Differences
This shows you the differences between the selected revisions of the page.
| history 2023-04-06 | history 2026-09-11 (current) | ||
| Line 3: | Line 3: | ||
| This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. | This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. | ||
| - | ===== [[6.0.2]] 6.0.2 (not released yet) ((2023-04-06)) ===== | + | ===== [[6.8]] 6.8 (not released yet) ((2026-08-22)) ===== |
| - | * When saving edited/opened file, optionally warning if it was modified meanwhile externally. [[bug>99]] | + | * Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]] |
| - | * ''puttygen'' switches ''--new-passphrase'' and ''--old-passphrase'' are recognized. | + | |
| - | * Bug fix: When switching from a remote tab to a local tab, the "right" status bar does not show correct information. | + | |
| - | * Bug fix: //Edit Link// command in Explorer interface has incorrect name //Link//. | + | |
| - | * Bug fix: //Mark > Select/Unselect// command was behaving incorrectly. | + | |
| - | * Bug fix: HTTP proxy authentication prompt was not localized. | + | |
| - | * Bug fix: Directory tree does not adjust line height to custom panel font size. [[bug>2172]] | + | |
| - | * Bug fix: Green artifacts at partial file icon overlay. | + | |
| - | * Bug fix: The first copy&paste of remote files to other application might fail in Explorer interface. [[bug>2175]] | + | |
| - | * Bug fix: Temporary directory is left behind when WinSCP is closed while it has some remote files copied to the clipboard. [[bug>2176]] | + | |
| - | * Bug fix: ''Session.EnumerateRemoteFiles'' does not work correctly when the mask includes brackets and other symbols. [[bug>2177]] | + | |
| - | ===== [[6.0.1]] 6.0.1 beta ((2023-03-07)) ===== | + | ===== [[6.6.4]] 6.6.4 (not released yet) ((2026-09-11)) ===== |
| + | |||
| + | * Increased length limit of proxy host name for updates preferences. [[bug>2456]] | ||
| + | * Optionally default to keeping Login dialog open after opening session in PuTTY. [[bug>2459]] | ||
| + | * Improving placement of widows, particularly those opened, while the main window is not visible (notably during command-line operations). | ||
| + | * Bug fix: When selecting a site to perform a command-line operation with, it was possible to select a workspace or a folder, resulting in unexpected behaviour or failure. [[bug>2457]] | ||
| + | * Bug fix: After opening session in PuTTY, WinSCP process is never closed. [[bug>2458]] | ||
| + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] | ||
| - | ··* //Compare Directories// command is available in local file manager mode. | + | ===== [[6.6.3]] 6.6.3 RC ((2026-09-03)) ===== |
| - | * Installer upgraded to Inno Setup 6.2.2. | + | |
| - | * Translations updated: German and Hungarian. | + | |
| - | * Renamed //File// menu in Explorer interface to //Files// for consistency with Commander interface. | + | |
| - | * Using plural //Tabs// for consistency with other menus. | + | |
| - | * Using the same timestamp format in local and remote file panels. | + | |
| - | * Option to allow box-drawing characters to render correctly in an Internal editor. [[bug>2169]] | + | |
| - | * Bug fix: Failure when selecting S3 protocol in Login dialog with non-existing ''.aws/credentials'' file. [[bug>2166]] | + | |
| - | · * Bug fix: Tab close button of new session was drawn as clicked, if it was opened from Login dialog popped up after the last session was closed by clicking its close button. | + | |
| - | * Bug fix: Rename tab dialog still says //"Rename session"//. | + | |
| - | * Bug fix: Generated code uses obsolete ''SessionOptions.WebdavSecure'' property instead of current ''SessionOptions.Secure''. | + | |
| - | * Bug fix: Generated code for unsecure S3 protocol does not include ''SessionOptions.Secure'' property. | + | |
| - | * Bug fix: Separation of //Tab// and //Session// menus was unintentionally not reverted for Explorer interface. | + | |
| - | * Bug fix: Wrong behaviour when trying to open a workspace that does not contain any valid session. | + | |
| - | * Bug fix: ''Ctrl+T'' opens the wrong type of tab. | + | |
| - | * Bug fix: The ''!K'' and ''!\'' custom command and PuTTY patterns were not included in syntax hint. | + | |
| - | * Bug fix: Hang when FTP directory listing contains nul character. [[bug>2167]] | + | |
| - | * Bug fix: //Parent directory// command was missing its keyboard shortcut in the menu. | + | |
| - | * Bug fix: Workspace could not be saved when the active tab was not connected or was local. | + | |
| - | * Bug fix: Some control labels were showing keyboard accelerators without keyboard intervention. | + | |
| - | * Bug fix: Pressing ''Alt'' with some combo boxes focused did not show keyboard accelerators. | + | |
| - | * Bug fix: Failure when starting with colored session. [[bug>2168]] | + | |
| - | ===== [[6.0]] 6.0 beta ((2023-02-08)) ===== | + | ··* Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish. |
| - | ··* Local file manager mode (two local panels). [[bug>1893]] | + | * Some parts of GUI (panel headers, scrollbars, buttons, checkboxes) show dark in dark theme even when system-wide app theme is light. |
| - | * Windows 11 flat style graphics. | + | * SSH core and private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. \\ It brings the following change: |
| - | · * SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.78]]. It brings the following changes: | + | * Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>pageant-deferred-decryption-uaf]] |
| - | ···* Support for OpenSSH certificates (for user authentication keys). [[bug>1873]] [[pbug>ssh2-openssh-certkeys]] | + | ···* Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]] |
| - | ···* Support for NTRU Prime post-quantum key exchange. [[pbug>ntru]] | + | ···* Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] |
| - | ···* Support for AES-GCM (in the OpenSSH style rather than RFC 5647, without hardware acceleration). [[pbug>aes-gcm]] | + | ···* Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] |
| - | ···* Support for more forms of Diffie-Hellman key exchange: new larger integer groups (such as group16 and group18), and support for using those and ECDH with GSSAPI. [[pbug>rfc8268-dh-groups]] [[pbug>gss-key-exchange-more-algs]] | + | * Bundled SSH private key tools (PuTTYgen and Pageant) are 64-bit. |
| - | * Ongoing delete operation can be moved to background queue. [[bug>194]] | + | * On Windows 11, using system dark tab theme, that uses different shades for active and disabled/disconnected tabs. [[bug>2452]] |
| - | · * New DigiCert EV code signing certificate valid until February 2026 is used for signing binaries. | + | * TLS/SSL core upgraded to OpenSSL 3.5.8. |
| - | · * Showing directory size in file panel. [[bug>41]] | + | * XML parser upgraded to Expat 2.8.4. |
| - | * MSI installation package. [[bug>83]] | + | * Source code package build script supports 64-bit target. |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1t. | + | * Installer upgraded to Inno Setup 6.7.3. |
| - | * Translations updated: German and Russian. | + | * 64-bit build is identified in version information. |
| - | * File checksum calculation support for SCP protocol and SFTP protocol via secondary shell session using shell commands like ''sha256sum''. | + | * Resolving version of pwsh installed with MSIX. |
| - | * Tab titles are shortened to fit window width as needed. [[bug>1423]] | + | * Thirdparty information from the About dialog can be copied to the clipboard even when the browser control malfunctions. |
| - | ··* AWS S3 profile selection. [[bug>2057]] | + | * Bug fix: No error is shown when connection fails. |
| - | · * Consistent behavior across protocols when renaming/moving remote files: [[bug>2120]] | + | * Bug fix: ''x-name'' URL parameter was incorrectly decoded. |
| - | * Asking before overwriting existing files, both for renaming/moving. | + | * Bug fix: Incorrect number validation. |
| - | * Allowing overwriting existing files even with protocols that require deleting the existing file first and with WebDAV. | + | * Bug fix: Some controls (notably list view headers) do not correctly apply dark mode in 64-bit build. [[bug>2453]] |
| - | * Change: In scripting and .NET assembly, moving a file over an existing file will overwrite the existing file. | + | * Bug fix: 64-bit build did not identify its system to be 64-bit, what among other prevented it from identifying 64-bit COM registrations. |
| - | * Using SFTP ''copy-data'' extension to duplicate remote files with servers that do not support ''copy-file'' extension (OpenSSH). | + | * Bug fix: Some strings use incorrect translation in 64-bit version. [[bug>2455]] |
| - | * Allowed scrolling of background transfers queue list view while dragging a transfer. [[bug>2154]] | + | |
| - | ··* Tabs show tooltips with full session name, username, hostname and paths. | + | |
| - | * Displaying thanks and transitioning help toolbar message after Store installation over classic installation. | + | |
| - | * Remembering remote directory tree nodes state when switching sessions. [[bug>1057]] | + | |
| - | ·* Progress animations for //Duplicate// and //Move To// operations. | + | |
| - | * Download edited/opened files with up-to-date timestamps. [[bug>2122]] | + | |
| - | * Displaying current version on the New version notification. [[bug>2125]] | + | |
| - | ··* Support for S3 servers without TLS encryption. [[bug>1995]] | + | |
| - | ·* Support for redirected WebDAV downloads (even to other hosts). [[bug>1667]] | + | |
| - | * Optionally reading password from a file. [[bug>2102]] | + | |
| - | ··* Input files can be read from named pipes. [[bug>2118]] | + | |
| - | ·* ''Shift''-clicking //New Session// command opens the Login dialog in new WinSCP instance, instead of possibly opening new instance of workspace. | + | |
| - | * Option to always sort directories by name. [[bug>1024]] | + | |
| - | * Bookmark drop-down menu in Explorer interface. [[bug>2127]] | + | |
| - | * Preserving changed passwords of ad-hoc sessions in workspace. [[bug>2128]] | + | |
| - | * In file panel, file sorting by date and size is by default descending even when initiated by menu, toolbar or keyboard shortcut, consistently with sorting by clicking panel column header. | + | |
| - | * Allowed opening all sites in a folder in PuTTY. [[bug>2079]] | + | |
| - | ··* Allowing environment variables in custom INI file path. [[bug>2105]] | + | |
| - | * Private key pattern ''!K'' in PuTTY command-line and custom commands. [[bug>2107]] | + | |
| - | * Automatically reconnect when FTP server fails to open data connection with ''426'' code, if it previously worked. [[bug>2110]] | + | |
| - | * Cleaning up temporary WinSCP PuTTY sessions. | + | |
| - | * Clearing environment variables ''BLOCK_SIZE'' and ''LS_BLOCK_SIZE''. [[bug>2129]] | + | |
| - | * Added import from KiTTY directly to the Import dialog. [[bug>1551]] | + | |
| - | * Warn when user selects too verbose logging level that degrades performance. [[bug>2155]] | + | |
| - | * Contents of About dialog can be copied to the clipboard using ''Ctrl+C''. | + | |
| - | * Blocking Windows Rich Edit formatting keyboard shortcuts in Internal editor. [[bug>2108]] | + | |
| - | * WebDAV/HTTP core upgraded to neon 0.32.5. | + | |
| - | * PNG code upgraded to PngComponents 1.9.0. | + | |
| - | * When switching tabs, prevent visibly scrolling the panels when focusing the last selected file. | + | |
| - | * Removed the "compression" indicator from the status bar. | + | |
| - | * Added GSSAPI key exchange algorithms to ''/info''. | + | |
| - | * Allowed normal behavior of double-click on a file even when resolving of symlinks is disabled. [[bug>2037]] | + | |
| - | * Change: ''SessionOptions.WebdavSecure'' renamed to ''SessionOptions.Secure'' (and applies to S3 protocol too). | + | |
| - | * ''Session.ExecutablePath'' returns detected or actual executable path when not set. [[bug>2055]] | + | |
| - | * Change: Keyboard shortcut for //Command Line// command changed to ''Shift+Ctrl+M'' (''Shift+Ctrl+N'' previously). | + | |
| - | * Do not overwrite existing local file when FTP download fails to start. [[bug>2132]] | + | |
| - | * Preventing construction of .NET assembly internal collection classes, what avoids them being unnecessarily registered for COM. | + | |
| - | * Hidden configuration option to increase maximal number of transfer at the same time. [[bug>2117]] | + | |
| - | * Not animating task bar button, when items are queued, but processing is disabled | + | |
| - | * Removed gap in initial toolbar layout. | + | |
| - | * Better formatting of feature list on Interface page of Preferences dialog. | + | |
| - | * Optimizing adjusting to updated system font. [[bug>2149]] | + | |
| - | * Consistency with loading icons synchronously and on the background. [[bug>2161]] | + | |
| - | * Added new ''ap-southeast-4'' AWS region. | + | |
| - | * Selecting the best language with each installation. [[bug>2160]] | + | |
| - | * Workaround for using ''/ini=nul'' on systems when reading ''nul'' file fails. [[bug>2163]] | + | |
| - | * Support for FTP ''CSID'' command. | + | |
| - | * Not logging supported SFTP extensions included directly in ''SSH_FXP_VERSION'' response as unknown. | + | |
| - | * Bug fix: Failure when trying to switch session tabs while previous switch did not complete yet. | + | |
| - | * Bug fix: When importing from FileZilla with KiTTY selected as SSH terminal, host keys were imported from KiTTY instead of FileZilla/PuTTY. | + | |
| - | * Bug fix: Incorrect escaping of values in single-quoted patterns in custom commands. | + | |
| - | * Bug fix: Configuration does not load when using ''/rawconfig'' command-line switch and read-only configuration sections. | + | |
| - | * Bug fix: When file rename fails, wrong part of filename might be selected in the inline filename editor. | + | |
| - | * Bug fix: Mouse cursor flickers while retrieving remote file properties. | + | |
| - | * Bug fix: Using any keyboard shortcut with ''Alt'' key shows menu keyboard accelerators permanently. | + | |
| - | * Bug fix: Session tabs cannot be dragged when the user has mouse buttons swapped. | + | |
| - | * Bug fix: The //"Keep temporary copies of remote files in deterministic paths"// option applied when duplicating remote files via a local temporary copy and with custom commands, breaking their functionality. [[bug>2140]] | + | |
| - | * Bug fix: S3 credentials checkbox on Login dialog had wrong tab order. | + | |
| - | * Bug fix: Turned-off keepaliaves are not propagated to PuTTY. [[bug>2141]] | + | |
| - | * Bug fix: With password storing administratively disabled, the ''/rawsettings'' switch cannot be used to set passwords. [[bug>2142]] | + | |
| - | * Bug fix: Focus was lost after checking for updates. | + | |
| - | * Bug fix: Failure on startup fatal error. | + | |
| - | * Bug fix: Error when uploading file sized just below 32 kB boundary to FTP server over TLS 1.3. [[bug>2019]] | + | |
| - | * Bug fix: Failure when doing agent forwarding with Pageant 0.74 or older. [[bug>2162]] | + | |
| - | * Bug fix: Pressing ''Tab'' during incremental search on Login dialog never look into collapsed folders when more than one visible node matched the search. | + | |
| - | * Bug fix: File on local network share treated as folder when uploading. [[bug>2056]] | + | |
| - | * Bug fix: Failure when parsing FTP checksum response misses the actual response. | + | |
| - | ===== [[5.21.8]] 5.21.8 (not released yet) ((2023-02-21)) ===== | + | ===== [[6.6.2]] 6.6.2 RC ((2026-06-17)) ===== |
| - | * Back-propagated fixes from 6.0 beta release: | + | * Experimental 64-bit version of WinSCP. [[bug>618]] |
| - | * Translations updated: German, Hungarian and Russian. | + | * Optionally not showing error message when connection is lost while idle. [[bug>2360]] |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1t. | + | * SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.84]]. \\ It brings the following changes: |
| + | * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | ||
| + | * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | ||
| + | * Bug fix: spurious //"Network error: Socket is not connected"// when authenticating to some HTTP proxies. [[pbug>http-proxy-auth-wsaenotconn]] | ||
| + | ··* TLS/SSL core upgraded to OpenSSL 3.5.7. | ||
| + | * XML parser upgraded to Expat 2.8.1. | ||
| + | * Restored faster C TLS/SSL AES implementation. | ||
| + | * Configurable warning when opening large file in an internal editor. [[bug>2437]] | ||
| + | * Informing that when preserving directory timestamps is enabled, using multiple connections for transfer is not possible. [[bug>2439]] | ||
| + | * Warning when pasting a session URL with unsafe settings. | ||
| + | * When opening session in PuTTY to a host for which WinSCP has multiple host keys cached, using the last key or the key that PuTTY has cached. [[bug>2440]] | ||
| + | * Always (re)registering drag&drop shell extension during installation, even when the extension is not replaced. | ||
| + | * Allowed Console interface tool to have ''.exe'' extension to avoid false positive detections by some antiviruses. [[bug>2434]] | ||
| + | * Using //"username"// and //"hostname"// as one word. | ||
| + | * Reading all system settings from 64-bit registry. | ||
| + | * Allow assigning ''null'' to ''Session.SessionLogPath''. [[bug>2438]] | ||
| + | * Avoiding using ''SSH_FXF_EXCL'' together with ''SSH_FXF_TRUNC'' SFTP file opening flags. [[bug>2444]] | ||
| + | * Optimized file system monitoring when looking for dummy directory during drag&drop downloads. [[bug>2445]] | ||
| + | * Change: Not allowing WebDAV redirects to other hosts by default. [[bug>2447]] | ||
| + | * Change: Not allowing WebDAV redirects to an unencrypted URL by default. [[bug>2448]] | ||
| + | * Updated to JCL library 2.9 commit c669fd12. | ||
| + | * Bug fix: Failure when trying to connect via HTTP proxy to FTP host with excessively long login details. [[bug>2435]] | ||
| + | * Bug fix: Buffer overflow in Console interface tool. [[bug>2436]] | ||
| + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| + | * Bug fix: Message boxes from secondary windows (like the internal editor) caused application to move to the background when when the main window was minimized. [[bug>2443]] | ||
| + | * Bug fix: Heap over-read via crafted encrypted filename. [[bug>2449]] | ||
| + | * Bug fix: Slashes in filenames can cause path traversal when invalid filename characters replacement is disabled. [[bug>2450]] | ||
| - | ===== [[5.21.7]] 5.21.7 ((2023-01-23)) ===== | + | ===== [[6.6.1]] 6.6.1 beta ((2026-04-01)) ===== |
| - | * Improvements to official //Batch Rename// extension: | + | * Support for OpenSSH ssh-agent. [[bug>1682]] |
| - | ···* Made GUI refresh optional to allow standalone execution. | + | * Optionally connecting all workspace/folder sessions immediately. [[bug>1026]] |
| - | ···* Not failing when specific file do not require any rename. | + | * Preserving panel scroll position after rename. [[bug>2425]] |
| - | ···* Bug fix: Rename fails when the filename contain file mask special characters. [[bug>2157]] | + | * ''Ctrl+C'' works in list views on 'Server and protocol information' dialog. |
| - | * Bug fix: Failure when system settings change after new version message box was displayed. [[bug>2148]] | + | * Preventing moving or copying a file or folder over ancestor folder with the same name. [[bug>2427]] |
| + | * WebDAV/HTTP core upgraded to neon 0.37.1. | ||
| + | ·* XML parser upgraded to Expat 2.7.5. | ||
| + | * Bug fix: Some menus were not working on displays to the left or above the primary display. [[bug>2423]] | ||
| + | ·* Bug fix: Mouse wheel downwards scrolling did not work on toolbar drop down lists. | ||
| + | * Bug fix: Once any control of permissions popup box was focused the popup no longer closed when user clicked outside of it. | ||
| + | ·* Bug fix: Failure when closing Transfer settings dialog with //X// button while a permissions popup box control is focused. [[bug>2420]] | ||
| + | * Bug fix: Failure when switching to a session that is being reconnected. | ||
| + | * Bug fix: Failure when the first bit of an SFTP response is set. [[bug>2422]] | ||
| + | * Bug fix: Copying to clipboard with ''Ctrl+C'' from 'Server and protocol information' was broken. | ||
| + | * Bug fix: Protocol additional information scrolling was broken. | ||
| + | * Bug fix: Master password dialog was missing //Help// button. | ||
| + | * Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]] | ||
| + | * Bug fix: Wrapped settings values from Raw Site Settings dialog were not preserved. | ||
| + | * Bug fix: Some files modified by local custom command in SCP session fail to upload back. [[bug>2428]] | ||
| + | * Bug fix: Whole //Key exchange// page was incorrectly hidden when //"Handles SSH key re-exchange badly"// bug was enabled. | ||
| + | * Bug fix: Some message boxes leak GDI handle. [[bug>2430]] | ||
| + | * Bug fix: Login dialog leaks GDI handles. [[bug>2431]] | ||
| - | ===== [[5.21.6]] 5.21.6 ((2022-11-28)) ===== | + | ===== [[6.6]] 6.6 beta ((2026-02-02)) ===== |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1s. | + | * Synchronizing two local directories. [[bug>2020]] |
| - | * XML parser upgraded to Expat 2.5.0. | + | * Compiler upgraded to Clang/bcc32c. [[bug>618]] |
| - | * Translation updated: German. | + | * Inactive sessions can be automatically reconnected. [[bug>2232]] |
| - | * Setting ''$PSNativeCommandArgumentPassing'' to ''Legacy'' in generated WinSCP scripting PowerShell commandline, which is needed for PowerShell 7.3 compatibility. [[bug>2134]] | + | * Added dark theme support to: [[bug>1696]] |
| - | * Added new ''ap-south-2'', ''eu-central-2'' and ''eu-south-2'' AWS regions and doubling region drop-down height. | + | * Login dialog. [[bug>2345]] |
| - | * Bug fix: Moving WebDAV transfer to background aborts the transfer if the server commits the interrupted foreground transfer. [[bug>2126]] | + | * Transfer Options dialog. |
| - | * Bug fix: Failure when saving edited file while current tab is not connected. [[bug>2139]] | + | * Message boxes. |
| - | * Bug fix: When the current session is encrypted, saved edited file was uploaded using the current session instead of its source session. When the current session is not encrypted, edited files opened in any encrypted session was uploaded on the background, possibly leading to data inconsistent files. | + | * Queue column headers. [[bug>2356]] |
| - | * Bug fix: When reattaching edited file to re-connection session, the file was always attached to the current session instead of the possibly non-active re-connected session. | + | * Progress window. |
| + | * Authentication Progress window. [[bug>2358]] | ||
| + | * Bug fix: Scrollbar colors did not always reflect the color theme | ||
| + | * Using modern directory selection dialog that scales correctly and allows creating new directory. [[bug>2373]] [[bug>2389]] | ||
| + | * Optimized GUI when working with large subdirectory selection. [[bug>2396]] | ||
| + | * Change: Default to UTF-8 encoding in internal editor. [[bug>2397]] | ||
| + | * New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries. | ||
| + | ··* TLS/SSL core upgraded to OpenSSL 3.5.5. | ||
| + | * WebDAV/HTTP core upgraded to neon 0.36.0. | ||
| + | * XML parser upgraded to Expat 2.7.4. | ||
| + | * Installer upgraded to Inno Setup 6.7.0 with dark mode support enabled. | ||
| + | * Increased WinSCP memory limit to 4 GB. [[bug>2412]] | ||
| + | ··* Defined and implemented interface for the .NET library. By @mjkent. [[bug>;856]] | ||
| + | * Optimized TLS/SSL AES implementation. | ||
| + | * Restoring ability to restart Explorer to allow upgrade of drag&drop shell extension, when installing for current user, as after-restart replacement is not possible without Administrator privileges. [[bug>;2381]] | ||
| + | * MSI toolset updated to WiX 5. | ||
| + | * Commands to copy paths to the clipboard on the Synchronization checklist window. | ||
| + | * Cryptography optimization. | ||
| + | * Support long AWS/S3 session tokens. [[bug>2403]] | ||
| + | * Prevent hang when new device is attached or removed while some mapped network drive is not available. [[bug>;2382]] | ||
| + | * Copy and paste improvements: | ||
| + | * Consistently renaming local files dropped or pasted back to their source directory to avoid collisions. | ||
| + | * Bug fix: When copying local files to clipboard from system context menu, "cut"; state of previously cut files was not cleared. | ||
| + | ··* Not redundantly verifying WebDAV or S3 certificate in Windows Certificate store if it is already marked as trusted in session settings. [[bug>2404]] | ||
| + | * Provide SNI when opening FTP data connection. [[bug>;2410]] | ||
| + | * Optimized synchronization checklist sorting. | ||
| + | * Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] | ||
| + | * Convert unsupported SSH proxy to SSH tunnel when importing site from PuTTY. [[bug>;2408]] | ||
| + | * FTP directory listing falls back to the other active/passive mode, consistently with file transfers. | ||
| + | ··* Consistently calling command to open window with specific directory //Explore//, instead of sometimes //Browse//. | ||
| + | * Consistently referring to file last modification timestamp column as //Date modified//. | ||
| + | * With INI file provided on command-line, using the same INI file when starting a new instance. | ||
| + | * Windows shell local file copy status window is centered on the main window. | ||
| + | * Made taskbar flashing configurable in GUI. [[bug>2411]] | ||
| + | * Control labels on transfer settings dialogs do not show keyboard accelerator cue, until ''Alt'' key is pressed. | ||
| + | ··* Not using drag images even with directory trees. [[bug>1274]] | ||
| + | * Allow configuring checksum commands. [[bug>2394]] | ||
| + | * Updated to JCL library 2.8.1. | ||
| + | * Updating jump list only when running with GUI. | ||
| + | * Made space on permissions box for longer translations. [[bug>2398]] | ||
| + | * Opening //Default Apps// //Settings// page directly to open it in the foreground and avoid flashing //Control Panel// window. | ||
| + | * Improving order in which Windows Narrator reads window controls. | ||
| + | * All edit boxes with history consistently do not auto complete and show 16 entries in the drop down. | ||
| + | * Removed obsolete //Preserve remote timestamp// session settings. | ||
| + | * Bug fix: Local file with invalid characters replaced could not be explored from the Synchronization checklist window. | ||
| + | * Bug fix: Files modified by local custom command are not always uploaded to the correct remote directory. [[bug>2370]] | ||
| + | * Bug fix: List of network drives in drive drop down and directory tree did not always match. | ||
| + | * Bug fix: Host key prompt did not have the default button. | ||
| + | * Bug fix: When the local path specified on Open directory/Location profile dialog is not existing, when browsing for a new path, the trailing part of the nonexisting path was appended to the new path. | ||
| + | * Bug fix: Trying to enter an invalid link in local panel fails silently. | ||
| + | * Bug fix: After FTP data connection fails to open further use of the session is broken. | ||
| + | · * Bug fix: Pasting cut files from the clipboard into a local panel copies them instead of moving them. [[bug>2400]] | ||
| + | · * Bug fix: Some edits did not save their value to history when submitting with ''Enter''. | ||
| + | * Bug fix: Too long edit history dropdown can overflow monitor bounds. [[bug>2432]] | ||
| + | * Bug fix: Message box texts and some control labels are not visible to screen readers. [[bug>2413]] | ||
| + | * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | ||
| - | ===== [[5.21.5]] 5.21.5 ((2022-10-06)) ===== | + | ===== [[6.5.9]] 6.5.9 (not released yet) ((2026-09-10)) ===== |
| - | * Translation completed: Brazilian Portuguese. | + | * Back-propagated fixes from 6.6.4 release: |
| - | * WebDAV/HTTP core upgraded to neon 0.32.4. | + | ···* Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] |
| - | · * XML parser upgraded to Expat 2.4.9. | + | |
| - | * Preventing opening tunneled sessions in PuTTY from Login dialog as it cannot work. [[bug>2116]] | + | |
| - | * Bug fix: Agent forwarding does not work. [[bug>2113]] | + | |
| - | ·* Bug fix: Stall when new folder is detected and the drive contains folders with numerical names. [[bug>2114]] | + | |
| - | * Bug fix: New version notification is not displaying. | + | |
| - | ===== [[5.21.4]] 5.21.4 ((2022-09-12)) ===== | + | ===== [[6.5.8]] 6.5.8 ((2026-09-10)) ===== |
| - | * This is Microsoft Store-only release with the following fix: | + | * This is Microsoft Store-only release that fixes packaging problem of 6.5.7. The actual binaries are still 6.5.7. |
| - | * The //Donate// command removed from the //Help// menu to comply with Store App policies. | + | * Bug fix: Cannot install from Microsoft Store because of invalid 'sr' language. [[bug>2460]] |
| - | ===== [[5.21.3]] 5.21.3 ((2022-09-06)) ===== | + | ===== [[6.5.7]] 6.5.7 ((2026-09-09)) ===== |
| - | * Translation updated: Ukrainian. | + | * Translations completed: Croatian, Finnish, Georgian, Italian and Serbian, and updated: Slovenian. |
| - | * Added new ''me-central-1'' AWS region. | + | * TLS/SSL core upgraded to OpenSSL 3.3.7. |
| - | * Bug fix: Site with a stored password protected by master password cannot be opened from command-line. [[bug>2101]] | + | * SSH private key tools (PuTTYgen and Pageant) upgraded to [[&;url(puttychanges)|PuTTY 0.85]]. SSH core upgraded to include some fixes. \\ It brings the following change: |
| - | * Bug fix: Opening session in new window fails. [[bug>2104]] | + | * Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>;pageant-deferred-decryption-uaf]] |
| + | * Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]] | ||
| + | * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] | ||
| + | ····* Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] | ||
| + | * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | ||
| + | * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | ||
| + | * Back-propagated fixes from 6.6.2 beta release: | ||
| + | ····* Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| + | * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | ||
| - | ===== [[5.21.2]] 5.21.2 ((2022-08-08)) ===== | + | ===== [[6.5.6]] 6.5.6 ((2026-03-25)) ===== |
| - | * Translation completed: Farsi. | + | * Translations completed: Macedonian, and updated: Lithuanian, and Russian. |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1q. | + | * TLS/SSL core upgraded to OpenSSL 3.3.6. |
| - | * Initial implementation of application logging. | + | * Back-propagated improvements from 6.6–6.6.1 beta release: |
| - | * Bug fix: "Hidden files showing toggled" message displays opposite status. | + | ···* New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries. |
| - | ·* Bug fix: Cannot authenticate to WebDAV server with username containing some special characters. [[bug>2095]] | + | ···* XML parser upgraded to Expat 2.7.5. |
| - | ·* Bug fix: Checkbox to set permissions recursively on Properties dialog is missing, when changing owner and group is not supported. [[bug>2097]] | + | * Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] |
| - | ·* Bug fix: .NET assembly type library cannot be used in WSH. [[bug>2098]] | + | ···* Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]] |
| - | ===== [[5.21.1]] 5.21.1 ((2022-06-24)) ===== | + | ===== [[6.5.5]] 6.5.5 ((2025-11-19)) ===== |
| - | * Translation completed: Polish. | + | |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1p. | + | |
| - | * Not offering to create a link to parent directory, when it happens to be selected, when starting to create a link. [[bug>2091]] | + | |
| - | * Bug fix: Extension options dialog layout broken on systems with multiple monitors with different text scaling. [[bug>2090]] | + | |
| - | * Bug fix: Failure when starting parallel FTP background transfers. [[bug>2093]] | + | |
| - | * Bug fix: Directory coloring rules on remote panel do not work. [[bug>2094]] | + | |
| - | ===== [[5.21]] 5.21 ((2022-06-15)) ===== | + | ··* Translation updated: Vietnamese. |
| + | · * Bug fix: Pasting files using local directory tree context menu pastes them to the current directory, instead of the selected one. | ||
| + | ··* Bug fix: Failure when opening site imported from PuTTY with unsupported SSH proxy. [[bug>2407]] | ||
| + | · * Bug fix: Incorrect hostname validation when connecting to S3 endpoint with certificate that does not cover root S3 hostname. [[bug>2409]] | ||
| - | ··* Bug fix: Hang when entering small directories with FTP protocol. [[bug>2087]] | + | ===== [[6.5.4]] 6.5.4 ((2025-10-16)) ===== |
| - | · * Bug fix: Lag when moving files from remote panel using drag&drop. [[bug>2088]] | + | |
| - | · * Bug fix: After certain operations, drive that was ever opened in local file panel cannot be safely removed temporarily. | + | |
| - | ===== [[5.20.4]] 5.20.4 RC ((2022-06-08)) ===== | + | ··* Translations updated: Belarusian and Georgian. |
| - | + | * TLS/SSL core upgraded to OpenSSL 3.3.5. | |
| - | ··* SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.77]]. It brings the following changes: | + | * XML parser upgraded to Expat 2.7.3. |
| - | * Pageant: Option ''%%--openssh-config%%'' to allow easy interoperation with Windows's ''ssh.exe''. [[pbug>win-pageant-openssh-interop]] | + | * Added new ''ap-southeast-6'' AWS region. |
| - | * Bug fix: PuTTYgen's mouse-based entropy collection now handles high-frequency mice without getting confused. [[pbug>win-puttygen-entropy-rate-limit]] | + | * Bug fix: When restored after operation completed while minimized the window is disabled. [[bug>2393]] |
| - | ····* Bug fix: Pageant can now handle large numbers of concurrent connections without hanging or crashing. [[pbug>win-pageant-max-connections-2]] | + | * Bug fix: Command ''md5sums'' is incorrectly used to calculate MD5 checksum instead of ''md5sum''. [[bug>2392]] |
| - | * Bug fix: If Pageant is started multiple times simultaneously, the instances should reliably agree on one of them to be the persistent server. [[pbug>win-pageant-concurrent-startup]] | + | * Bug fix: Incomplete FTP upload when the source stream/stdin reads less than requested. [[bug>2395]] |
| - | * Improved error message when FTP server returns malformed response. [[bug>2077]] | + | * Bug fix: ''Shift''-clicking //OK// button on Synchronization checklist window when synchronization in the background was not possible still closed the window. |
| - | * Translations updated: German and Slovak. | + | * Bug fix: Failure after reloading file panel when number of files decreases. [[bug>2402]] |
| - | * Not listing remote directory when downloading file using FTP protocol with overwrite confirmations off. [[bug>2084]] | + | * Bug fix: Failure or silently missing headers when when S3 request headers were too long. |
| - | * Workaround for calls to system API failing when used first time against some network shares (Samba) with paths over the legacy Windows limit. [[bug>2082]] | + | |
| - | * Workaround for an apparent bug in Windows 11 that prevents WinSCP from stopping Windows going to the sleep mode during transfers. [[bug>2083]] | + | |
| - | * Workaround for specific encoding of commas in filenames (and particularly directory names) by OneDrive WebDAV interface. [[bug>2085]] | + | |
| - | * Bug fix: When transferring a growing file, after its original size is reached, the ''Session.FileTransferProgress'' event starts being triggered continuously. [[bug>2078]] | + | |
| - | * Bug fix: Restored pre-5.20.3 behaviour with MVS systems. [[bug>2086]] | + | |
| - | + | ||
| - | ===== [[5.20.3]] 5.20.3 RC ((2022-05-17)) ===== | + | |
| - | + | ||
| - | * Translations completed: Catalan, Czech, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Portuguese, Romanian, Russian, Simplified Chinese, Slovak, Spanish, Swedish, Traditional Chinese, Turkish and Ukrainian; and updated: Vietnamese | + | |
| - | * Streaming support in .NET assembly and scripting for FTP protocol. [[bug>1945]] | + | |
| - | * Improved compatibility with MVS systems. [[bug>2069]] | + | |
| - | * New .NET assembly method ''Session.TryGetFileInfo''. Thanks to @RachamimYaakobov. [[bug>2068]] | + | |
| - | * Expanding environment variables in Open Directory/Location Profiles dialogs in local paths. [[bug>909]] | + | |
| - | * Optimized loading of large directories. [[bug>1631]] | + | |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1o. | + | |
| - | * Installer upgraded to Inno Setup 6.2.1. | + | |
| - | * When group (//Site/Shared//) to which new location profile is added is changed, switching the page to the target group. | + | |
| - | * Preventing occasional exhaustion of resources while testing WinSCP executable version on repeated use of .NET assembly. [[bug>2075]] | + | |
| - | * Bug fix: Capabilities of S3 sessions were not shown. | + | |
| - | * Bug fix: Misplaced warning about unused scripting parameters when ''/rawsettings'' command-line switch is used. [[bug>2070]] | + | |
| - | * Bug fix: File panels malfunction when files are dropped from other application to it. [[bug>2071]] | + | |
| - | * Bug fix: When logging transfer statistics, recent transfer speed was logged instead of average speed of whole transfer. [[bug>2073]] | + | |
| - | * Bug fix: z/OS PDS members without ISPF statistics are omitted in directory listing. [[bug>2076]] | + | |
| - | + | ||
| - | ===== [[5.20.2]] 5.20.2 beta ((2022-04-06)) ===== | + | |
| - | + | ||
| - | * Translations updated: German and Vietnamese. | + | |
| - | * SSH core upgraded to pre-release build of [[https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/|PuTTY 0.77]]. (*TODO replace with &;url(puttychanges) once 0.77 is released*) \\ It brings the following changes: | + | |
| - | * Support for HTTP Digest authentication for proxies. [[pbug>http-digestauth]] | + | |
| - | * Interactive username/password prompts for proxy authentication. [[bug>;468]] [[pbug>proxy-password-prompt]] | + | |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1n. | + | |
| - | * WebDAV core upgraded to neon 0.32.2. | + | |
| - | * XML parser upgraded to Expat 2.4.8. | + | |
| - | * Allowed uploading edited files over encrypted session. [[bug>;1989]] | + | |
| - | * Building .NET assembly in Visual Studio 2019. | + | |
| - | * Optionally not flashing taskbar button when WinSCP needs attention while in the background. [[bug>2067]] | + | |
| - | * In .NET assembly or scripting with ";nul" configuration, when WinSCP registry key does not exist, do not write statistics to INI file. [[bug>2066]] | + | |
| - | * New less prominent icon for //Quit// command. | + | |
| - | * Bug fix: Failure when attempting to switch to an unconnected sessions using keyboard shortcuts while another session is being connected. | + | |
| - | * Bug fix: Removing all custom commands resets the default ones when INI file is used. [[bug>2059]] | + | |
| - | * Bug fix: Failure when changing remote folder using directory tree while previous directory is still loading. [[bug>2060]] | + | |
| - | * Bug fix: Drive that was ever opened in local file panel cannot be safely removed until WinSCP is closed. [[bug>2061]] | + | |
| - | * Bug fix: //"Optimize connection buffer size"// checkbox was disabled for S3 although it has effect for the protocol. [[bug>2058]] | + | |
| - | * Bug fix: Custom commands menu fail to open. [[bug>2062]] | + | |
| - | * Bug fix: Local drive menu does not reflect some changes. [[bug>2063]] | + | |
| - | * Bug fix: Using drive menu to change to an invalid drive fails silently. | + | |
| - | * Bug fix: Scripting command ''ls'' in FTP session displays timestamps without year even if the server (notably IIS) provided the year, if it did not provide seconds. [[bug>2065]] | + | |
| [[history_old|Older versions]] | [[history_old|Older versions]] | ||
| ~~NOTOC~~ | ~~NOTOC~~ | ||
| ~~ARCHIVE=history_old~~ | ~~ARCHIVE=history_old~~ | ||