy to SSH tunnel when importing site from PuTTY. [[bug>2408]] | ||
| + | * FTP directory listing falls back to the other active/passive mode, consistently with file transfers. | ||
| + | * Consistently calling command to open window with specific directory //Explore//, instead of sometimes //Browse//. | ||
| + | * Consistently referring to file last modification timestamp column as //Date modified//. | ||
| + | * With INI file provided on command-line, using the same INI file when starting a new instance. | ||
| + | * Windows shell local file copy status window is centered on the main window. | ||
| + | * Made taskbar flashing configurable in GUI. [[bug>2411]] | ||
| + | * Control labels on transfer settings dialogs do not show keyboard accelerator cue, until ''Alt'' key is pressed. | ||
| + | * Not using drag images even with directory trees. [[bug>1274]] | ||
| + | * Allow configuring checksum commands. [[bug>2394]] | ||
| + | * Updated to JCL library 2.8.1. | ||
| + | * Updating jump list only when running with GUI. | ||
| + | * Made space on permissions box for longer translations. [[bug>2398]] | ||
| + | * Opening //Default Apps// //Settings// page directly to open it in the foreground and avoid flashing //Control Panel// window. | ||
| + | * Improving order in which Windows Narrator reads window controls. | ||
| + | * All edit boxes with history consistently do not auto complete and show 16 entries in the drop down. | ||
| + | * Removed obsolete //Preserve remote timestamp// session settings. | ||
| + | * Bug fix: Local file with invalid characters replaced could not be explored from the Synchronization checklist window. | ||
| + | * Bug fix: Files modified by local custom command are not always uploaded to the correct remote directory. [[bug>2370]] | ||
| + | * Bug fix: List of network drives in drive drop down and directory tree did not always match. | ||
| + | * Bug fix: Host key prompt did not have the default button. | ||
| + | * Bug fix: When the local path specified on Open directory/Location profile dialog is not existing, when browsing for a new path, the trailing part of the nonexisting path was appended to the new path. | ||
| + | * Bug fix: Trying to enter an invalid link in local panel fails silently. | ||
| + | * Bug fix: After FTP data connection fails to open further use of the session is broken. | ||
| + | * Bug fix: Pasting cut files from the clipboard into a local panel copies them instead of moving them. [[bug>2400]] | ||
| + | * Bug fix: Some edits did not save their value to history when submitting with ''Enter''. | ||
| + | * Bug fix: Too long edit history dropdown can overflow monitor bounds. [[bug>2432]] | ||
| + | * Bug fix: Message box texts and some control labels are not visible to screen readers. [[bug>2413]] | ||
| + | * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | ||
| + | |||
| + | ===== [[6.5.9]] 6.5.9 (not released yet) ((2026-09-10)) ===== | ||
| + | |||
| + | * Back-propagated fixes from 6.6.4 release: | ||
| + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] | ||
| + | |||
| + | ===== [[6.5.8]] 6.5.8 ((2026-09-10)) ===== | ||
| + | |||
| + | * This is Microsoft Store-only release that fixes packaging problem of 6.5.7. The actual binaries are still 6.5.7. | ||
| + | * Bug fix: Cannot install from Microsoft Store because of invalid 'sr' language. [[bug>2460]] | ||
| + | |||
| + | ===== [[6.5.7]] 6.5.7 ((2026-09-09)) ===== | ||
| + | |||
| + | * Translations completed: Croatian, Finnish, Georgian, Italian and Serbian, and updated: Slovenian. | ||
| + | * TLS/SSL core upgraded to OpenSSL 3.3.7. | ||
| + | * SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. SSH core upgraded to include some fixes. \\ It brings the following change: | ||
| + | * Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>pageant-deferred-decryption-uaf]] | ||
| + | * Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]] | ||
| + | * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] | ||
| + | * Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] | ||
| + | * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | ||
| + | * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | ||
| + | * Back-propagated fixes from 6.6.2 beta release: | ||
| + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| + | * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | ||
| + | |||
| + | ===== [[6.5.6]] 6.5.6 ((2026-03-25)) ===== | ||
| + | |||
| + | * Translations completed: Macedonian, and updated: Lithuanian, and Russian. | ||
| + | * TLS/SSL core upgraded to OpenSSL 3.3.6. | ||
| + | * Back-propagated improvements from 6.6–6.6.1 beta release: | ||
| + | * New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries. | ||
| + | * XML parser upgraded to Expat 2.7.5. | ||
| + | * Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] | ||
| + | * Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]] | ||
| + | |||
| + | ===== [[6.5.5]] 6.5.5 ((2025-11-19)) ===== | ||
| + | |||
| + | * Translation updated: Vietnamese. | ||
| + | * Bug fix: Pasting files using local directory tree context menu pastes them to the current directory, instead of the selected one. | ||
| + | * Bug fix: Failure when opening site imported from PuTTY with unsupported SSH proxy. [[bug>2407]] | ||
| + | * Bug fix: Incorrect hostname validation when connecting to S3 endpoint with certificate that does not cover root S3 hostname. [[bug>2409]] | ||
| + | |||
| + | ===== [[6.5.4]] 6.5.4 ((2025-10-16)) ===== | ||
| + | |||
| + | * Translations updated: Belarusian and Georgian. | ||
| + | * TLS/SSL core upgraded to OpenSSL 3.3.5. | ||
| + | * XML parser upgraded to Expat 2.7.3. | ||
| + | * Added new ''ap-southeast-6'' AWS region. | ||
| + | * Bug fix: When restored after operation completed while minimized the window is disabled. [[bug>2393]] | ||
| + | * Bug fix: Command ''md5sums'' is incorrectly used to calculate MD5 checksum instead of ''md5sum''. [[bug>2392]] | ||
| + | * Bug fix: Incomplete FTP upload when the source stream/stdin reads less than requested. [[bug>2395]] | ||
| + | * Bug fix: ''Shift''-clicking //OK// button on Synchronization checklist window when synchronization in the background was not possible still closed the window. | ||
| + | * Bug fix: Failure after reloading file panel when number of files decreases. [[bug>2402]] | ||
| + | * Bug fix: Failure or silently missing headers when when S3 request headers were too long. | ||
| [[history_old|Older versions]] | [[history_old|Older versions]] | ||
| ~~NOTOC~~ | ~~NOTOC~~ | ||
| + | ~~ARCHIVE=history_old~~ | ||