Differences
This shows you the differences between the selected revisions of the page.
| history 2016-05-03 | history 2026-09-11 (current) | ||
| Line 1: | Line 1: | ||
| ====== Recent Version History ====== | ====== Recent Version History ====== | ||
| - | This is a list of changes for each release of WinSCP. See also [[project_history|project history]]. | + | This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. |
| - | ===== [[5.8.3]] 5.8.3 (not released yet) ===== | + | ===== [[6.8]] 6.8 (not released yet) ((2026-08-22)) ===== |
| - | === 2016-05-03 === | + | |
| - | * Improvements to .NET assembly: | + | |
| - | * Added ''Session.TranslateLocalPathToRemote'' to .NET assembly to generate a remote path equivalent of a local path, given root paths. | + | |
| - | * Change: A complete remote error message is stored into a single instance of ''SessionRemoteException'', instead of separating error details into an inner exception. | + | |
| - | * Preventing .NET assembly from timing out during lengthy file transfers. | + | |
| - | * Bug fix: ''Session'' instance could not be used anymore after calling ''ScanFingerprint''. | + | |
| - | * Bug fix: Failure when ''Session.MoveFile'' source file is not existing and its name has file mask-like syntax. [[bug>1412]] | + | |
| - | * Bug fix: WinSCP .NET assembly cannot find WinSCP executable in its installation folder not the default installation folder when used in 64-bit process. [[bug>1421]] | + | |
| - | * SSH core and private key tools (PuTTYgen and Pageant) upgraded to the latest development snapshot of PuTTY (2016-04-17, commit b22c0b6). It brings following changes: | + | |
| - | * Promoting ChaCha20 cipher above Blowfish (below AES). | + | |
| - | ···* Change: Fallback between SSH versions is not supported anymore. | + | |
| - | * Change: By default, warning is issued when using Diffie-Hellman group 1 key exchange algorithm. | + | |
| - | * Improvements to custom commands: | + | |
| - | * Extensions are configurable. | + | |
| - | * Local path pattern (''!\'') for custom commands. | + | |
| - | * All custom command prompts are entered on one dialog box. | + | |
| - | * Holding down ''Ctrl'' and ''Shift'' keys while running a local custom command copies the command to clipboard instead of executing it. | + | |
| - | * Displaying full command name in custom command preferences list. The keyboard shortcut now displays in a hint only. | + | |
| - | * Installer upgraded to Inno Setup 5.5.9. | + | |
| - | * Further installer protection against potential DLL preloading attacks. | + | |
| - | * The //Follow symbolic links to directories// session option is disabled with WebDAV protocol as it has no effect. | + | |
| - | * Preventing mouse cursor flashing while deleting remote files or changing their properties over SFTP protocol. | + | |
| - | * Change: Consider port number for site-specific caches and bookmarks. [[bug>1411]] | + | |
| - | * Indenting //Allow GSSAPI credential delegation// checkbox to make it clear it is an suboption of //Attempt GSSAPI authentication// | + | |
| - | * Disabling //Username// and //Password// boxes on a Login dialog when //Bypass authentication entirely// is enabled. | + | |
| - | * Considering items out of the current view when sizing dialogs list columns. | + | |
| - | * Ignoring blank lines in ''ls'' command output. [[bug>1416]] | + | |
| - | * Installing PuTTY help file in modern ''.chm'' format. | + | |
| - | * Showing details about TLS handshake errors. | + | |
| - | * Use seconds in *nix-like ''LIST'' FTP listing, if the server provides them. [[bug>1422]] | + | |
| - | * Bug fix: Downloads by drag&drop were randomly defaulted to background queue. | + | |
| - | * Bug fix: Using precise timestamp of the uploaded file version was not working when a relative path was used in automation. | + | |
| - | * Bug fix: //Authentication parameters// options were not disabled when //Bypass authentication entirely is enabled//. | + | |
| - | * Bug fix: In rare cases a //Download and Delete// operation might have been incorrectly used instead of //Download// when dropping files to Windows Explorer with drag&drop shell extension enabled. [[bug>1414]] | + | |
| - | * Bug fix: Failure when system-wide settings change while panel is being reloaded. [[bug>1415]] | + | |
| - | * Bug fix: Support for FTP servers with Windows-like paths (fixed again after broken in 5.8.2). [[bug>1074]] | + | |
| - | * Bug fix: When user profile is stored on UNC path and the first drive is hidden, local panel starts empty. [[bug>1417]] | + | |
| - | * Bug fix: Failure when disconnecting the last drive while the previous drive is not ready. [[bug>1418]] | + | |
| - | * Bug fix: Command syntax suggestion, when using saved site in batch script, included RTF code. | + | |
| - | ===== [[5.8.2]] 5.8.2 beta ===== | + | ··* Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]] |
| - | === 2016-03-15 === | + | |
| - | ··* SSH core and private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttywishlist)|the latest development snapshot of PuTTY]] (2016-03-05, commit 8e41e0a) | + | |
| - | * TLS/SSL core upgraded to OpenSSL 1.0.2g. | + | |
| - | * When FTP server does not provide precise timestamp, but the timestamp otherwise matches timestamp of the last uploaded version of the file, using precise timestamp of the uploaded version instead. [[bug>1395]] | + | |
| - | * Improvements to code/script generation: | + | |
| - | * Script or .NET assembly code can be generated for file transfers. | + | |
| - | * Suggesting command-line to use to execute generated script. | + | |
| - | * Using ''-Property'' switch to initialize ''SessionOptions'' properties in PowerShell. | + | |
| - | * Not using ''my'' prefix for VB.NET variables. | + | |
| - | * No redundant declaration of instantiated object variables type in VB.NET. | + | |
| - | * Not highlighting script strings. | + | |
| - | * Larger initial size of Generate URL/Code dialog, when starting on //Script/Code// page. | + | |
| - | * Bug fix: Session timeout was incorrectly set in seconds, instead of milliseconds. | + | |
| - | * Bug fix: Generate Code dialog could not be closed with ''Esc'' key. | + | |
| - | * Improvements to the installer: | + | |
| - | * The installer requests UAC elevation when started non-elevated. [[bug>646]] | + | |
| - | * When the UAC elevation is denied by the user, the installer defaults installing to the user profile folder. | + | |
| - | * The installer is not showing //Select Setup Language// dialog when it supports the current Windows UI language. | + | |
| - | * Individual help link for each installer page. | + | |
| - | * Correcting layout of the //Finished// page. | + | |
| - | * Not warning on incomplete translation during silent installation. | + | |
| - | * Bug fix: Wrong message shown in an installer when it cannot continue because previous installation/uninstallation was not completed. | + | |
| - | * Improvements to custom commands: | + | |
| - | * Custom commands can be distributed in a form of WinSCP extension. | + | |
| - | * Distributing //Verify Checksum//, //Search Text// and //ZIP and Upload// .NET assembly examples as official WinSCP extensions. | + | |
| - | * Including .NET assembly to the deployment to support these extensions. | + | |
| - | * Local custom commands for local files. [[bug>1396]] | + | |
| - | * Change: Remote custom commands cannot be executed with focus on local panel. | + | |
| - | * Removed //D/R// column from //Commands// page of Preferences dialog to save space for //Name// and //Command// columns. | + | |
| - | * Hint displays //Commands// page of Preferences dialog with full custom command name, keyboard shortcut and command. | + | |
| - | * Local custom commands that work with list of files do not block the interface. | + | |
| - | * Bug fix: Local custom commands that do not work with files froze the interface. | + | |
| - | * Tooltips display for 20 seconds. | + | |
| - | * Enhanced tooltips (aka ScreenTips). | + | |
| - | * Retrieving seconds-precision timestamps using ''MDTM'' command, if the server provides them. [[bug>1221]] | + | |
| - | * Improvements to .NET assembly: | + | |
| - | * Method ''Session.ScanFingerprint'' to scan server's hostkey or certificate fingerprint. [[bug>1394]] | + | |
| - | * ''TransferOptions.ResumeSupport'' is settable and ''TransferResumeSupport'' is constructable. | + | |
| - | * Setting ''TransferResumeSupport.Threshold'' automatically sets ''State'' to ''Smart''. | + | |
| - | * Application update information window has title //Check for Updates// instead of generic //Information//. | + | |
| - | * //Free bytes for user// can be displayed for IIS FTP server with //FTP Directory Browsing > Directory Listing Options > Available bytes// option enabled. | + | |
| - | * Preventing interruption of file renaming by automatic operations (such as an automatic remote panel refresh). [[bug>1399]] | + | |
| - | * Compatibility with FTP servers whose path does not start with a slash (such as IBM VMS or MVS). [[bug>1400]] | + | |
| - | * Support for FTP directory listings with name only. [[bug>1401]] | + | |
| - | * Verify TLS certificate against cached fingerprints before Windows certificate store. [[bug>1402]] | + | |
| - | * Optionally following symbolic links to directories during file operations. [[bug>51]] | + | |
| - | * The //Make WinSCP default handler// command opens //Set Default Programs// page in Control Panel. | + | |
| - | * Returning an error exit code (1) when user aborts the script. [[bug>1404]] | + | |
| - | * Returning an error exit code (1) when watching for directory changes fail (''keepuptodate''). | + | |
| - | * Logging that user aborted the script in XML log. [[bug>1406]] | + | |
| - | * Remembering a password for a duration of a session by default. [[bug>1409]] | + | |
| - | * Right justifying hidden and filtered counters on Commander interface. | + | |
| - | * Not showing 0% percent hint on the Progress dialog while calculating a transfer size. | + | |
| - | * Linking background confirmations options from the generic options. [[bug>1408]] | + | |
| - | * Transfer settings and path label hint popups use the same font as the underlying label and align with it. | + | |
| - | * Bug fix: Error when accessing a local directory junction on Windows XP/2003. [[bug>1392]] | + | |
| - | * Bug fix: The ''/loglevel'' switch did not apply when used with pre-configured log file | + | |
| - | * Bug fix: SSPI/NTLM/Negotiate authentication is endlessly retried with WebDAV protocol. [[bug>1397]] | + | |
| - | * Bug fix: User is not informed when SSPI/NTLM/Negotiate authentication fails. | + | |
| - | * Bug fix: Remote panel refresh interval could be set to zero. | + | |
| - | * Bug fix: SFTP/SCP sessions cannot be connected to over proxy. [[bug>1405]] | + | |
| - | ===== [[5.8.1]] 5.8.1 beta ===== | + | ===== [[6.6.4]] 6.6.4 (not released yet) ((2026-09-11)) ===== |
| - | === 2016-01-20 === | + | |
| - | * SSH core and private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttywishlist)|the latest development snapshot of PuTTY]] (2015-12-22, commit 51465fa). It brings following changes: | + | * Increased length limit of proxy host name for updates preferences. [[bug>2456]] |
| - | ····* Support for ChaCha20-Poly1305 authenticated encryption. [[pbug>chacha20-poly1305]] | + | * Optionally default to keeping Login dialog open after opening session in PuTTY. [[bug>2459]] |
| - | * Support for Curve25519 key exchange. [[pbug>curve25519]] | + | * Improving placement of widows, particularly those opened, while the main window is not visible (notably during command-line operations). |
| - | * Support for ECDSA keys in PuTTY and PuTTYgen. [[bug>1390]] [[pbug>ecdsa]] | + | * Bug fix: When selecting a site to perform a command-line operation with, it was possible to select a workspace or a folder, resulting in unexpected behaviour or failure. [[bug>2457]] |
| - | ····* Support for Ed25519 user and host keys. [[pbug>ed25519]] | + | * Bug fix: After opening session in PuTTY, WinSCP process is never closed. [[bug>2458]] |
| - | * WinSCP prefers host-key types it already has cached or configured (in scripting). [[pbug>hostkey-prefer-cached]] | + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] |
| - | * Support for OpenSSH encrypt-then-MAC scheme. [[pbug>encrypt-then-mac]] | + | |
| - | * Support using public-only key files. | + | |
| - | ···* Support for OpenSSH's new key format. | + | |
| - | * Support for DER encoded binary certificates. [[bug>1388]] | + | |
| - | * Correcting DST adjustments of FTP timestamps by IIS FTP server. [[bug>1380]] | + | |
| - | * Dual code signing binaries with both SHA-1 and SHA-256. | + | |
| - | * Improvements to code/script generation: | + | |
| - | * Syntax highlighting for generated code. | + | |
| - | * Command-line switches, script commands and their switches, and .NET assembly classes, methods and properties in generated code link to online documentation. | + | |
| - | * Warning when a server hostkey is not known when generating a code. | + | |
| - | * Not including the ''/console'' switch in a generated command-line. | + | |
| - | * Separate display for an executable path, when generating a command-line. | + | |
| - | * Using ''#'' for comments as on the Wiki. | + | |
| - | * Made it obvious that a path to log file in generated code needs to be set to a real writable path. [[bug>1391]] | + | |
| - | * Installer upgraded to Inno Setup 5.5.8. | + | |
| - | * A //Welcome Screen// has been removed. | + | |
| - | * Using actual system language name on About dialog if the name is not provided by a (uncomplete) translation. | + | |
| - | * Closing application when Login dialog opened after handling URL with "save" extension is canceled. | + | |
| - | * Change: Deprecating ''Session.IniFilePath'' in favor of ''Session.AddRawConfiguration''. | + | |
| - | * Prolonging countdown only after mouse moves substantially over message box with "timeout" button. [[bug>1386]] | + | |
| - | * More user-friendly error message when a wrong passphrase is used for a client certificate. | + | |
| - | * When a passphrase for a client certificate is not provided, the authentication continues. | + | |
| - | * Identifying as WinSCP (including version) in FTP ''CLNT'' command | + | |
| - | * Sending FTP ''CLNT'' command even to FileZilla FTP server. | + | |
| - | * Smarter merging of new encryption and KEX algorithms to existing preference lists. | + | |
| - | * Change: Not allowing SSH-1 by default. | + | |
| - | * Moving SSH-1-only options to less prominent positions on Advanced Site Settings dialog and removing SSH-2-only designations of session options. | + | |
| - | * Refreshing download link when automatic update fails. | + | |
| - | * Closing update window after displaying error message for automatic update. | + | |
| - | * Bug fix: When opening ''%%ssh://%%'' URL in PuTTY or handling URL with a save extension, a main window was opened. | + | |
| - | * Bug fix: Missing help link for //Internal Editor page// of Preferences dialog. | + | |
| - | * Bug fix: ''Alt+D'' and ''Ctrl+L'' keyboard shortcuts on Commander interface in Location profiles bookmark mode do not focus the //Local directory// box, when a local panel has focus. | + | |
| - | * Bug fix: //Script// and //.NET assembly code// tabs were not hidden on Generate file URL dialog. | + | |
| - | * Bug fix: Timeout when uploading to FTP over TLS and proxy when the FTP server responds with ''1xy'' before proxy connection is processed. [[bug>1381]] | + | |
| - | * Bug fix: Failure when displaying hint on color menu. [[bug>1382]] | + | |
| - | * Bug fix: Failure when transferring files from command-line. [[bug>1383]] | + | |
| - | * Bug fix: Failure on exit. | + | |
| - | * Bug fix: Wrong background color of some progress windows parts when system themes are disabled. [[bug>1384]] | + | |
| - | * Bug fix: Failure when displaying hint on floating toolbar. [[bug>1385]] | + | |
| - | * Bug fix: Failure when connecting using FTP with empty password. [[bug>1387]] | + | |
| - | * Bug fix: Too long automatic bug reports were rejected. | + | |
| - | * Bug fix: Failure when reading a private key from a ''.pem'' file fails. | + | |
| - | * Bug fix: An ''open'' scripting command for FTP session with encrypted client certificate without passphrase but with password is silently ignored. | + | |
| - | * Bug fix: Assertions in Pascal code were present in release binaries. | + | |
| - | * Bug fix: "Browse for folder" icon in installer overlaps labels on high DPI. | + | |
| - | * Bug fix: Installer images did not scale correctly | + | |
| - | ===== [[5.8]] 5.8 beta ===== | + | ===== [[6.6.3]] 6.6.3 RC ((2026-09-03)) ===== |
| - | === 2015-12-16 === | + | |
| - | * Authentication with TLS/SSL client certificates. [[bug>921]] | + | |
| - | · * Redesigned Progress and Synchronization progress windows. | + | |
| - | * WebDAV file locking. [[bug>1315]] | + | |
| - | * Opening the initial Login dialog over the main window. | + | |
| - | * Automatic updates (for donors only). | + | |
| - | * Updates are checked over an encrypted HTTPS connection. | + | |
| - | * Showing tips on using the application. | + | |
| - | * Improvements and fixes for large font/high DPI environments: | + | |
| - | * Toolbar, menu and dialog images for 125%, 150% and 200% zooms (120, 144, and 192 DPI respectively). [[bug>1302]] | + | |
| - | * Scaling toolbar drop downs. | + | |
| - | * Scaling menu and toolbar details (submenu arrows, drop down arrows, drag handles, checkmarks, radio-button marks, color palettes). | + | |
| - | * Scaling status bars on Synchronization checklist and Find windows. | + | |
| - | * Scaling drop down button arrows. | + | |
| - | * Correctly scaling file icon on Properties dialog. | + | |
| - | * Scaling application icon on About dialog. | + | |
| - | * Scaling images in installer. | + | |
| - | * New application icon sizes. | + | |
| - | * New installer icon sizes. | + | |
| - | * New desktop icon sizes for site, site folder and workspace. | + | |
| - | * New Console, Editor, Log, Find and Synchronization checklist windows icon sizes. | + | |
| - | * Scaling icon overlays. | + | |
| - | * Own scaled icons for message boxes. | + | |
| - | * Using scalable system window resize grip. | + | |
| - | * Preventing system from scaling windows when moving them between displays with a different DPI. | + | |
| - | * Scaling Synchronization checklist action column. | + | |
| - | * Scaling menu lists. | + | |
| - | * Scaling hint window. | + | |
| - | * Scaling Up/Down buttons width on numerical inputs. | + | |
| - | * SSH core upgraded to [[&url(puttychanges)|PuTTY 0.66]]. | + | |
| - | * Improved transfer speed: | + | |
| - | * with SFTP and SCP protocols when CPU is limiting factor. | + | |
| - | * with SFTP on high latency connections. [[bug>1295]] | + | |
| - | * Improvements to scripting, command-line and .NET assembly: | + | |
| - | * Change: Script file has to be in UTF-8 encoding. | + | |
| - | * Command-line interface for converting and editing private keys. [[bug>1331]] | + | |
| - | * Script or .NET assembly code template can be generated in GUI. | + | |
| - | * Allowing manual verification (with timeout) of SSH hostkey/TLS certificate in batch mode in scripting. | + | |
| - | * Added ''Session.EnumerateRemoteFiles'' method that can enumerate remote files and directories recursively. [[bug>1356]] | + | |
| - | * Switch ''-latest'' for ''get'' and ''put'' commands to transfer the latest file only. | + | |
| - | * Added a ''FullName'' property to the ''RemoteFileInfo'' class. | + | |
| - | * Resume and Append (''TransferOptions.OverwriteMode'') in .NET assembly. [[bug>1358]] | + | |
| - | * The ''open'' command in scripting can open FileZilla stored site. | + | |
| - | * Showing full ''open'' command syntax suggestion, when using saved site in batch script. | + | |
| - | * Change: The ''RemoteFileInfo.Name'' now contains a name only, even for a ''RemoteFileInfo'' instance returned by the ''Session.GetFileInfo''. | + | |
| - | * Added properties ''IsThisDirectory'' and ''IsParentDirectory'' to ''RemoteFileInfo'' class. | + | |
| - | * Added ''Session.CombinePaths'' utility method as remote path equivalent of ''Path.Combine''. | + | |
| - | * Added ''Session.TranslateRemotePathToLocal'' to generate a local path equivalent of a remote path, given root paths. | + | |
| - | * Supporting impersonated IIS environment with .NET assembly. [[bug>1334]] | + | |
| - | * Protocol prefix ''%%ftpes://%%'' for FTP over explicit TLS/SSL. | + | |
| - | * Change: Deprecating ''Session.DefaultConfiguration'' in favor of ''Session.AddRawConfiguration''. | + | |
| - | * Change: ''SessionOptions.SshPrivateKeyPassphrase'' renamed to ''SessionOptions.PrivateKeyPassphrase''. | + | |
| - | * Not re-reading XML log when end of the file is reached to optimize performance. [[bug>1287]] | + | |
| - | * Parameter ''/loglevel'' documented in usage. | + | |
| - | * Removed deprecated .NET assembly options ''FtpSecure.ExplicitTls'' and ''FtpSecure.ExplicitSsl''. | + | |
| - | * Warning when useless command-line parameters are specified in scripting. | + | |
| - | * Not offering host key verification in scripting if configuration is not persistent. | + | |
| - | * Suggesting use of ''-hostkey'' switch in host key verification prompt in scripting. | + | |
| - | * Session can be named using ''/sessionname='' command-line switch. [[bug>1373]] | + | |
| - | * Resetting 10 seconds input timeout every time a key is pressed in scripting batch mode. [[bug>1347]] | + | |
| - | * Optionally not closing the application after the last session closes. [[bug>857]] | + | |
| - | * Optionally preserve timestamps of directories with SFTP protocol. [[bug>94]] | + | |
| - | * Change: Interface theme is not configurable anymore. Only single theme is supported. | + | |
| - | * Selected private key files in OpenSSH or ssh.com format can be automatically converted to PuTTY format. [[bug>22]] | + | |
| - | * Allowing selection to start in the first column of file panel. | + | |
| - | * Change: Change of language on run-time is not supported anymore. | + | |
| - | * Session name (''!N'') and port number (''!#'') patterns for custom commands and terminal client path. [[bug>1346]] [[bug>1020]] | + | |
| - | * Configurable internal editor font color and default background color. [[bug>1326]] | + | |
| - | * Change: Using UTF-8 for strings (such as password) with SSH protocol. [[bug>1014]] | + | |
| - | * Using ''REST'' command to resume upload with FTP protocol. [[bug>552]] | + | |
| - | * Incremental site search can be restricted to the beginning of site name only or expanded to other site fields. [[bug>1348]] | + | |
| - | * Files can be dropped on queue list. [[bug>1281]] | + | |
| - | * Including all at least 80% translations into installer. Informing user when incomplete language is selected when installing. | + | |
| - | * Displaying //Owner// file property with WebDAV protocol. | + | |
| - | * //Save All// function in Internal editor. [[bug>1327]] | + | |
| - | * Masking out passwords when logging command-line. [[bug>1344]] | + | |
| - | * TLS/SSL core upgraded to OpenSSL 1.0.2e. | + | |
| - | * Installer upgraded to Inno Setup 5.5.6. | + | |
| - | * Enabled IPv6 with FTP by default. [[bug>1310]] | + | |
| - | * Support for long local paths when deleting local file. [[bug>1352]] | + | |
| - | * Animation on Find dialog and Authentication progress window. | + | |
| - | * Displaying mod_dav ''executable'' property. | + | |
| - | * Reloading site list when opening Login dialog to open additional session. [[bug>1322]] | + | |
| - | * Handling ''%%ssh://%%'' URLs and opening them in PuTTY. [[bug>1305]] | + | |
| - | * Optionally trimming VMS version numbers from filenames during transfer. [[bug>1312]] | + | |
| - | * Caching fingerprints of last verified host keys so they can be used in Generate URL function on Login dialog already. | + | |
| - | * //Download/Upload and Delete// command moved to //Download/Upload// submenu [[bug>1279]] and //Edit With// menu moved to //Edit// submenu. //Edit With// submenu is newly available on //Edit// toolbar button. | + | |
| - | * Added //Download/Upload in Background// commands to respective menus. [[bug>1280]] | + | |
| - | * Keyboard shortcuts ''Ctrl+L'' and ''Alt+D'' to focus //Address// toolbar (Explorer interface) or open bookmarks (Commander interface). [[bug>1303]] Change: Shortcut of command //Clear Selection// changed to ''Shift+Ctrl+L''. | + | |
| - | * Commands to select/unselect all files with the same extension. [[bug>1286]] | + | |
| - | * Inserting ''-load'' argument of PuTTY before custom user arguments. [[bug>1351]] | + | |
| - | * New image for //Find// command and dialog. | + | |
| - | * New images in an installer. | + | |
| - | * About dialog lists all current and past translators. | + | |
| - | * Warning when transferring multiple files to same name. [[bug>1282]] | + | |
| - | * Hint user about possible reasons of SFTP code 4 error. [[bug>1285]] | + | |
| - | * Platform SDK is no longer required to build 64-bit drag&drop shell extension. | + | |
| - | * Increasing initial/minimal SFTP transfer packet size. | + | |
| - | * Improving layout of installer //Completing// page of for long translations. | + | |
| - | * Display parent directory in file panel even if the server does not include it in directory listing. [[bug>1298]] | + | |
| - | * Showing only folder, not files, on Progress window, when calculating transfer size. | + | |
| - | * Avoid flickering busy mouse cursor while calculating transfer size or collecting changes for synchronization. | + | |
| - | * Showing localized language name on description of //Typical installation//. | + | |
| - | * Added icon for //Cancel All// queue command. | + | |
| - | * Correcting labels and hints for color commands in an internal editor. | + | |
| - | * Session color can be set to black. | + | |
| - | * Not showing percentage progress for indeterminate Directory size calculation. | + | |
| - | * Preferences window opens with focused navigation tree. | + | |
| - | * When //Cancel// is pressed on Progress window before moving transfer to background finishes, transfer is canceled. | + | |
| - | * Disabling //Proceed to Background// once //Cancel// is pressed on Progress window. | + | |
| - | * Added icon for queue //Speed// command. | + | |
| - | * Desktop icons created by an installer show application description. | + | |
| - | * Not showing details about retrieving timezone information on Authentication progress window. | + | |
| - | * Using delete icon on site/site folder/workspace delete confirmation prompts. | + | |
| - | * Showing error message when neon library initialization fails. | + | |
| - | * Prompt for username even with GSSAPI authentication enabled. [[bug>1349]] | + | |
| - | * Providing error details when deleting a local file fails. | + | |
| - | * Using ''printenv'' instead of ''echo'' to obtain a value of the ''LANG'' environment variable. [[bug>1354]] | + | |
| - | * Logging clear ''Authorization'' header when password logging is enabled. | + | |
| - | * Explaining that certificate cannot be verified against hostname if IP address is used to connect to the server. [[bug>1359]] | + | |
| - | * Updated to JCL library 2.7. | + | |
| - | * Using Save dialog instead of Open for selecting log file and random seed file paths. | + | |
| - | * Icon on New version message. | + | |
| - | * Minimize buttons on Console and Synchronization checklist windows enabled. | + | |
| - | * Informing the user when a connection fails because an FTP connection was attempted to an SFTP server. | + | |
| - | * Increase length limit of site note to 4000. [[bug>1372]] | + | |
| - | * Wrapping too long entries in authentication log to avoid horizontal scrollbar. | + | |
| - | * Disambiguated commands in //Once Done/Empty// menus. [[bug>1375]] | + | |
| - | * Encoding all non-ASCII characters in URLs to allow posting bug report and searching for message using web browsers that do not default to UTF-8 encoding for URLs (like Internet Explorer). | + | |
| - | * Wider menu spacing. | + | |
| - | * Bug fix: Speed limit history is not relocalized when language is changed. [[bug>490]] | + | |
| - | * Bug fix: Not showing symlinks to directories as a difference on synchronization checklist as they are not synchronized anyway. | + | |
| - | * Bug fix: When restoring an application from minimization, progress windows did not get activated. | + | |
| - | * Bug fix: Preventing active window title flickering before opening Preferences dialog. | + | |
| - | * Bug fix: Failure when opening WebDAVS session, if SSPI initialization failed (such as when running under Wine). | + | |
| - | * Bug fix: When window is closing, its icon is hidden momentarily. | + | |
| - | * Bug fix: WebDAV redirect loop was not detected on the first redirect. | + | |
| - | * Bug fix: Error when SFTP server responds to upload (write) requests out of order. [[bug>1365]] | + | |
| - | * Bug fix: Duplicated ad-hoc session from workspace is wrongly named. | + | |
| - | * Bug fix: Cannot work with filenames starting or ending with space with FTP protocol. [[bug>26]] | + | |
| - | * Bug fix: Failure or broken synchronized browsing when changing directory while another command was executing already. [[bug>1369]] | + | |
| - | * Bug fix: Showing a command of a custom command in status bar. [[bug>1370]] | + | |
| - | * Bug fix: Commander panel ratio lost after swapping panels. | + | |
| - | * Bug fix: Minimize buttons on Login and Find windows did not minimize the application. | + | |
| - | * Bug fix: Failure when closing window while some command was executing. | + | |
| - | * Bug fix: When Authentication window is resized smaller, prompts get truncated. | + | |
| - | * Bug fix: URL is generated incorrectly for a file with a space in a path. [[bug>1374]] | + | |
| - | * Bug fix: Failure when a local drive is removed. [[bug>1376]] | + | |
| - | * Bug fix: For a stored site with special characters, it was not possible to open/duplicate a session in a new instance, desktop shortcut had wrong name and desktop shortcuts/jump list entries were not working. | + | |
| - | * Bug fix: Failure when the current local directory is deleted while session is disconnected and synchronized browsing is enabled. [[bug>1378]] | + | |
| - | * Bug fix: Failure when using //Close all windows// taskbar function with opened and active internal editor. [[bug>1377]] | + | |
| - | ===== [[5.7.7]] 5.7.7 (hotfix) ===== | + | ··* Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish. |
| - | === 2016-03-06 === | + | * Some parts of GUI (panel headers, scrollbars, buttons, checkboxes) show dark in dark theme even when system-wide app theme is light. |
| - | (* * Translation completed: Arabic.*) | + | * SSH core and private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. \\ It brings the following change: |
| - | ·* TLS/SSL core upgraded to OpenSSL 1.0.1s. | + | * Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>pageant-deferred-decryption-uaf]] |
| - | * Upgraded private key tools (PuTTYgen and Pageant) to 0.67. | + | ····* Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]] |
| - | * Dual code signing binaries with both SHA-1 and SHA-256. | + | ···* Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] |
| - | * Bug fix: Failure when Progress window closes (transfer finishes) while //Once done// drop down menu is opened. [[bug>1379]] | + | ···* Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] |
| - | * Bug fix: Too long automatic bug reports were rejected. | + | * Bundled SSH private key tools (PuTTYgen and Pageant) are 64-bit. |
| - | * Bug fix: File masks with time constraints do not work with remote WebDAV files. [[bug>1389]] | + | * On Windows 11, using system dark tab theme, that uses different shades for active and disabled/disconnected tabs. [[bug>2452]] |
| - | * Bug fix: Installation fails when there is no user //Start// menu. [[bug>1398]] | + | * TLS/SSL core upgraded to OpenSSL 3.5.8. |
| + | * XML parser upgraded to Expat 2.8.4. | ||
| + | * Source code package build script supports 64-bit target. | ||
| + | * Installer upgraded to Inno Setup 6.7.3. | ||
| + | * 64-bit build is identified in version information. | ||
| + | · * Resolving version of pwsh installed with MSIX. | ||
| + | · * Thirdparty information from the About dialog can be copied to the clipboard even when the browser control malfunctions. | ||
| + | * Bug fix: No error is shown when connection fails. | ||
| + | · * Bug fix: ''x-name'' URL parameter was incorrectly decoded. | ||
| + | * Bug fix: Incorrect number validation. | ||
| + | * Bug fix: Some controls (notably list view headers) do not correctly apply dark mode in 64-bit build. [[bug>2453]] | ||
| + | * Bug fix: 64-bit build did not identify its system to be 64-bit, what among other prevented it from identifying 64-bit COM registrations. | ||
| + | * Bug fix: Some strings use incorrect translation in 64-bit version. [[bug>2455]] | ||
| - | ===== 5.7.6 ===== | + | ===== [[6.6.2]] 6.6.2 RC ((2026-06-17)) ===== |
| - | === 2015-11-04 === | + | |
| - | * Translation completed: Spanish. | + | |
| - | * Upgraded private key tools (PuTTYgen and Pageant) to 0.65. | + | |
| - | * Workaround for ProFTPD using ''cdir'' type in ''MLST'' response when retrieving listing for a current working directory. [[bug>1350]] | + | |
| - | * Workaround for FTP servers that incorrectly use RFC 2228-style response to ''MLST'' command. [[bug>1360]] | + | |
| - | * Perform TLS/SSL handshake on transfer connection immediately when connected to Idea FTP server (home.pl). [[bug>1357]] | + | |
| - | * Recognize WebDAV folder by trailing slash in its path, if the server does not provide ''DAV:collection'' tag. [[bug>1362]] | + | |
| - | * Limiting ''Session.Output'' size not to waste memory with large sessions. [[bug>1367]] | + | |
| - | · * Bug fix: Failure when spinning a mouse wheel over a Find/Replace dialogs of Internal editor. [[bug>1353]] | + | |
| - | * Bug fix: Failure when dropping files from application that fails to provide ''CF_HDROP''. [[bug>1361]] | + | |
| - | * Bug fix: Failure when Windows session is closing while no session is connected. [[bug>1363]] | + | |
| - | * Bug fix: Cannot download root folder from an FTP server that does not support ''MLSD'' or ''SIZE'' and ''MDTM'' commands. [[bug>1364]] | + | |
| - | * Bug fix: Queue setting on Copy dialog is lost when different transfer setting preset is selected. | + | |
| - | * Bug fix: File timestamps are incorrectly adjusted for autodetected positive timezone difference. [[bug>1366]] | + | |
| - | ===== 5.7.5 ===== | + | ··* Experimental 64-bit version of WinSCP. [[bug>618]] |
| - | === 2015-08-04 === | + | * Optionally not showing error message when connection is lost while idle. [[bug>2360]] |
| - | * Translation completed: Catalan. | + | · * SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.84]]. \\ It brings the following changes: |
| - | * TLS/SSL core upgraded to OpenSSL 1.0.1p. | + | ····* Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] |
| - | * Supporting the RFC 4419 revision to Diffie-Hellman group exchange. [[bug>1345]] [[pbug>rfc4419]] | + | * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] |
| - | * Workaround for Cerberus SFTP server incorrectly indicating end of directory listing. [[bug>1338]] | + | ····* Bug fix: spurious //"Network error: Socket is not connected"// when authenticating to some HTTP proxies. [[pbug>http-proxy-auth-wsaenotconn]] |
| - | * SHA-256 hash of binaries provided in release notes. | + | * TLS/SSL core upgraded to OpenSSL 3.5.7. |
| - | * Aligning //Save// button with //Edit// button on Login dialog. | + | * XML parser upgraded to Expat 2.8.1. |
| - | * Bug fix: Failure or timeout when Execute button on Console window was clicked while another command was executing already. [[bug>1339]] | + | * Restored faster C TLS/SSL AES implementation. |
| - | * Bug fix: Switches do not work with aliases to scripting commands. [[bug>1340]] | + | * Configurable warning when opening large file in an internal editor. [[bug>2437]] |
| - | * Bug fix: Failure when trying to manipulate files in nonexisting directory in "batch continue" scripting mode. [[bug>1314]] | + | * Informing that when preserving directory timestamps is enabled, using multiple connections for transfer is not possible. [[bug>2439]] |
| - | * Bug fix: It was not possible to configure //Timezone offset// for SCP protocol. [[bug>1343]] | + | * Warning when pasting a session URL with unsafe settings. |
| - | * Bug fix: When timezone difference is autodetected with legacy FTP server, timestamp precision is not taken into account when comparing timestamps (e.g. for synchronization). [[bug>1342]] | + | * When opening session in PuTTY to a host for which WinSCP has multiple host keys cached, using the last key or the key that PuTTY has cached. [[bug>2440]] |
| + | * Always (re)registering drag&drop shell extension during installation, even when the extension is not replaced. | ||
| + | * Allowed Console interface tool to have ''.exe'' extension to avoid false positive detections by some antiviruses. [[bug>2434]] | ||
| + | * Using //"username"// and //"hostname"// as one word. | ||
| + | * Reading all system settings from 64-bit registry. | ||
| + | * Allow assigning ''null'' to ''Session.SessionLogPath''. [[bug>2438]] | ||
| + | * Avoiding using ''SSH_FXF_EXCL'' together with ''SSH_FXF_TRUNC'' SFTP file opening flags. [[bug>2444]] | ||
| + | * Optimized file system monitoring when looking for dummy directory during drag&drop downloads. [[bug>2445]] | ||
| + | * Change: Not allowing WebDAV redirects to other hosts by default. [[bug>2447]] | ||
| + | * Change: Not allowing WebDAV redirects to an unencrypted URL by default. [[bug>2448]] | ||
| + | * Updated to JCL library 2.9 commit c669fd12. | ||
| + | * Bug fix: Failure when trying to connect via HTTP proxy to FTP host with excessively long login details. [[bug>2435]] | ||
| + | * Bug fix: Buffer overflow in Console interface tool. [[bug>2436]] | ||
| + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| + | * Bug fix: Message boxes from secondary windows (like the internal editor) caused application to move to the background when when the main window was minimized. [[bug>2443]] | ||
| + | * Bug fix: Heap over-read via crafted encrypted filename. [[bug>2449]] | ||
| + | · * Bug fix: Slashes in filenames can cause path traversal when invalid filename characters replacement is disabled. [[bug>2450]] | ||
| - | ===== 5.7.4 ===== | + | ===== [[6.6.1]] 6.6.1 beta ((2026-04-01)) ===== |
| - | === 2015-06-17 === | + | |
| - | * Translations completed: French and Ukrainian. | + | |
| - | * TLS/SSL core upgraded to OpenSSL 1.0.1o. | + | |
| - | * Not using directory include masks recursively when finding files. [[bug>1329]] | + | |
| - | * Recognizing UTF-8 encoded localized German month names in FTP ''LIST'' command results. [[bug>1328]] | + | |
| - | * Bug fix: Relative path of find results is shown incorrectly when finding from root folder. [[bug>1330]] | + | |
| - | · * Bug fix: Failure when switching sessions with session log window opened. [[bug>1333]] | + | |
| - | * Bug fix: Session and log file information on Log window is not updated when switching session. | + | |
| - | * Bug fix: Reference to parent WebDAV directory shows incorrectly when a name of the current folder includes special characters. [[bug>1335]] | + | |
| - | · * Bug fix: History of some inputs is not saved. [[bug>1336]] | + | |
| - | * Bug fix: Incorrect behavior when retrying connection after listing of initial remote directory fails. | + | |
| - | * Bug fix: When panel drive/path comboxes box do not cover whole toolbar height, the change Drive/Directory command do not work. | + | |
| + | * Support for OpenSSH ssh-agent. [[bug>1682]] | ||
| + | * Optionally connecting all workspace/folder sessions immediately. [[bug>1026]] | ||
| + | * Preserving panel scroll position after rename. [[bug>2425]] | ||
| + | * ''Ctrl+C'' works in list views on 'Server and protocol information' dialog. | ||
| + | * Preventing moving or copying a file or folder over ancestor folder with the same name. [[bug>2427]] | ||
| + | * WebDAV/HTTP core upgraded to neon 0.37.1. | ||
| + | * XML parser upgraded to Expat 2.7.5. | ||
| + | * Bug fix: Some menus were not working on displays to the left or above the primary display. [[bug>2423]] | ||
| + | * Bug fix: Mouse wheel downwards scrolling did not work on toolbar drop down lists. | ||
| + | * Bug fix: Once any control of permissions popup box was focused the popup no longer closed when user clicked outside of it. | ||
| + | * Bug fix: Failure when closing Transfer settings dialog with //X// button while a permissions popup box control is focused. [[bug>2420]] | ||
| + | * Bug fix: Failure when switching to a session that is being reconnected. | ||
| + | * Bug fix: Failure when the first bit of an SFTP response is set. [[bug>2422]] | ||
| + | * Bug fix: Copying to clipboard with ''Ctrl+C'' from 'Server and protocol information' was broken. | ||
| + | * Bug fix: Protocol additional information scrolling was broken. | ||
| + | * Bug fix: Master password dialog was missing //Help// button. | ||
| + | * Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]] | ||
| + | * Bug fix: Wrapped settings values from Raw Site Settings dialog were not preserved. | ||
| + | * Bug fix: Some files modified by local custom command in SCP session fail to upload back. [[bug>2428]] | ||
| + | * Bug fix: Whole //Key exchange// page was incorrectly hidden when //"Handles SSH key re-exchange badly"// bug was enabled. | ||
| + | * Bug fix: Some message boxes leak GDI handle. [[bug>2430]] | ||
| + | * Bug fix: Login dialog leaks GDI handles. [[bug>2431]] | ||
| - | ===== 5.7.3 ===== | + | ===== [[6.6]] 6.6 beta ((2026-02-02)) ===== |
| - | === 2015-05-13 === | + | |
| - | * Using FTP command ''SIZE'' in binary mode. [[bug>1292]] | + | |
| - | * Optionally determining local file icon by extension only. [[bug>1325]] | + | |
| - | * Ensuring that sessions to be opened in a new window do not get actually opened back in the existing window. | + | |
| - | * Bug fix: SFTP transfers fail occasionally. [[bug>1321]] | + | |
| - | · * Bug fix: Controls occasionally do not align correctly after restoring maximized window from minimization. [[bug>1309]] | + | |
| - | * Bug fix: Embedded session is not opened. [[bug>1311]] | + | |
| - | * Bug fix: SCP session breaks when an output includes a null character. [[bug>1313]] | + | |
| - | * Bug fix: Error retrieving file attributes with FTP protocol when the path is given with trailing slash. [[bug>1314]] | + | |
| - | * Bug fix: Sort arrow was shown on unsortable Find dialog. | + | |
| - | * Bug fix: File mask with size constraint over 4 GB does not work. [[bug>1318]] | + | |
| - | * Bug fix: When dragging files from local panel to local tree, status bar is not updated. [[bug>1319]] | + | |
| - | * Bug fix: Local directory tree does not show newly created folder. [[bug>1320]] | + | |
| - | * Bug fix: Local directory tree stops reflecting changes after creating new folder. | + | |
| - | * Bug fix: Failure when HTTPS WebDAV URL redirects to HTTP. [[bug>1323]] | + | |
| - | * Bug fix: Certificate validation fails, when HTTP WebDAV URL redirects to HTTPS. | + | |
| - | * Bug fix: Some redirected WebDAVS connection error messages show original host name instead of the actual host name. | + | |
| - | * Bug fix: WebDAVS certificate failure override for redirected session is stored for original host name. | + | |
| - | * Bug fix: During file transfers on FTP servers that do not support ''MLSD'' command, file details are not provided on overwrite confirmation prompt and transfer progress is not shown correctly. [[bug>1324]] | + | |
| - | * Bug fix: Edit commands on all Internal editors reflect state of the currently focused editor, instead of their editor. | + | |
| + | * Synchronizing two local directories. [[bug>2020]] | ||
| + | * Compiler upgraded to Clang/bcc32c. [[bug>618]] | ||
| + | * Inactive sessions can be automatically reconnected. [[bug>2232]] | ||
| + | * Added dark theme support to: [[bug>1696]] | ||
| + | * Login dialog. [[bug>2345]] | ||
| + | * Transfer Options dialog. | ||
| + | * Message boxes. | ||
| + | * Queue column headers. [[bug>2356]] | ||
| + | * Progress window. | ||
| + | * Authentication Progress window. [[bug>2358]] | ||
| + | * Bug fix: Scrollbar colors did not always reflect the color theme | ||
| + | * Using modern directory selection dialog that scales correctly and allows creating new directory. [[bug>2373]] [[bug>2389]] | ||
| + | * Optimized GUI when working with large subdirectory selection. [[bug>2396]] | ||
| + | * Change: Default to UTF-8 encoding in internal editor. [[bug>2397]] | ||
| + | * New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries. | ||
| + | * TLS/SSL core upgraded to OpenSSL 3.5.5. | ||
| + | * WebDAV/HTTP core upgraded to neon 0.36.0. | ||
| + | * XML parser upgraded to Expat 2.7.4. | ||
| + | * Installer upgraded to Inno Setup 6.7.0 with dark mode support enabled. | ||
| + | * Increased WinSCP memory limit to 4 GB. [[bug>2412]] | ||
| + | * Defined and implemented interface for the .NET library. By @mjkent. [[bug>856]] | ||
| + | * Optimized TLS/SSL AES implementation. | ||
| + | * Restoring ability to restart Explorer to allow upgrade of drag&drop shell extension, when installing for current user, as after-restart replacement is not possible without Administrator privileges. [[bug>2381]] | ||
| + | * MSI toolset updated to WiX 5. | ||
| + | * Commands to copy paths to the clipboard on the Synchronization checklist window. | ||
| + | * Cryptography optimization. | ||
| + | * Support long AWS/S3 session tokens. [[bug>2403]] | ||
| + | * Prevent hang when new device is attached or removed while some mapped network drive is not available. [[bug>2382]] | ||
| + | * Copy and paste improvements: | ||
| + | * Consistently renaming local files dropped or pasted back to their source directory to avoid collisions. | ||
| + | * Bug fix: When copying local files to clipboard from system context menu, "cut" state of previously cut files was not cleared. | ||
| + | * Not redundantly verifying WebDAV or S3 certificate in Windows Certificate store if it is already marked as trusted in session settings. [[bug>2404]] | ||
| + | * Provide SNI when opening FTP data connection. [[bug>2410]] | ||
| + | * Optimized synchronization checklist sorting. | ||
| + | * Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] | ||
| + | * Convert unsupported SSH proxy to SSH tunnel when importing site from PuTTY. [[bug>2408]] | ||
| + | * FTP directory listing falls back to the other active/passive mode, consistently with file transfers. | ||
| + | * Consistently calling command to open window with specific directory //Explore//, instead of sometimes //Browse//. | ||
| + | * Consistently referring to file last modification timestamp column as //Date modified//. | ||
| + | * With INI file provided on command-line, using the same INI file when starting a new instance. | ||
| + | * Windows shell local file copy status window is centered on the main window. | ||
| + | * Made taskbar flashing configurable in GUI. [[bug>2411]] | ||
| + | * Control labels on transfer settings dialogs do not show keyboard accelerator cue, until ''Alt'' key is pressed. | ||
| + | * Not using drag images even with directory trees. [[bug>1274]] | ||
| + | * Allow configuring checksum commands. [[bug>2394]] | ||
| + | * Updated to JCL library 2.8.1. | ||
| + | * Updating jump list only when running with GUI. | ||
| + | * Made space on permissions box for longer translations. [[bug>2398]] | ||
| + | * Opening //Default Apps// //Settings// page directly to open it in the foreground and avoid flashing //Control Panel// window. | ||
| + | * Improving order in which Windows Narrator reads window controls. | ||
| + | * All edit boxes with history consistently do not auto complete and show 16 entries in the drop down. | ||
| + | * Removed obsolete //Preserve remote timestamp// session settings. | ||
| + | * Bug fix: Local file with invalid characters replaced could not be explored from the Synchronization checklist window. | ||
| + | * Bug fix: Files modified by local custom command are not always uploaded to the correct remote directory. [[bug>2370]] | ||
| + | * Bug fix: List of network drives in drive drop down and directory tree did not always match. | ||
| + | * Bug fix: Host key prompt did not have the default button. | ||
| + | * Bug fix: When the local path specified on Open directory/Location profile dialog is not existing, when browsing for a new path, the trailing part of the nonexisting path was appended to the new path. | ||
| + | * Bug fix: Trying to enter an invalid link in local panel fails silently. | ||
| + | * Bug fix: After FTP data connection fails to open further use of the session is broken. | ||
| + | * Bug fix: Pasting cut files from the clipboard into a local panel copies them instead of moving them. [[bug>2400]] | ||
| + | * Bug fix: Some edits did not save their value to history when submitting with ''Enter''. | ||
| + | * Bug fix: Too long edit history dropdown can overflow monitor bounds. [[bug>2432]] | ||
| + | * Bug fix: Message box texts and some control labels are not visible to screen readers. [[bug>2413]] | ||
| + | * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | ||
| + | ===== [[6.5.9]] 6.5.9 (not released yet) ((2026-09-10)) ===== | ||
| + | * Back-propagated fixes from 6.6.4 release: | ||
| + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] | ||
| + | ===== [[6.5.8]] 6.5.8 ((2026-09-10)) ===== | ||
| - | ===== 5.7.2 ===== | + | ··* This is Microsoft Store-only release that fixes packaging problem of 6.5.7. The actual binaries are still 6.5.7. |
| - | === 2015-04-14 === | + | ···* Bug fix: Cannot install from Microsoft Store because of invalid 'sr' language. [[bug>2460]] |
| - | ··* Reporting relative addresses in stack trace. | + | |
| - | * Bug fix: SFTP/SCP transfers occasionally time out. [[bug>1306]] | + | |
| - | * Bug fix: Fail gracefully when internal command generated by WinSCP .NET assembly is too long. [[bug>1297]] | + | |
| - | * Bug fix: Failure when "downloading and deleting" an empty remote directory with .NET assembly. [[bug>1299]] | + | |
| - | ·* Bug fix: When overwriting configuration export, new configuration is appended, instead of replacing the previous export. [[bug>;1300]] | + | |
| - | * Bug fix: When listing WebDAV directory using relative path, the listing includes a reference to the directory itself. [[bug>1301]] | + | |
| - | * Bug fix: Failure when pressing help icon while no control has focus. [[bug>;1304]] | + | |
| - | * Bug fix: Failure when closing log window during activity. | + | |
| - | * Bug fix: Incorrect encoding of SSH_FXP_REALPATH. [[bug>1308]] | + | |
| - | ===== 5.7.1 ===== | + | ===== [[6.5.7]] 6.5.7 ((2026-09-09)) ===== |
| - | === 2015-03-25 === | + | |
| - | * Translations added: Croatian, Finnish, Korean and Polish. | + | |
| - | * Upgraded private key tools (PuTTYgen and Pageant) to 0.64. | + | |
| - | * TLS/SSL core upgraded to OpenSSL 1.0.1m. | + | |
| - | * Not requiring confirmation when canceling an operation. | + | |
| - | * Import of Base64-encoded passwords from FileZilla. | + | |
| - | * Progress window uses //Skip// button instead of //Cancel// when calculating transfer size. [[bug>1296]] | + | |
| - | * Workaround for ProFTPD/mod_sftp bug in SSH_FXP_REALPATH handling with SFTP version 6. [[bug>1289]] | + | |
| - | · * Not asking for master password repeatedly when opening Generate URL dialog. Not asking at all unless user chooses to include password into URL. | + | |
| - | * More space for information about translators. | + | |
| - | * Bug fix: Back-propagated SSH security fixes from PuTTY 0.64.((PuTTY 0.65, 0.66 and 0.67 fixes are not relevant for WinSCP.)) [[pbug>private-key-not-wiped-2]] [[pbug>diffie-hellman-range-check]] | + | |
| - | * Bug fix: Failure when working with stored sites when a temporary hidden site for interprocess communication is not properly removed. | + | |
| - | * Bug fix: Overwrite confirmation prompt displays name of source file instead of target file, when file name changes, with SFTP, SCP and WebDAV protocols. [[bug>1290]] | + | |
| - | * Bug fix: Transfer was not resumed after moving the transfer to the background when source and target file name differs with FTP protocol. | + | |
| - | * Bug fix: Failure when trying to open another externally initiated session while externally initiated session is opening. | + | |
| - | * Bug fix: It is not possible to configure certificate accepting with WebDAV protocol in .NET assembly. [[bug>1284]] | + | |
| - | * Bug fix: User and group name is not decoded properly from UTF-8 encoding with SFTP version 3 and older. [[bug>1288]] | + | |
| - | * Bug fix: When calculating size of files to transfer is canceled, not using the incomplete results to estimate transfer progress. | + | |
| - | * Bug fix: When local custom command is applied to a remote folder, it is unconditionally uploaded back after the command finishes. [[bug>1294]] | + | |
| - | * Bug fix: Calculation of transfer size could not be moved to background. | + | |
| - | //Users upgrading from [[history_old#5.5.6|WinSCP 5.5.6]]// can read more about [[announcement_winscp57|WinSCP 5.7 - What's New?]] | + | * Translations completed: Croatian, Finnish, Georgian, Italian and Serbian, and updated: Slovenian. |
| + | * TLS/SSL core upgraded to OpenSSL 3.3.7. | ||
| + | * SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. SSH core upgraded to include some fixes. \\ It brings the following change: | ||
| + | * Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>pageant-deferred-decryption-uaf]] | ||
| + | * Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]] | ||
| + | ····* Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] | ||
| + | * Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] | ||
| + | * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | ||
| + | * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | ||
| + | * Back-propagated fixes from 6.6.2 beta release: | ||
| + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| + | * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | ||
| - | [[history_old|[Older versions] ]] | + | ===== [[6.5.6]] 6.5.6 ((2026-03-25)) ===== |
| + | |||
| + | * Translations completed: Macedonian, and updated: Lithuanian, and Russian. | ||
| + | * TLS/SSL core upgraded to OpenSSL 3.3.6. | ||
| + | * Back-propagated improvements from 6.6–6.6.1 beta release: | ||
| + | * New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries. | ||
| + | * XML parser upgraded to Expat 2.7.5. | ||
| + | * Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] | ||
| + | * Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]] | ||
| + | |||
| + | ===== [[6.5.5]] 6.5.5 ((2025-11-19)) ===== | ||
| + | |||
| + | * Translation updated: Vietnamese. | ||
| + | * Bug fix: Pasting files using local directory tree context menu pastes them to the current directory, instead of the selected one. | ||
| + | * Bug fix: Failure when opening site imported from PuTTY with unsupported SSH proxy. [[bug>2407]] | ||
| + | * Bug fix: Incorrect hostname validation when connecting to S3 endpoint with certificate that does not cover root S3 hostname. [[bug>2409]] | ||
| + | |||
| + | ===== [[6.5.4]] 6.5.4 ((2025-10-16)) ===== | ||
| + | |||
| + | * Translations updated: Belarusian and Georgian. | ||
| + | * TLS/SSL core upgraded to OpenSSL 3.3.5. | ||
| + | * XML parser upgraded to Expat 2.7.3. | ||
| + | * Added new ''ap-southeast-6'' AWS region. | ||
| + | * Bug fix: When restored after operation completed while minimized the window is disabled. [[bug>2393]] | ||
| + | * Bug fix: Command ''md5sums'' is incorrectly used to calculate MD5 checksum instead of ''md5sum''. [[bug>2392]] | ||
| + | * Bug fix: Incomplete FTP upload when the source stream/stdin reads less than requested. [[bug>2395]] | ||
| + | * Bug fix: ''Shift''-clicking //OK// button on Synchronization checklist window when synchronization in the background was not possible still closed the window. | ||
| + | * Bug fix: Failure after reloading file panel when number of files decreases. [[bug>2402]] | ||
| + | * Bug fix: Failure or silently missing headers when when S3 request headers were too long. | ||
| + | |||
| + | [[history_old|Older versions]] | ||
| ~~NOTOC~~ | ~~NOTOC~~ | ||
| - | ~~NODOC~~ | ||
| ~~ARCHIVE=history_old~~ | ~~ARCHIVE=history_old~~ | ||
| - | |||