Differences
This shows you the differences between the selected revisions of the page.
| history 2022-06-03 | history 2026-10-26 (current) | ||
| Line 3: | Line 3: | ||
| This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. | This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. | ||
| - | ===== [[6.0]] 6.0 (not released yet) ((2022-05-26)) ===== | + | ===== [[6.8]] 6.8 (not released yet) ((2026-10-26)) ===== |
| - | * Local file manager mode (two local panels). [[bug>1893]] | + | |
| - | * Ongoing delete operation can be moved to background queue. [[bug>194]] | + | |
| - | * Showing directory size in file panel. [[bug>41]] | + | |
| - | * Tab titles are shortened to fit window width as needed. [[bug>1423]] | + | |
| - | * Tabs show tooltips with full session name and paths. | + | |
| - | * Remembering remote directory tree nodes state when switching sessions. [[bug>1057]] | + | |
| - | * ''Shift''-clicking //New Session// command opens the Login dialog in new WinSCP instance, instead of possibly opening new instance of workspace. | + | |
| - | * Allowed opening all sites in a folder in PuTTY. [[bug>2079]] | + | |
| - | * Cleaning up temporary WinSCP PuTTY sessions. | + | |
| - | * Added import from KiTTY directly to the Import dialog. [[bug>1551]] | + | |
| - | * When switching tabs, prevent visibly scrolling the panels when focusing the last selected file. | + | |
| - | * Removed the "compression" indicator from the status bar. | + | |
| - | * Allowed normal behavior of double-click on a file even when resolving of symlinks is disabled. [[bug>2037]] | + | |
| - | * ''Session.ExecutablePath'' returns detected or actual executable path when not set. [[bug>2055]] | + | |
| - | * Change: Keyboard shortcut for //Command Line// command changed to ''Shift+Ctrl+M'' (''Shift+Ctrl+N'' previously). | + | |
| - | * Bug fix: Failure when trying to switch session tabs while previous switch did not complete yet. | + | |
| - | * Bug fix: When importing from FileZilla with KiTTY selected as SSH terminal, host keys were imported from KiTTY instead of FileZilla/PuTTY. | + | |
| - | ===== [[5.20.4]] 5.20.4 (not released yet) ((2022-06-03)) ===== | + | ··* Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]] |
| - | + | ·* Support client certificates with intermediate certificate. [[bug>2475]] | |
| - | ··* SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.77]]. It brings the following changes: | + | ·* Allow opening file properties from S3 servers that keep no object ACLs. [[bug>2472]] |
| - | * Pageant: Option ''%%--openssh-config%%'' to allow easy interoperation with Windows's ''ssh.exe''. [[pbug>win-pageant-openssh-interop]] | + | ·* Not loading S3 tags for directories to avoid errors when opening directory Properties from servers that do not implement directory tags. [[bug>2473]] |
| - | ···* Bug fix: PuTTYgen's mouse-based entropy collection now handles high-frequency mice without getting confused. [[pbug>win-puttygen-entropy-rate-limit]] | + | * Bug fix: Failure when SSH authentication banner is displayed while reconnecting a session. [[bug>2474]] |
| - | ···* Bug fix: Pageant can now handle large numbers of concurrent connections without hanging or crashing. [[pbug>win-pageant-max-connections-2]] | + | * Bug fix: Parsing of multiline VMS FTP listing entries is broken. [[bug>1950]] |
| - | ···* Bug fix: If Pageant is started multiple times simultaneously, the instances should reliably agree on one of them to be the persistent server. [[pbug>win-pageant-concurrent-startup]] | + | * Bug fix: Dragging file from long path directory to remote panel results in uploading the file with 8.3 filename. [[bug>2480]] |
| - | * Improved error message when FTP server returns malformed response. [[bug>2077]] | + | |
| - | * Translations updated: German and Slovak. | + | |
| - | * Workaround for calls to system API failing when used first time against some network shares (Samba) with paths over the legacy Windows limit. [[bug>2082]] | + | |
| - | * Workaround for an apparent bug in Windows 11 that prevents WinSCP from stopping Windows going to the sleep mode during transfers. [[bug>2083]] | + | |
| - | * Bug fix: When transferring a growing file, after its original size is reached, the ''Session.FileTransferProgress'' event starts being triggered continuously. [[bug>2078]] | + | |
| - | ===== [[5.20.3]] 5.20.3 RC ((2022-05-17)) ===== | + | ===== [[6.7.1]] 6.7.1 (not released yet) ((2026-10-24)) ===== |
| - | * Translations completed: Catalan, Czech, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Portuguese, Romanian, Russian, Simplified Chinese, Slovak, Spanish, Swedish, Traditional Chinese, Turkish and Ukrainian; and updated: Vietnamese | + | * Bug fix: Memory leak in encrypted HTTP/S3/WebDAV connections. [[bug>2476]] |
| - | * Streaming support in .NET assembly and scripting for FTP protocol. [[bug>1945]] | + | * Bug fix: Recursive SCP directory download allows local path traversal when replacing of invalid characters in filenames is disabled. [[bug>2477]] |
| - | * Improved compatibility with MVS systems. [[bug>2069]] | + | * Bug fix: Failure when dragging remote file to external application using drag&drop shell extension in 64-bit build. [[bug>2478]] |
| - | * New .NET assembly method ''Session.TryGetFileInfo''. Thanks to @RachamimYaakobov. [[bug>2068]] | + | |
| - | * Expanding environment variables in Open Directory/Location Profiles dialogs in local paths. [[bug>909]] | + | |
| - | * Optimized loading of large directories. [[bug>1631]] | + | |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1o. | + | |
| - | * Installer upgraded to Inno Setup 6.2.1. | + | |
| - | * When group (//Site/Shared//) to which new location profile is added is changed, switching the page to the target group. | + | |
| - | * Preventing occasional exhaustion of resources while testing WinSCP executable version on repeated use of .NET assembly. [[bug>2075]] | + | |
| - | * Bug fix: Capabilities of S3 sessions were not shown. | + | |
| - | * Bug fix: Misplaced warning about unused scripting parameters when ''/rawsettings'' command-line switch is used. [[bug>2070]] | + | |
| - | * Bug fix: File panels malfunction when files are dropped from other application to it. [[bug>2071]] | + | |
| - | * Bug fix: When logging transfer statistics, recent transfer speed was logged instead of average speed of whole transfer. [[bug>2073]] | + | |
| - | * Bug fix: z/OS PDS members without ISPF statistics are omitted in directory listing. [[bug>2076]] | + | |
| - | ===== [[5.20.2]] 5.20.2 beta ((2022-04-06)) ===== | + | ===== [[6.7]] 6.7 ((2026-10-14)) ===== |
| - | * Translations updated: German and Vietnamese. | + | * Allowing to report abnormal program terminations. |
| - | * SSH core upgraded to pre-release build of [[https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/|PuTTY 0.77]]. (*TODO replace with &url(puttychanges) once 0.77 is released*) \\ It brings the following changes: | + | * Bug fix: Failure when keeping remote directory up to date. [[bug>2468]] |
| - | * Support for HTTP Digest authentication for proxies. [[pbug>http-digestauth]] | + | * Bug fix: Failure when using options in button drop down menus on Overwrite confirmation box. [[bug>2469]] |
| - | * Interactive username/password prompts for proxy authentication. [[bug>468]] [[pbug>proxy-password-prompt]] | + | * Bug fix: File handle leak. [[bug>2470]] |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1n. | + | * Bug fix: Failure when using ''rmdir'' command with WebDAV protocol. [[bug>2471]] |
| - | * WebDAV core upgraded to neon 0.32.2. | + | |
| - | * XML parser upgraded to Expat 2.4.8. | + | |
| - | * Allowed uploading edited files over encrypted session. [[bug>1989]] | + | |
| - | * Building .NET assembly in Visual Studio 2019. | + | |
| - | * Optionally not flashing taskbar button when WinSCP needs attention while in the background. [[bug>2067]] | + | |
| - | * In .NET assembly or scripting with "nul" configuration, when WinSCP registry key does not exist, do not write statistics to INI file. [[bug>2066]] | + | |
| - | * New less prominent icon for //Quit// command. | + | |
| - | * Bug fix: Failure when attempting to switch to an unconnected sessions using keyboard shortcuts while another session is being connected. | + | |
| - | * Bug fix: Removing all custom commands resets the default ones when INI file is used. [[bug>2059]] | + | |
| - | * Bug fix: Failure when changing remote folder using directory tree while previous directory is still loading. [[bug>2060]] | + | |
| - | * Bug fix: Drive that was ever opened in local file panel cannot be safely removed until WinSCP is closed. [[bug>2061]] | + | |
| - | * Bug fix: //"Optimize connection buffer size"// checkbox was disabled for S3 although it has effect for the protocol. [[bug>2058]] | + | |
| - | * Bug fix: Custom commands menu fail to open. [[bug>2062]] | + | |
| - | * Bug fix: Local drive menu does not reflect some changes. [[bug>2063]] | + | |
| - | * Bug fix: Using drive menu to change to an invalid drive fails silently. | + | |
| - | * Bug fix: Scripting command ''ls'' in FTP session displays timestamps without year even if the server (notably IIS) provided the year, if it did not provide seconds. [[bug>2065]] | + | |
| - | ===== [[5.20.1]] 5.20.1 beta ((2022-01-11)) ===== | + | ===== [[6.6.4]] 6.6.4 RC ((2026-10-07)) ===== |
| - | * File masks relative to the root of an operation. [[bug>2052]] | + | · |
| - | * Private key can be provided as string in .NET assembly and scripting. [[bug>2044]] | + | * TLS/SSL core upgraded to OpenSSL 3.5.9. |
| - | * Support for importing key files that are specified using home ''~'' prefix from OpenSSH ''config'' file. [[bug>2053]] | + | ··* XML parser upgraded to Expat 2.9.0. |
| - | * Translation updated: German. | + | * Increased length limit of proxy host name for updates preferences. [[bug>2456]] |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1m. | + | * Optionally default to keeping Login dialog open after opening session in PuTTY. [[bug>2459]] |
| - | * Commands that do not fit on //Custom Commands// toolbar are presented in drop down menu, instead of a horizontal bar. [[bug>554]] | + | * Improving placement of windows, particularly those opened, while the main window is not visible (notably during command-line operations). |
| - | * First hiding right-most //Custom Commands// toolbar commands that do not fit. | + | * Not scanning local directory symlinks pointing to network drives. |
| - | * Prevent hang when dragging files without drag&drop shell extensions when some mapped network drive is not available. [[bug>2054]] | + | · * Show keyboard accelerators on Overwrite confirmation box when keyboard modifier is pressed. [[bug>2463]] |
| - | * Added new ''ap-southeast-3'' AWS region. | + | * Removed no longer working OneDrive code. |
| - | * XML parser upgraded to Expat 2.4.2. | + | · * Updated to JCL library 2.9 commit 10b92737. |
| - | * Bug fix: When initial remote directory specified in the ''open'' command does not exist, the error was silently ignored. | + | * Using themed button drop down menu on Overwrite confirmation box. |
| - | * Bug fix: File color rules with path mask do not work for local files. | + | * Bug fix: When selecting a site to perform a command-line operation with, it was possible to select a workspace or a folder, resulting in unexpected behaviour or failure. [[bug>2457]] |
| + | * Bug fix: After opening session in PuTTY, WinSCP process is never closed. [[bug>2458]] | ||
| + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] | ||
| + | * Bug fix: Fix crashes or unexpected behaviour when user saves a site and a workspace with the same name. [[bug>2462]] | ||
| + | * Bug fix: System context menus always show in dark mode. [[bug>2467]] | ||
| + | * Bug fix: Temporary directory structure for edited remote file reflected the current remote directory path rather than an actual path of the edited file. [[bug>2466]] | ||
| - | ===== [[5.20]] 5.20 beta ((2021-12-02)) ===== | + | ===== [[6.6.3]] 6.6.3 RC ((2026-09-03)) ===== |
| - | * Support for ACL for S3 protocol. [[bug>1641]] | + | * Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish. |
| - | · * SSH core upgraded to [[&url(puttychanges)|PuTTY 0.76]]. [[bug>1984]] \\ It brings the following changes: | + | * Some parts of GUI (panel headers, scrollbars, buttons, checkboxes) show dark in dark theme even when system-wide app theme is light. |
| - | ···* Support Curve448 key exchange method. [[pbug>curve448]] | + | * SSH core and private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. \\ It brings the following change: |
| - | ···* Support Ed448 user and host keys. [[pbug>ed448]] | + | ···* Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>pageant-deferred-decryption-uaf]] |
| - | ···* Support rsa-sha2-256 and rsa-sha2-512 SSH public key algorithms. [[bug>1952]] [[pbug>rsa-sha2]] | + | ···* Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]] |
| - | ···* Change: SHA-256 fingerprints are not padded anymore. | + | ···* Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] |
| - | * It is possible to import sessions from OpenSSH ''config'' file. [[bug>1896]] | + | ···* Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] |
| - | * Change: Removed support for SSH-1. | + | * Bundled SSH private key tools (PuTTYgen and Pageant) are 64-bit. |
| - | * Optionally keeping symbolic link name in path instead of resolving it with SFTP protocol. [[bug>81]] | + | * On Windows 11, using system dark tab theme, that uses different shades for active and disabled/disconnected tabs. [[bug>2452]] |
| - | ··* Improved shortening long paths, when single level name is too long on its own. [[bug>2043]] | + | * TLS/SSL core upgraded to OpenSSL 3.5.8. |
| - | · * WebDAV core upgraded to neon 0.32.1. | + | * XML parser upgraded to Expat 2.8.4. |
| - | ·* Allow displaying all VMS file revisions with FTP protocol. [[bug>1944]] | + | * Source code package build script supports 64-bit target. |
| - | * Support reading S3 credentials from AWS CLI configuration. [[bug>1941]] | + | * Installer upgraded to Inno Setup 6.7.3. |
| - | ··* Bytes transferred are recorded in XML log and available in .NET assembly API. [[bug>597]] | + | * 64-bit build is identified in version information. |
| - | ·* Generating PPK3 keys. | + | * Resolving version of pwsh installed with MSIX. |
| - | * It is possible to copy information to the clipboard from the Properties dialog. | + | * Thirdparty information from the About dialog can be copied to the clipboard even when the browser control malfunctions. |
| - | ··* Made ''WinSCP.exe'' be deployed even when WinSCP NuGet package is included as transitive dependency. [[bug>2017]] | + | * Bug fix: No error is shown when connection fails. |
| - | ··* When performing a single-item atomic operation, displaying indeterminate progress status. | + | * Bug fix: ''x-name'' URL parameter was incorrectly decoded. |
| - | ·* S3 //Security token// session option renamed to a more appropriate //Session Token//. | + | * Bug fix: Incorrect number validation. |
| - | * Not resetting protocol to WebDAV when S3 protocol is selected and HTTP URL is pasted on the Login dialog. [[bug>2045]] | + | * Bug fix: Some controls (notably list view headers) do not correctly apply dark mode in 64-bit build. [[bug>2453]] |
| - | ·* Automatically reconnect when FTP server fails to open data connection, if it previously worked. [[bug>2046]] | + | * Bug fix: 64-bit build did not identify its system to be 64-bit, what among other prevented it from identifying 64-bit COM registrations. |
| - | * Confirm closing when multiple tabs are opened and auto workspace saving is not enabled, even when none of the tabs contain an active remote session. | + | * Bug fix: Some strings use incorrect translation in 64-bit version. [[bug>2455]] |
| - | * Including host key of tunnel session in generated code. [[bug>2006]] | + | |
| - | ··* Support for custom certificate store files with configurable path. [[bug>2034]] | + | |
| - | * Allowed providing tunnel private key passphrase in scripting. [[bug>2029]] | + | |
| - | * Improved handling of long shell command error messages. [[bug>1949]] | + | |
| - | * Considering global passive/active mode settings when importing sessions from FileZilla | + | |
| - | * Automatically retry when S3 transfer fails with ''503'' code (//Slow down// or //Service unavailable//). [[bug>2047]] | + | |
| - | * Improving formatting of errors displayed after an operation completed in //Continue on error// mode. | + | |
| - | * ''Shift+Ctrl+R'' keyboard shortcut for //Reconnect Session// command. | + | |
| - | * Change: Keyboard shortcut for //Restore Selection// command changed to ''Shift+Ctrl+S'' (''Shift+Ctrl+R'' previously). | + | |
| - | * Change: Monitoring ''A:'' and ''B:'' drives. [[bug>2014]] | + | |
| - | * Preventing beep when using ''Alt+Enter'' to open the Properties dialog. | + | |
| - | * When collecting list of files for background transfer, say //"Listing"// instead of //"Calculating"// not to give an impression that it is a superfluous operation. [[bug>2026]] | + | |
| - | * Checking for too many parameters with ''/keygen'' switch. | + | |
| - | * PNG code upgraded to PngComponents 1.7.0. | + | |
| - | * Warning when selecting too new key file. | + | |
| - | * Warning when opening more than 100 tabs. [[bug>1997]] | + | |
| - | * Including HTTP message into S3 error message. | + | |
| - | * Bug fix: Do not say //"Terminated by user"// when the session has actually timed out. | + | |
| - | * Bug fix: Cannot use passwords and passphrases longer than 255 characters in automation and various other purposes. [[bug>1988]] | + | |
| - | ··* Bug fix: When size of a file downloaded with FTP protocol changes (or when ASCII mode is used) the logged size did not reflect the actual transfer size. | + | |
| - | * Bug fix: When connecting disconnected session the directory might be loaded twice. | + | |
| - | * Bug fix: Failure when entering directory that contains file with a slash in its name. [[bug>2016]] | + | |
| - | * Bug fix: When S3 authentication region changes during session, previously visited buckets from the original authentication region could not be accessed anymore. [[bug>2027]] | + | |
| - | * Bug fix: Failure when using multiple connections with local proxy command. [[bug>2028]] | + | |
| - | * Bug fix: Configuration import did not remove old sites and did not load all GUI settings. [[bug>2040]] | + | |
| - | * Bug fix: When S3 transfer fatally fails, error details were lost. | + | |
| - | ===== [[5.19.6]] 5.19.6 (hotfix) ((2022-02-22)) ===== | + | ===== [[6.6.2]] 6.6.2 RC ((2026-06-17)) ===== |
| - | * Translation updated: German. | + | * Experimental 64-bit version of WinSCP. [[bug>618]] |
| - | * Back-propagated fixes from 5.20–5.20.2 releases: | + | * Optionally not showing error message when connection is lost while idle. [[bug>2360]] |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1m. | + | * SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.84]]. \\ It brings the following changes: |
| - | ···* XML parser upgraded to Expat 2.4.6. | + | * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] |
| + | * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | ||
| + | * Bug fix: spurious //"Network error: Socket is not connected"// when authenticating to some HTTP proxies. [[pbug>http-proxy-auth-wsaenotconn]] | ||
| + | ··* TLS/SSL core upgraded to OpenSSL 3.5.7. | ||
| + | ·* XML parser upgraded to Expat 2.8.1. | ||
| + | * Restored faster C TLS/SSL AES implementation. | ||
| + | * Configurable warning when opening large file in an internal editor. [[bug>2437]] | ||
| + | * Informing that when preserving directory timestamps is enabled, using multiple connections for transfer is not possible. [[bug>2439]] | ||
| + | * Warning when pasting a session URL with unsafe settings. | ||
| + | * When opening session in PuTTY to a host for which WinSCP has multiple host keys cached, using the last key or the key that PuTTY has cached. [[bug>2440]] | ||
| + | * Always (re)registering drag&drop shell extension during installation, even when the extension is not replaced. | ||
| + | * Allowed Console interface tool to have ''.exe'' extension to avoid false positive detections by some antiviruses. [[bug>2434]] | ||
| + | * Using //"username"// and //"hostname"// as one word. | ||
| + | * Reading all system settings from 64-bit registry. | ||
| + | * Allow assigning ''null'' to ''Session.SessionLogPath''. [[bug>2438]] | ||
| + | * Avoiding using ''SSH_FXF_EXCL'' together with ''SSH_FXF_TRUNC'' SFTP file opening flags. [[bug>2444]] | ||
| + | * Optimized file system monitoring when looking for dummy directory during drag&drop downloads. [[bug>2445]] | ||
| + | * Change: Not allowing WebDAV redirects to other hosts by default. [[bug>2447]] | ||
| + | * Change: Not allowing WebDAV redirects to an unencrypted URL by default. [[bug>2448]] | ||
| + | * Updated to JCL library 2.9 commit c669fd12. | ||
| + | * Bug fix: Failure when trying to connect via HTTP proxy to FTP host with excessively long login details. [[bug>2435]] | ||
| + | * Bug fix: Buffer overflow in Console interface tool. [[bug>2436]] | ||
| + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| + | * Bug fix: Message boxes from secondary windows (like the internal editor) caused application to move to the background when when the main window was minimized. [[bug>2443]] | ||
| + | * Bug fix: Heap over-read via crafted encrypted filename. [[bug>2449]] | ||
| + | * Bug fix: Slashes in filenames can cause path traversal when invalid filename characters replacement is disabled. [[bug>2450]] | ||
| - | ===== [[5.19.5]] 5.19.5 ((2021-11-25)) ===== | + | ===== [[6.6.1]] 6.6.1 beta ((2026-04-01)) ===== |
| - | * Compatibility with Google Cloud S3 API when duplicating files. [[bug>2038]] | + | * Support for OpenSSH ssh-agent. [[bug>1682]] |
| - | * Compatibility with Google Cloud S3 API when deleting implicitly existing directories. [[bug>2042]] | + | * Optionally connecting all workspace/folder sessions immediately. [[bug>1026]] |
| - | * Translation updated: Turkish. | + | * Preserving panel scroll position after rename. [[bug>2425]] |
| - | * Logging a reference to [[bug>1952]] when an OpenSSH 8.8 (or newer) server refuses the key. | + | * ''Ctrl+C'' works in list views on 'Server and protocol information' dialog. |
| - | * Bug fix: Crash when new contents is copied to the clipboard while downloading files pasted from the clipboard. [[bug>2036]] | + | * Preventing moving or copying a file or folder over ancestor folder with the same name. [[bug>2427]] |
| - | * Bug fix: //Browse Remote Directory// command on Synchronization checklist did not locate file with spaces. | + | * WebDAV/HTTP core upgraded to neon 0.37.1. |
| - | * Bug fix: Extension //ZIP and Upload// does not work with files in a drive root. [[bug>2039]] | + | * XML parser upgraded to Expat 2.7.5. |
| - | * Bug fix: Path on Console window was not shortened when it did not fit. | + | * Bug fix: Some menus were not working on displays to the left or above the primary display. [[bug>2423]] |
| + | * Bug fix: Mouse wheel downwards scrolling did not work on toolbar drop down lists. | ||
| + | · * Bug fix: Once any control of permissions popup box was focused the popup no longer closed when user clicked outside of it. | ||
| + | * Bug fix: Failure when closing Transfer settings dialog with //X// button while a permissions popup box control is focused. [[bug>2420]] | ||
| + | * Bug fix: Failure when switching to a session that is being reconnected. | ||
| + | * Bug fix: Failure when the first bit of an SFTP response is set. [[bug>2422]] | ||
| + | * Bug fix: Copying to clipboard with ''Ctrl+C'' from 'Server and protocol information' was broken. | ||
| + | * Bug fix: Protocol additional information scrolling was broken. | ||
| + | * Bug fix: Master password dialog was missing //Help// button. | ||
| + | * Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]] | ||
| + | * Bug fix: Wrapped settings values from Raw Site Settings dialog were not preserved. | ||
| + | * Bug fix: Some files modified by local custom command in SCP session fail to upload back. [[bug>2428]] | ||
| + | * Bug fix: Whole //Key exchange// page was incorrectly hidden when //"Handles SSH key re-exchange badly"// bug was enabled. | ||
| + | * Bug fix: Some message boxes leak GDI handle. [[bug>2430]] | ||
| + | * Bug fix: Login dialog leaks GDI handles. [[bug>2431]] | ||
| - | ===== [[5.19.4]] 5.19.4 ((2021-10-24)) ===== | + | ===== [[6.6]] 6.6 beta ((2026-02-02)) ===== |
| - | * Translation updated: Hungarian. | + | * Synchronizing two local directories. [[bug>2020]] |
| - | * Showing release date on the About dialog. | + | * Compiler upgraded to Clang/bcc32c. [[bug>618]] |
| - | * Support for custom certificate store files. [[bug>2034]] | + | * Inactive sessions can be automatically reconnected. [[bug>2232]] |
| - | * Allow other ''2xx'' responses to ''PWD'' command, not only the standard ''257''. [[bug>1768]] | + | * Added dark theme support to: [[bug>1696]] |
| - | * Bug fix: When there are both site folder and site with the same name and the site was selected when closing the Login dialog, when reopening, the folder was selected instead. | + | * Login dialog. [[bug>2345]] |
| + | * Transfer Options dialog. | ||
| + | ···* Message boxes. | ||
| + | * Queue column headers. [[bug>2356]] | ||
| + | * Progress window. | ||
| + | ···* Authentication Progress window. [[bug>2358]] | ||
| + | * Bug fix: Scrollbar colors did not always reflect the color theme | ||
| + | * Using modern directory selection dialog that scales correctly and allows creating new directory. [[bug>;2373]] [[bug>2389]] | ||
| + | * Optimized GUI when working with large subdirectory selection. [[bug>;2396]] | ||
| + | * Change: Default to UTF-8 encoding in internal editor. [[bug>2397]] | ||
| + | * New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries. | ||
| + | * TLS/SSL core upgraded to OpenSSL 3.5.5. | ||
| + | * WebDAV/HTTP core upgraded to neon 0.36.0. | ||
| + | * XML parser upgraded to Expat 2.7.4. | ||
| + | * Installer upgraded to Inno Setup 6.7.0 with dark mode support enabled. | ||
| + | * Increased WinSCP memory limit to 4 GB. [[bug>;2412]] | ||
| + | * Defined and implemented interface for the .NET library. By @mjkent. [[bug>856]] | ||
| + | * Optimized TLS/SSL AES implementation. | ||
| + | * Restoring ability to restart Explorer to allow upgrade of drag&;drop shell extension, when installing for current user, as after-restart replacement is not possible without Administrator privileges. [[bug>2381]] | ||
| + | * MSI toolset updated to WiX 5. | ||
| + | * Commands to copy paths to the clipboard on the Synchronization checklist window. | ||
| + | * Cryptography optimization. | ||
| + | * Support long AWS/S3 session tokens. [[bug>2403]] | ||
| + | * Prevent hang when new device is attached or removed while some mapped network drive is not available. [[bug>;2382]] | ||
| + | * Copy and paste improvements: | ||
| + | * Consistently renaming local files dropped or pasted back to their source directory to avoid collisions. | ||
| + | * Bug fix: When copying local files to clipboard from system context menu, "cut"; state of previously cut files was not cleared. | ||
| + | * Not redundantly verifying WebDAV or S3 certificate in Windows Certificate store if it is already marked as trusted in session settings. [[bug>2404]] | ||
| + | * Provide SNI when opening FTP data connection. [[bug>;2410]] | ||
| + | * Optimized synchronization checklist sorting. | ||
| + | * Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] | ||
| + | * Convert unsupported SSH proxy to SSH tunnel when importing site from PuTTY. [[bug>;2408]] | ||
| + | * FTP directory listing falls back to the other active/passive mode, consistently with file transfers. | ||
| + | * Consistently calling command to open window with specific directory //Explore//, instead of sometimes //Browse//. | ||
| + | * Consistently referring to file last modification timestamp column as //Date modified//. | ||
| + | * With INI file provided on command-line, using the same INI file when starting a new instance. | ||
| + | * Windows shell local file copy status window is centered on the main window. | ||
| + | * Made taskbar flashing configurable in GUI. [[bug>2411]] | ||
| + | * Control labels on transfer settings dialogs do not show keyboard accelerator cue, until ''Alt'' key is pressed. | ||
| + | * Not using drag images even with directory trees. [[bug>1274]] | ||
| + | * Allow configuring checksum commands. [[bug>2394]] | ||
| + | * Updated to JCL library 2.8.1. | ||
| + | * Updating jump list only when running with GUI. | ||
| + | * Made space on permissions box for longer translations. [[bug>2398]] | ||
| + | * Opening //Default Apps// //Settings// page directly to open it in the foreground and avoid flashing //Control Panel// window. | ||
| + | * Improving order in which Windows Narrator reads window controls. | ||
| + | * All edit boxes with history consistently do not auto complete and show 16 entries in the drop down. | ||
| + | * Removed obsolete //Preserve remote timestamp// session settings. | ||
| + | * Bug fix: Local file with invalid characters replaced could not be explored from the Synchronization checklist window. | ||
| + | * Bug fix: Files modified by local custom command are not always uploaded to the correct remote directory. [[bug>2370]] | ||
| + | * Bug fix: List of network drives in drive drop down and directory tree did not always match. | ||
| + | * Bug fix: Host key prompt did not have the default button. | ||
| + | * Bug fix: When the local path specified on Open directory/Location profile dialog is not existing, when browsing for a new path, the trailing part of the nonexisting path was appended to the new path. | ||
| + | * Bug fix: Trying to enter an invalid link in local panel fails silently. | ||
| + | * Bug fix: After FTP data connection fails to open further use of the session is broken. | ||
| + | * Bug fix: Pasting cut files from the clipboard into a local panel copies them instead of moving them. [[bug>2400]] | ||
| + | * Bug fix: Some edits did not save their value to history when submitting with ''Enter''. | ||
| + | * Bug fix: Too long edit history dropdown can overflow monitor bounds. [[bug>2432]] | ||
| + | * Bug fix: Message box texts and some control labels are not visible to screen readers. [[bug>2413]] | ||
| + | * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | ||
| - | ===== [[5.19.3]] 5.19.3 ((2021-10-11)) ===== | + | ===== [[6.5.9]] 6.5.9 (not released yet) ((2026-09-10)) ===== |
| - | * Translation updated: French. | + | * Back-propagated fixes from 6.6.4 release: |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1l. | + | ···* Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] |
| - | * Using //Documents// folder when the last used local directory in Explorer interface does not exist anymore. [[bug>2011]] | + | |
| - | * Bug fix: TLS session resumption is not working for subsequent FTP transfers with TLS 1.3 when the server requires reuse of the session of the previous transfer. [[bug>2018]] | + | |
| - | ·* Bug fix: Cannot access S3 bucket root when the access policy checks for empty prefix. [[bug>2021]] | + | |
| - | * Bug fix: Response from ProFTPD FTP checksum commands is not recognized. [[bug>2023]] | + | |
| - | * Bug fix: Failure when submitting prompt with //"Never ask me again"// selected. [[bug>2022]] | + | |
| - | * Bug fix: Panels are drawn incorrectly after toggling //Full row select//. [[bug>2025]] | + | |
| - | * Bug fix: Timeout while uploading files to some FTP servers using TLS 1.3. [[bug>2030]] | + | |
| - | * Bug fix: Incomplete listing for S3 servers that indicate truncated listing after the contents and whose pagination is a multiple of 8 (e.g. Backblaze). [[bug>2032]] | + | |
| - | ===== [[5.19.2]] 5.19.2 ((2021-07-21)) ===== | + | ===== [[6.5.8]] 6.5.8 ((2026-09-10)) ===== |
| - | * Translation completed: French. | + | * This is Microsoft Store-only release that fixes packaging problem of 6.5.7. The actual binaries are still 6.5.7. |
| - | * Restored compatibility with FTP servers that return malformed ''cdir'' and ''pdir'' entries in directory listing. [[bug>2004]] | + | ···* Bug fix: Cannot install from Microsoft Store because of invalid 'sr' language. [[bug>2460]] |
| - | * Fix from [[&url(puttychanges)|PuTTY 0.76]]: Avoid crash in MIT Kerberos for Windows on session restart. | + | |
| - | * SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.76. It brings the following change: After 30 or so simultaneous sessions, Pageant stops working. [[pbug>win-pageant-max-connections]] | + | |
| - | ·* Bug fix: Empty local drive could not be entered. [[bug>;2000]] | + | |
| - | * Bug fix: TLS settings in default site settings is not restored when opening Login dialog in some cases. [[bug>;2001]] | + | |
| - | * Bug fix: Memory leak when deleting completed background transfers. | + | |
| - | * Bug fix: Hang when running under Task Scheduler or a similar service with session logging enabled. [[bug>2005]] | + | |
| - | ===== [[5.19.1]] 5.19.1 ((2021-06-30)) ===== | + | ===== [[6.5.7]] 6.5.7 ((2026-09-09)) ===== |
| - | * Translation updated: Italian. | + | * Translations completed: Croatian, Finnish, Georgian, Italian and Serbian, and updated: Slovenian. |
| - | * Incrementing port numbers for secondary connections of tunneled sessions with fixed forwarding port number. [[bug>1996]] | + | * TLS/SSL core upgraded to OpenSSL 3.3.7. |
| - | ·* Bug fix: Failure when automatically opening a workspace on startup with too many sessions. [[bug>1997]] | + | * SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. SSH core upgraded to include some fixes. \\ It brings the following change: |
| - | * Bug fix: Failure when reading a key file without a trailing newline. [[bug>1998]] | + | * Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>pageant-deferred-decryption-uaf]] |
| - | * Bug fix: Failure when SFTP server resolves ''.'' path to an empty string. [[bug>1999]] | + | ···* Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]] |
| + | * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] | ||
| + | ····* Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] | ||
| + | * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | ||
| + | * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | ||
| + | * Back-propagated fixes from 6.6.2 beta release: | ||
| + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| + | * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | ||
| - | ===== [[5.19]] 5.19 ((2021-06-17)) ===== | + | ===== [[6.5.6]] 6.5.6 ((2026-03-25)) ===== |
| - | * When installing an extension from a URL, not saving the extension with BOM. | + | * Translations completed: Macedonian, and updated: Lithuanian, and Russian. |
| - | * Not aborting "Keep remote directory up to date" function when connection is lost while deleting files or looking for differences and the session is reconnected. [[bug>1994]] | + | * TLS/SSL core upgraded to OpenSSL 3.3.6. |
| - | ·* Bug fix: When handling URL in an existing WinSCP instance, session settings from a stored site named after the URL hostname are not used. [[bug>1992]] | + | * Back-propagated improvements from 6.6–6.6.1 beta release: |
| - | ·* Bug fix: It was possible to move toolbar on progress windows. | + | ···* New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries. |
| - | ·* Bug fix: When installing an extension from a file, it is always saved in UTF-8 with BOM, disregarding the original encoding. [[bug>1993]] | + | ···* XML parser upgraded to Expat 2.7.5. |
| - | ·* Bug fix: When "Keep remote directory up to date" function was started from command-line, disconnects were not detected. | + | ···* Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] |
| - | · * Bug fix: When connection was lost and not reconnected, the "Keep remote directory up to date" window was not closed. | + | ···* Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]] |
| - | ===== [[5.18.6]] 5.18.6 RC ((2021-06-10)) ===== | + | ===== [[6.5.5]] 6.5.5 ((2025-11-19)) ===== |
| - | * XML parser upgraded to Expat 2.4.1. | + | * Translation updated: Vietnamese. |
| - | * Installer upgraded to Inno Setup 6.2.0. | + | * Bug fix: Pasting files using local directory tree context menu pastes them to the current directory, instead of the selected one. |
| - | * Using multipart uploads with S3 protocol on Google Cloud as it is supported there now. | + | * Bug fix: Failure when opening site imported from PuTTY with unsupported SSH proxy. [[bug>2407]] |
| - | * Bug fix: Broken layout of Properties dialog when opening on a secondary display with high DPI primary display. [[bug>1990]] | + | * Bug fix: Incorrect hostname validation when connecting to S3 endpoint with certificate that does not cover root S3 hostname. [[bug>2409]] |
| - | * Bug fix: The //"Drag & drop shell extension"// installation component was not showing its size. | + | |
| - | * Bug fix: When saving a local file, the //"Saving"// status on the Internal editor status bar is never cleared. | + | |
| - | * Bug fix: No error message is sometimes shown when SFTP server disconnects. [[bug>1991]] | + | |
| - | ===== [[5.18.5]] 5.18.5 RC ((2021-05-20)) ===== | + | ===== [[6.5.4]] 6.5.4 ((2025-10-16)) ===== |
| - | * Translation updated: Farsi. | + | * Translations updated: Belarusian and Georgian. |
| - | * Support for PPK version 3 keys from PuTTY 0.75. [[bug>1986]] [[pbug>ppk3]] | + | * TLS/SSL core upgraded to OpenSSL 3.3.5. |
| - | ··* SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.75. It brings the following changes: | + | * XML parser upgraded to Expat 2.7.3. |
| - | ···* Pageant now supports loading a key still encrypted, and decrypting it later by prompting for the passphrase on first use. [[pbug>pageant-deferred-decrypt]] | + | * Added new ''ap-southeast-6'' AWS region. |
| - | ···* Upgraded default SSH key fingerprint format to OpenSSH-style SHA-256.[[pbug>ssh-fingerprint-formats]] | + | ·* Bug fix: When restored after operation completed while minimized the window is disabled. [[bug>2393]] |
| - | * PuTTYgen now supports alternative provable-prime generation algorithm for RSA and DSA. | + | ·* Bug fix: Command ''md5sums'' is incorrectly used to calculate MD5 checksum instead of ''md5sum''. [[bug>2392]] |
| - | ····* Replaces Windows Pageant's IPC with named pipes. [[pbug>pageant-named-pipe]] | + | ·* Bug fix: Incomplete FTP upload when the source stream/stdin reads less than requested. [[bug>2395]] |
| - | ···* Bug fix: PuTTYgen mis-writes OpenSSH private key format for some Ed25519 keys. [[pbug>openssh-ed25519-corrupt-private-key]] | + | * Bug fix: ''Shift''-clicking //OK// button on Synchronization checklist window when synchronization in the background was not possible still closed the window. |
| - | * Bug fix: Moving a transfer to background just in between two individual file transfers cancels the transfer. [[bug>1983]] | + | * Bug fix: Failure after reloading file panel when number of files decreases. [[bug>2402]] |
| - | * Bug fix: Files saved in external editors are not uploaded in timezones behind UTC. [[bug>1985]] | + | * Bug fix: Failure or silently missing headers when when S3 request headers were too long. |
| - | * Bug fix: //Sort > By Type icon// for was still incorrect. | + | |
| [[history_old|Older versions]] | [[history_old|Older versions]] | ||
| ~~NOTOC~~ | ~~NOTOC~~ | ||
| ~~ARCHIVE=history_old~~ | ~~ARCHIVE=history_old~~ | ||