Differences
This shows you the differences between the selected revisions of the page.
| history 2025-01-21 | history 2026-09-11 (current) | ||
| Line 3: | Line 3: | ||
| This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. | This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. | ||
| - | ===== [[6.4.2]] 6.4.2 (not released yet) ((2025-01-21)) ===== | + | ===== [[6.8]] 6.8 (not released yet) ((2026-08-22)) ===== |
| - | * Synchronization actions can be pushed to background queue. [[bug>2318]] | + | * Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]] |
| - | * Ongoing local delete operation can be moved to a background queue (only on a remote tab, as local tabs do not have a queue). | + | |
| - | * Switching to //Segoe UI// font with slightly larger size (9) as recommended for Windows Vista and newer. All windows are now slightly larger accordingly and their layout was unified. | + | |
| - | * SSH core upgraded to pre-release snapshot of PuTTY 0.83 (2025-01-03.1e45199). It brings the following change: | + | |
| - | * Implement the post-quantum ML-KEM key encapsulation method. [[pbug>ml-kem]] | + | |
| - | * SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.82. | + | |
| - | * Installer upgraded to Inno Setup 6.4.0. | + | |
| - | * Thumbnails for WebP images. [[bug>2336]] | + | |
| - | * WebDAV/HTTP core upgraded to neon 0.34.0. | + | |
| - | * Better error message when trying to open an inaccessible local drive (such as locked BitLocker drive). | + | |
| - | * ''%%https://%%'' URL to S3 API at ''oraclecloud.com'' is interpreted as S3 protocol, instead of WebDAV. | + | |
| - | * Added new ''ap-southeast-7'' and ''mx-central-1'' AWS regions. | + | |
| - | * Bug fix: Hang when trying to open an inaccessible drive from drive drop down menu. | + | |
| - | * Bug fix: On Windows 11, //Windows 10// version was logged. | + | |
| - | * Bug fix: Hang when opening path with duplicated backslash. [[bug>2330]] | + | |
| - | * Bug fix: When moving an ongoing delete operation to background queue, it might attempt to delete the current file again, failing the operation. | + | |
| - | * Bug fix: After system theme change panel context menus stop working. [[bug>2331]] | + | |
| - | * Bug fix: It was possible to start synchronization in new window despite incompatible //Selected files only// option selected by ''Shift''-clicking the //OK// button. [[bug>1870]] | + | |
| - | * Bug fix: Failure when opening two SSH sessions at the same time. [[bug>2334]] | + | |
| - | * Bug fix: Tunneled session password is not remembered. [[bug>2335]] | + | |
| - | * Bug fix: Failure when trying to use a file not containing a private key as a client certificate file with WebDAV. | + | |
| - | * Bug fix: ''Session.DebugLogPath'' cannot be set in single-file bundles. [[bug>2338]] | + | |
| - | * Bug fix: Stray ''set'' command in source code package build script. [[bug>2340]] | + | |
| - | * Bug fix: Duplicate shortcut key in local //Open directory// window for shared bookmarks. [[bug>710]] | + | |
| - | * Bug fix: Source code package build script exits parent ''cmd'' console on error. [[bug>2341]] | + | |
| - | ===== [[6.4.1]] 6.4.1 beta ((2024-11-21)) ===== | + | ===== [[6.6.4]] 6.6.4 (not released yet) ((2026-09-11)) ===== |
| + | |||
| + | * Increased length limit of proxy host name for updates preferences. [[bug>2456]] | ||
| + | * Optionally default to keeping Login dialog open after opening session in PuTTY. [[bug>2459]] | ||
| + | * Improving placement of widows, particularly those opened, while the main window is not visible (notably during command-line operations). | ||
| + | * Bug fix: When selecting a site to perform a command-line operation with, it was possible to select a workspace or a folder, resulting in unexpected behaviour or failure. [[bug>2457]] | ||
| + | * Bug fix: After opening session in PuTTY, WinSCP process is never closed. [[bug>2458]] | ||
| + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] | ||
| - | ··* IDE upgraded to Embarcadero C++Builder 11. [[bug>618]] | + | ===== [[6.6.3]] 6.6.3 RC ((2026-09-03)) ===== |
| - | · * Change: Dropped support for Windows XP and Windows Vista. Minimal supported version is Windows 7. | + | |
| - | ··* Improvements to Synchronization checklist window: | + | |
| - | ···* Command to find //Mo | + | |
| - | ····* //Move// command can be used with a set of orphaned files and new folder in source directory to create that directory on the target side and move the orphaned files there. | + | ··* Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish. |
| - | ···* Added //Calculate All// command. | + | ·* Some parts of GUI (panel headers, scrollbars, buttons, checkboxes) show dark in dark theme even when system-wide app theme is light. |
| - | ···* Added a keyboard shortcut to //Calculate// command. | + | ·* SSH core and private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. \\ It brings the following change: |
| - | ····* //Move// command can be used with long local paths. | + | ···* Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>pageant-deferred-decryption-uaf]] |
| - | ·* Compatibility with new OneDrive WebDAV interface. [[bug>2321]] | + | ···* Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]] |
| - | ·* Optimized loading of file panels when switching between tabs with different filters. [[bug>2315]] | + | ···* Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] |
| - | ·* Optimized browsing deep local directory trees. | + | ····* Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] |
| - | * XML parser upgraded to Expat 2.6.3. | + | ··* Bundled SSH private key tools (PuTTYgen and Pageant) are 64-bit. |
| - | * Including PuTTY and OpenSSL versions in ''/info''. | + | * On Windows 11, using system dark tab theme, that uses different shades for active and disabled/disconnected tabs. [[bug>2452]] |
| - | * Added new ''ap-southeast-5'' AWS region. | + | * TLS/SSL core upgraded to OpenSSL 3.5.8. |
| - | * Gracefully handling invalid Unicode characters FFFF and FFFE in filenames in .NET assembly. [[bug>2325]] | + | * XML parser upgraded to Expat 2.8.4. |
| - | * Bug fix: Failure when system theme change is broadcasted in short order. | + | * Source code package build script supports 64-bit target. |
| - | * Bug fix: Browsing long paths was broken. | + | * Installer upgraded to Inno Setup 6.7.3. |
| - | * Bug fix: After leaving subdirectory, it is not scrolled into view in the parent directory. | + | * 64-bit build is identified in version information. |
| - | * Bug fix: Long local panel location was lost after some file operations. | + | * Resolving version of pwsh installed with MSIX. |
| - | * Bug fix: Editor font was scaled twice on monitors with different DPI than the primary one. | + | * Thirdparty information from the About dialog can be copied to the clipboard even when the browser control malfunctions. |
| - | * Bug fix: Option to switch to Location profiles was shown on Open directory dialog even when not possible, while session was disconnected. | + | * Bug fix: No error is shown when connection fails. |
| - | * Bug fix: After delete operation is moved to background, some operations (notably editing) do not work anymore. [[bug>2319]] | + | * Bug fix: ''x-name'' URL parameter was incorrectly decoded. |
| - | * Bug fix: ''Shift+Ctrl+P'' keyboard shortcut on Login dialog to open site in PuTTY without closing the dialog does not work. [[bug>2320]] | + | * Bug fix: Incorrect number validation. |
| - | * Bug fix: Failure when opening TLS connection with invalid OpenSSL configuration file. [[bug>2327]] | + | * Bug fix: Some controls (notably list view headers) do not correctly apply dark mode in 64-bit build. [[bug>2453]] |
| - | * Bug fix: Rare incorrect conversion of line endings when downloading. [[bug>2324]] | + | * Bug fix: 64-bit build did not identify its system to be 64-bit, what among other prevented it from identifying 64-bit COM registrations. |
| - | * Bug fix: Hang when creating temporary files with temporary folder on locked drive. [[bug>2328]] | + | * Bug fix: Some strings use incorrect translation in 64-bit version. [[bug>2455]] |
| - | ===== [[6.4]] 6.4 beta ((2024-09-19)) ===== | + | ===== [[6.6.2]] 6.6.2 RC ((2026-06-17)) ===== |
| - | * Thumbnail view in file panels. [[bug>912]] | + | * Experimental 64-bit version of WinSCP. [[bug>618]] |
| - | * Three selectable sizes of toolbar icons, showing slightly larger size by default. [[bug>2147]] | + | * Optionally not showing error message when connection is lost while idle. [[bug>2360]] |
| - | * Optimized working with large local directories: [[bug>2264]] | + | * SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.84]]. \\ It brings the following changes: |
| - | ····* Loading large directory trees on the background. | + | * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] |
| - | ····* Hidden directory trees are loaded only in the background. | + | ···* Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] |
| - | ···* Optimizing directory loading by checking existence of subfolders on the background. | + | * Bug fix: spurious //"Network error: Socket is not connected"// when authenticating to some HTTP proxies. [[pbug>http-proxy-auth-wsaenotconn]] |
| - | * Optimized reading directories for file panel. | + | * TLS/SSL core upgraded to OpenSSL 3.5.7. |
| - | * Optimized browsing within directory tree with lots of subfolders. | + | ··* XML parser upgraded to Expat 2.8.1. |
| - | * Dark theme for session tabs. [[bug>1806]] | + | ·* Restored faster C TLS/SSL AES implementation. |
| - | ·* Improvements to AWS/S3 authentication and configuration handling: | + | * Configurable warning when opening large file in an internal editor. [[bug>2437]] |
| - | * Allowed assuming IAM role. [[bug>2249]] | + | * Informing that when preserving directory timestamps is enabled, using multiple connections for transfer is not possible. [[bug>2439]] |
| - | * Credential profiles in ''.aws/config'' file are also recognized. | + | ·* Warning when pasting a session URL with unsafe settings. |
| - | ····* Preferring configuration file defined using an environment variable over the default one. | + | ·* When opening session in PuTTY to a host for which WinSCP has multiple host keys cached, using the last key or the key that PuTTY has cached. [[bug>2440]] |
| - | ···* Only profiles that contain both ''aws_access_key_id'' and ''aws_secret_access_key'' are listed on the Login dialog | + | * Always (re)registering drag&drop shell extension during installation, even when the extension is not replaced. |
| - | ···* Bug fix: The ''.aws/credentials'' file path was resolved using ''AWS_CONFIG_FILE'' environment variable instead of correct ''AWS_SHARED_CREDENTIALS_FILE''. | + | * Allowed Console interface tool to have ''.exe'' extension to avoid false positive detections by some antiviruses. [[bug>2434]] |
| - | * Incremental search improvements: | + | * Using //"username"// and //"hostname"// as one word. |
| - | * Search panel pops up on ''Ctrl+F'' to make the function easier to find. [[bug>2281]] | + | * Reading all system settings from 64-bit registry. |
| - | ···* Layout of search panel on Login dialog improved. | + | * Allow assigning ''null'' to ''Session.SessionLogPath''. [[bug>2438]] |
| - | ···* Search options context menu added to the search panel on Login dialog. | + | * Avoiding using ''SSH_FXF_EXCL'' together with ''SSH_FXF_TRUNC'' SFTP file opening flags. [[bug>2444]] |
| - | * Remembering panel scroll position when switching tabs or refreshing. [[bug>1057]] | + | * Optimized file system monitoring when looking for dummy directory during drag&drop downloads. [[bug>2445]] |
| - | * Search for Preferences options. | + | * Change: Not allowing WebDAV redirects to other hosts by default. [[bug>2447]] |
| - | ··* TLS/SSL core upgraded to OpenSSL 3.3.2. | + | * Change: Not allowing WebDAV redirects to an unencrypted URL by default. [[bug>2448]] |
| - | * Site import from an INI file. [[bug>2290]] | + | * Updated to JCL library 2.9 commit c669fd12. |
| - | * Preserve timestamp when duplicating remote file using SFTP extension ''copy-data'' (OpenSSH). [[bug>2307]] | + | * Bug fix: Failure when trying to connect via HTTP proxy to FTP host with excessively long login details. [[bug>2435]] |
| - | * Changing caret position on the first click on an inactive editor window. [[bug>2304]] | + | * Bug fix: Buffer overflow in Console interface tool. [[bug>2436]] |
| - | * Change: Limiting SFTP version to 3 with non-well-known SFTP servers as a workaround for interoperability issues. [[bug>2247]] | + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] |
| - | * Installer upgraded to Inno Setup 6.3.1. | + | * Bug fix: Message boxes from secondary windows (like the internal editor) caused application to move to the background when when the main window was minimized. [[bug>2443]] |
| - | ··* In icons view, files are rearranged automatically when the panel is resized. | + | * Bug fix: Heap over-read via crafted encrypted filename. [[bug>2449]] |
| - | * Explorer interface view style toolbar button now shows icon for the current style, instead of the next style. | + | * Bug fix: Slashes in filenames can cause path traversal when invalid filename characters replacement is disabled. [[bug>2450]] |
| - | * Fallback to nonresumable transfer when temporary target file cannot be created. [[bug>2277]] | + | |
| - | ··* Optionally disabled smooth scrolling in an internal editor. [[bug>;128]] | + | |
| - | * Prevented redrawing scrollbars when loading remote directory tree. [[bug>2313]] | + | |
| - | * Open window maximized when closed while minimized from maximized state. [[bug>2305]] | + | |
| - | * Compatibility with FTP servers that return an empty path in root. [[bug>2300]] | + | |
| - | * Ignoring WebDAV ''PROPFIND'' result entries that do not belong to the requested directory. [[bug>2312]] | + | |
| - | * Optionally following ''NoViewOnDrive'' policy. [[bug>2310]] | + | |
| - | * Recognizing matching Azure certificate files. [[bug>2311]] | + | |
| - | * Logging can be enabled for installer subtasks. | + | |
| - | * Limited SFTP upload queue length to avoid networking congestion. | + | |
| - | · * Updated to JCL library 2.8 commit 6380ce72. | + | |
| - | * //Columns// menu in Explorer interface is enabled only in //Details// view. | + | |
| - | · * With ''/rawconfig'', session is never opened in an existing instance. | + | |
| - | * Not including useless OpenSSL states in error reporting. | + | |
| - | * Bug fix: Possibility that files in root folder were incorrectly used. | + | |
| - | * Bug fix: Failure when system theme is changed at the same time directory change is detected. [[bug>2286]] | + | |
| - | * Bug fix: Tree indentation does not scale correctly. [[bug>2288]] | + | |
| - | * Bug fix: It was possible to start renaming a site by double-clicking its node while editing the site. | + | |
| - | * Bug fix: Cannot download from WebDAV server when the request is redirected to the same path on another server. [[bug>2293]] | + | |
| - | * Bug fix: Overlay images were not drawn in icons view when //Name// column in //Details// view was too narrow. | + | |
| - | * Bug fix: Some Unicode texts, notably custom command names, were saved incorrectly in an INI file. [[bug>2301]] | + | |
| - | * Bug fix: Caption of permissions group labels disappears when hovered over on Windows 11. | + | |
| - | ===== [[6.3.7]] 6.3.7 (not released yet) ((2025-01-20)) ===== | + | ===== [[6.6.1]] 6.6.1 beta ((2026-04-01)) ===== |
| - | * Translation completed: Belarusian. | + | * Support for OpenSSH ssh-agent. [[bug>1682]] |
| - | * Back-propagated fixes and improvements from upcoming 6.4.2 beta release: | + | * Optionally connecting all workspace/folder sessions immediately. [[bug>1026]] |
| - | ···* Added new ''ap-southeast-7'' and ''mx-central-1'' AWS regions. | + | * Preserving panel scroll position after rename. [[bug>2425]] |
| - | ···* Bug fix: Failure when opening two SSH sessions at the same time. [[bug>2334]] | + | ·* ''Ctrl+C'' works in list views on 'Server and protocol information' dialog. |
| - | ···* Bug fix: Tunneled session password is not remembered. [[bug>2335]] | + | ··* Preventing moving or copying a file or folder over ancestor folder with the same name. [[bug>2427]] |
| - | ···* Bug fix: Stray ''set'' command in source code package build script. [[bug>2340]] | + | * WebDAV/HTTP core upgraded to neon 0.37.1. |
| - | ···* Bug fix: Source code package build script exits parent ''cmd'' console on error. [[bug>2341]] | + | * XML parser upgraded to Expat 2.7.5. |
| + | * Bug fix: Some menus were not working on displays to the left or above the primary display. [[bug>;2423]] | ||
| + | * Bug fix: Mouse wheel downwards scrolling did not work on toolbar drop down lists. | ||
| + | * Bug fix: Once any control of permissions popup box was focused the popup no longer closed when user clicked outside of it. | ||
| + | ··* Bug fix: Failure when closing Transfer settings dialog with //X// button while a permissions popup box control is focused. [[bug>2420]] | ||
| + | ·* Bug fix: Failure when switching to a session that is being reconnected. | ||
| + | * Bug fix: Failure when the first bit of an SFTP response is set. [[bug>2422]] | ||
| + | ·* Bug fix: Copying to clipboard with ''Ctrl+C'' from 'Server and protocol information' was broken. | ||
| + | * Bug fix: Protocol additional information scrolling was broken. | ||
| + | * Bug fix: Master password dialog was missing //Help// button. | ||
| + | * Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]] | ||
| + | * Bug fix: Wrapped settings values from Raw Site Settings dialog were not preserved. | ||
| + | * Bug fix: Some files modified by local custom command in SCP session fail to upload back. [[bug>2428]] | ||
| + | ·* Bug fix: Whole //Key exchange// page was incorrectly hidden when //";Handles SSH key re-exchange badly";// bug was enabled. | ||
| + | ··* Bug fix: Some message boxes leak GDI handle. [[bug>;2430]] | ||
| + | * Bug fix: Login dialog leaks GDI handles. [[bug>2431]] | ||
| - | ===== [[6.3.6]] 6.3.6 ((2024-11-25)) ===== | + | ===== [[6.6]] 6.6 beta ((2026-02-02)) ===== |
| - | * Back-propagated improvements and fixes from 6.4.1 beta and 6.4.2 beta releases: | + | * Synchronizing two local directories. [[bug>2020]] |
| - | * Compatibility with new OneDrive WebDAV interface. [[bug>2321]] | + | * Compiler upgraded to Clang/bcc32c. [[bug>618]] |
| - | * XML parser upgraded to Expat 2.6.3. | + | * Inactive sessions can be automatically reconnected. [[bug>2232]] |
| - | ···* Added new ''ap-southeast-5'' AWS region. | + | * Added dark theme support to: [[bug>1696]] |
| - | * Bug fix: After delete operation is moved to background, some operations (notably editing) do not work anymore. [[bug>2319]] | + | * Login dialog. [[bug>2345]] |
| - | ···* Bug fix: ''Shift+Ctrl+P'' keyboard shortcut on Login dialog to open site in PuTTY without closing the dialog does not work. [[bug>2320]] | + | * Transfer Options dialog. |
| - | ···* Bug fix: Hang when trying to open an inaccessible drive from drive drop down menu. | + | * Message boxes. |
| - | * Translations completed: Danish, and updated: Belarusian. | + | * Queue column headers. [[bug>2356]] |
| + | * Progress window. | ||
| + | * Authentication Progress window. [[bug>2358]] | ||
| + | * Bug fix: Scrollbar colors did not always reflect the color theme | ||
| + | * Using modern directory selection dialog that scales correctly and allows creating new directory. [[bug>2373]] [[bug>2389]] | ||
| + | * Optimized GUI when working with large subdirectory selection. [[bug>2396]] | ||
| + | * Change: Default to UTF-8 encoding in internal editor. [[bug>2397]] | ||
| + | * New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries. | ||
| + | * TLS/SSL core upgraded to OpenSSL 3.5.5. | ||
| + | * WebDAV/HTTP core upgraded to neon 0.36.0. | ||
| + | ··* XML parser upgraded to Expat 2.7.4. | ||
| + | * Installer upgraded to Inno Setup 6.7.0 with dark mode support enabled. | ||
| + | ·* Increased WinSCP memory limit to 4 GB. [[bug>;2412]] | ||
| + | * Defined and implemented interface for the .NET library. By @mjkent. [[bug>856]] | ||
| + | * Optimized TLS/SSL AES implementation. | ||
| + | * Restoring ability to restart Explorer to allow upgrade of drag&;drop shell extension, when installing for current user, as after-restart replacement is not possible without Administrator privileges. [[bug>;2381]] | ||
| + | * MSI toolset updated to WiX 5. | ||
| + | * Commands to copy paths to the clipboard on the Synchronization checklist window. | ||
| + | * Cryptography optimization. | ||
| + | * Support long AWS/S3 session tokens. [[bug>2403]] | ||
| + | * Prevent hang when new device is attached or removed while some mapped network drive is not available. [[bug>;2382]] | ||
| + | * Copy and paste improvements: | ||
| + | * Consistently renaming local files dropped or pasted back to their source directory to avoid collisions. | ||
| + | * Bug fix: When copying local files to clipboard from system context menu, "cut" state of previously cut files was not cleared. | ||
| + | * Not redundantly verifying WebDAV or S3 certificate in Windows Certificate store if it is already marked as trusted in session settings. [[bug>2404]] | ||
| + | * Provide SNI when opening FTP data connection. [[bug>2410]] | ||
| + | * Optimized synchronization checklist sorting. | ||
| + | * Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] | ||
| + | * Convert unsupported SSH proxy to SSH tunnel when importing site from PuTTY. [[bug>2408]] | ||
| + | * FTP directory listing falls back to the other active/passive mode, consistently with file transfers. | ||
| + | · * Consistently calling command to open window with specific directory //Explore//, instead of sometimes //Browse//. | ||
| + | * Consistently referring to file last modification timestamp column as //Date modified//. | ||
| + | * With INI file provided on command-line, using the same INI file when starting a new instance. | ||
| + | * Windows shell local file copy status window is centered on the main window. | ||
| + | * Made taskbar flashing configurable in GUI. [[bug>2411]] | ||
| + | ·* Control labels on transfer settings dialogs do not show keyboard accelerator cue, until ''Alt'' key is pressed. | ||
| + | * Not using drag images even with directory trees. [[bug>1274]] | ||
| + | * Allow configuring checksum commands. [[bug>;2394]] | ||
| + | * Updated to JCL library 2.8.1. | ||
| + | * Updating jump list only when running with GUI. | ||
| + | * Made space on permissions box for longer translations. [[bug>2398]] | ||
| + | * Opening //Default Apps// //Settings// page directly to open it in the foreground and avoid flashing //Control Panel// window. | ||
| + | * Improving order in which Windows Narrator reads window controls. | ||
| + | * All edit boxes with history consistently do not auto complete and show 16 entries in the drop down. | ||
| + | * Removed obsolete //Preserve remote timestamp// session settings. | ||
| + | * Bug fix: Local file with invalid characters replaced could not be explored from the Synchronization checklist window. | ||
| + | * Bug fix: Files modified by local custom command are not always uploaded to the correct remote directory. [[bug>2370]] | ||
| + | ·* Bug fix: List of network drives in drive drop down and directory tree did not always match. | ||
| + | * Bug fix: Host key prompt did not have the default button. | ||
| + | * Bug fix: When the local path specified on Open directory/Location profile dialog is not existing, when browsing for a new path, the trailing part of the nonexisting path was appended to the new path. | ||
| + | * Bug fix: Trying to enter an invalid link in local panel fails silently. | ||
| + | * Bug fix: After FTP data connection fails to open further use of the session is broken. | ||
| + | * Bug fix: Pasting cut files from the clipboard into a local panel copies them instead of moving them. [[bug>2400]] | ||
| + | * Bug fix: Some edits did not save their value to history when submitting with ''Enter''. | ||
| + | * Bug fix: Too long edit history dropdown can overflow monitor bounds. [[bug>2432]] | ||
| + | * Bug fix: Message box texts and some control labels are not visible to screen readers. [[bug>2413]] | ||
| + | * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | ||
| - | ===== [[6.3.5]] 6.3.5 ((2024-09-10)) ===== | + | ===== [[6.5.9]] 6.5.9 (not released yet) ((2026-09-10)) ===== |
| - | * TLS/SSL core upgraded to OpenSSL 3.2.3. | + | * Back-propagated fixes from 6.6.4 release: |
| - | * XML parser upgraded to Expat 2.6.3. | + | ···* Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] |
| - | * Better error message when server is using incompatible TLS protocol version. [[bug>2299]] | + | |
| - | * Translations updated: Belarusian and Finnish. | + | |
| - | ·* Bug fix: Incorrect //"Credentials were not specified"// error when authentication fails due to incorrect password with FTP protocol. [[bug>2302]] | + | |
| - | * Bug fix: Stall when switching from //S3// to other protocol on Login dialog on some networks. [[bug>2309]] | + | |
| - | ===== [[6.3.4]] 6.3.4 ((2024-06-17)) ===== | + | ===== [[6.5.8]] 6.5.8 ((2026-09-10)) ===== |
| - | * TLS/SSL core upgraded to OpenSSL 3.2.2. | + | * This is Microsoft Store-only release that fixes packaging problem of 6.5.7. The actual binaries are still 6.5.7. |
| - | * Translations updated: Belarusian, Danish and Russian. | + | ···* Bug fix: Cannot install from Microsoft Store because of invalid 'sr' language. [[bug>2460]] |
| - | * Standalone executable installer can run over corrupted MSI installation. [[bug>2294]] | + | |
| - | * Support for up-to 16KB WebDAV cookies. [[bug>2289]] | + | |
| - | ·* Bug fix: Failure when trying to automate file synchronization by checksum on an SFTP server that does not support it natively. [[bug>;2291]] | + | |
| - | * Bug fix: Remote panel does not refresh after //";ZIP and Upload"//. [[bug>2292]] | + | |
| - | ===== [[6.3.3]] 6.3.3 ((2024-04-16)) ===== | + | ===== [[6.5.7]] 6.5.7 ((2026-09-09)) ===== |
| - | * SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.81]]. \\ It brings the following change: | + | * Translations completed: Croatian, Finnish, Georgian, Italian and Serbian, and updated: Slovenian. |
| - | * Security fix for CVE-2024-31497: NIST P521/ecdsa-sha2-nistp521 signatures are no longer generated with biased values of //k//. The previous bias compromises private keys. [[bug>2285]] [[pbug>vuln-p521-bias]] | + | * TLS/SSL core upgraded to OpenSSL 3.3.7. |
| - | ·* Translation updated: Belarusian. | + | * SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. SSH core upgraded to include some fixes. \\ It brings the following change: |
| - | * XML parser upgraded to Expat 2.6.2. | + | * Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>pageant-deferred-decryption-uaf]] |
| - | ·* Support for TortoiseMerge in //Compare Files// extension. [[bug>2279]] | + | * Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]] |
| - | ·* Bug fix: File panel does not have focus after Login in Explorer interface. [[bug>2276]] | + | * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] |
| - | * Bug fix: Failure when closing the last remote tab. [[bug>2283]] | + | ···* Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] |
| - | * Bug fix: Copy and paste to another application in Store installation sometimes does not work. [[bug>2284]] | + | ···* Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] |
| + | ···* Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | ||
| + | * Back-propagated fixes from 6.6.2 beta release: | ||
| + | ····* Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| + | * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | ||
| - | ===== [[6.3.2]] 6.3.2 ((2024-03-12)) ===== | + | ===== [[6.5.6]] 6.5.6 ((2026-03-25)) ===== |
| - | * Translation updated: Belarusian. | + | * Translations completed: Macedonian, and updated: Lithuanian, and Russian. |
| - | * XML parser upgraded to Expat 2.6.1. | + | * TLS/SSL core upgraded to OpenSSL 3.3.6. |
| - | * Optimized startup when right panel local directory tree is not visible. | + | * Back-propagated improvements from 6.6–6.6.1 beta release: |
| - | * Workaround for SFTP servers (Cisco) which omit message field from status response. [[bug>2272]] | + | ···* New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries. |
| - | ·* Bug fix: Password pipe cannot be used to open a session in an existing instance. [[bug>2265]] | + | ···* XML parser upgraded to Expat 2.7.5. |
| - | ·* Bug fix: Hang when canceling connection while reading remote directory. [[bug>2266]] | + | ···* Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] |
| - | ·* Bug fix: Failure when canceling FTP connection while reading remote directory. [[bug>2267]] | + | ···* Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]] |
| - | ·* Bug fix: Cannot start on Windows XP. [[bug>2268]] | + | |
| - | * Bug fix: Installation hangs when adding installation path to search path when executed in session 0. [[bug>;2270]] | + | |
| - | * Bug fix: Misplaced stored site use warning in scripting when session name is specified. [[bug>2271]] | + | |
| - | * Bug fix: Correcting neon version in About box and logs. | + | |
| - | ===== [[6.3.1]] 6.3.1 ((2024-02-21)) ===== | + | ===== [[6.5.5]] 6.5.5 ((2025-11-19)) ===== |
| - | * Translation completed: Norwegian. | + | |
| - | * Bug fix: Badly encoded SFTP packet when renaming a file using SFTP version 5 and newer. [[bug>2259]] | + | |
| - | * Bug fix: Failure when trying to synchronize files by checksum on server that does not support it. [[bug>2260]] | + | |
| - | * Bug fix: Random hang/failure when closing FTP TLS 1.3 connection. [[bug>2261]] | + | |
| - | * Bug fix: Cannot use IPv6 literal as hostname on Login dialog. [[bug>2263]] | + | |
| - | ===== [[6.3]] 6.3 ((2024-02-14)) ===== | + | ··* Translation updated: Vietnamese. |
| + | · * Bug fix: Pasting files using local directory tree context menu pastes them to the current directory, instead of the selected one. | ||
| + | ··* Bug fix: Failure when opening site imported from PuTTY with unsupported SSH proxy. [[bug>2407]] | ||
| + | · * Bug fix: Incorrect hostname validation when connecting to S3 endpoint with certificate that does not cover root S3 hostname. [[bug>2409]] | ||
| - | ··* XML parser upgraded to Expat 2.6.0. | + | ===== [[6.5.4]] 6.5.4 ((2025-10-16)) ===== |
| - | ··* Bug fix: Hang when prompt pops up while SFTP session is being reconnected. [[bug>2258]] | + | |
| - | ===== [[6.2.4]] 6.2.4 RC ((2024-02-03)) ===== | + | ··* Translations updated: Belarusian and Georgian. |
| - | + | * TLS/SSL core upgraded to OpenSSL 3.3.5. | |
| - | ··* Translations completed: Farsi, French, Japanese, Spanish and Traditional Chinese. | + | * XML parser upgraded to Expat 2.7.3. |
| - | * TLS/SSL core upgraded to OpenSSL 3.2.1. | + | * Added new ''ap-southeast-6'' AWS region. |
| - | * WebDAV/HTTP core upgraded to neon 0.33.0. | + | * Bug fix: When restored after operation completed while minimized the window is disabled. [[bug>2393]] |
| - | * Bug fix: Failure when trying to upload file using double-click over disconnected session. [[bug>2254]] | + | * Bug fix: Command ''md5sums'' is incorrectly used to calculate MD5 checksum instead of ''md5sum''. [[bug>2392]] |
| - | * Bug fix: Failure after long frequent use of session tabs. [[bug>2255]] | + | * Bug fix: Incomplete FTP upload when the source stream/stdin reads less than requested. [[bug>2395]] |
| - | * Bug fix: //New tab// icon is drawn incorrectly on Explorer interface with //Show selective text labels// turned off. [[bug>2257]] | + | * Bug fix: ''Shift''-clicking //OK// button on Synchronization checklist window when synchronization in the background was not possible still closed the window. |
| - | * Bug fix: Failure when switching to another application while new session is being opened using //New Tab// tab. [[bug>2251]] | + | * Bug fix: Failure after reloading file panel when number of files decreases. [[bug>2402]] |
| - | + | * Bug fix: Failure or silently missing headers when when S3 request headers were too long. | |
| - | ===== [[6.2.3]] 6.2.3 RC ((2024-01-19)) ===== | + | |
| - | + | ||
| - | * Added new ''ca-west-1'' AWS region. | + | |
| - | * Translations completed: Catalan, Czech, Dutch, Finnish, German, Hungarian, Italian, Korean, Polish, Portuguese, Romanian, Russian, Simplified Chinese, Slovak, Turkish and Tamil; and updated: Japanese. | + | |
| - | * Support for ''posix-rename@openssh.com'' SFTP extension. [[bug>2231]] | + | |
| - | * When cleaning up application data, deleting even ''Martin Prikryl'' and ''WinSCP 2'' root keys, if they remain empty. | + | |
| - | * Ignoring attempts to directly move/duplicate file over itself, as if protocol requires deleting, the file would be lost. | + | |
| - | * Configurable FTP TLS shutdown procedure. [[bug>2250]] | + | |
| - | * Not failing connection when FTP server responds to ''CSID'' command with an error. [[bug>2253]] | + | |
| - | * Bug fix: Certificate authority cache was not copied to new configuration storage nor cleaned up with other caches. | + | |
| - | * Bug fix: ''ssh'' protocol URL handling was not completely unregistered. | + | |
| - | * Bug fix: Reported transfer size is rarely incorrect during FTP downloads. | + | |
| - | * Bug fix: Failure after connecting to server. [[bug>2251]] | + | |
| - | * Bug fix: FTP ''CSID'' command does not end with semicolon. [[bug>2252]] | + | |
| - | + | ||
| - | ===== [[6.2.2]] 6.2.2 beta ((2023-12-22)) ===== | + | |
| - | + | ||
| - | * SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.80]]. \\ It brings the following change: | + | |
| - | * Mitigations for SSH protocol "Terrapin" vulnerability. [[bug>2246]] [[pbug>vuln-terrapin]] | + | |
| - | * Support for ''Include'' directive when importing sites from OpenSSH. [[bug>2239]] | + | |
| - | * Change: .NET assembly collections are tagged with ''ClassInterfaceType.None'' to avoid warnings from ''regasm''. | + | |
| - | * Not using directory listing to keep FTP session alive by default. [[bug>2244]] | + | |
| - | * Windows Store installation on Windows 11 was incorrectly using INI file for configuration storage by default. [[bug>2245]] | + | |
| - | * Bug fix: Find dialog file list is scaled incorrectly on some multi monitor systems with different scaling. [[bug>2241]] | + | |
| - | * Bug fix: Cannot browse long local paths. [[bug>2242]] | + | |
| - | + | ||
| - | ===== [[6.2.1]] 6.2.1 beta ((2023-12-05)) ===== | + | |
| - | + | ||
| - | * File hash can be used as criterion for synchronization. [[bug>52]] | + | |
| - | * Consistent behavior across protocols and protocol capabilities when duplicating remote files. [[bug>2233]] | + | |
| - | * //Columns > Reset Layout// command added to Explorer interface too. | + | |
| - | * TLS/SSL core upgraded to OpenSSL 3.2.0. | + | |
| - | * Support for "Requester pays" S3 buckets. [[bug>2213]] | + | |
| - | * Optional more prominent active session tab. [[bug>2229]] | + | |
| - | * Optionally not shortening tab titles. [[bug>2202]] | + | |
| - | * New ''winscp.net'' root certificate. | + | |
| - | * Restored support for legacy version of the Digest algorithm specified in RFC 2069. [[bug>2109]] | + | |
| - | * Restored consistent behavior of failing, between duplicating and moving/renaming files over existing file with WebDAV protocol in scripting and .NET assembly. | + | |
| - | * When moving a folder by drag&drop to a path that already contains a subfolder with the same name, the existing folder is overwritten. | + | |
| - | * Shorter and more friendly formatting of long time intervals. [[bug>2236]] | + | |
| - | * When typing ambiguous port numbers in Login dialog, keeping the current protocol, even if it is not the default protocol for the port. | + | |
| - | * Bug fix: Failure when //New Tab// is clicked while another session is still being loaded. | + | |
| - | * Bug fix: Corrected some painting artifacts on session tabs, particularly on Windows 11. | + | |
| - | * Bug fix: ''Shift+F5'' shortcut operated with a focused file, rather than with selected files. | + | |
| - | * Bug fix: OpenSSL version in About dialog was not up to date. | + | |
| - | * Bug fix: Cannot leave directory entered via cache with SCP protocol if it was deleted meanwhile. [[bug>2234]] | + | |
| - | * Bug fix: Failure when connection is lost while reading remote directory with SFTP protocol. [[bug>2235]] | + | |
| - | * Bug fix: Multipart upload to Cloudflare R2 S3 interface fails due to too long upload ID. [[bug>2237]] | + | |
| - | * Bug fix: Panel focus was lost in some situations. | + | |
| - | * Bug fix: When S3 or WebDAV server did not provide file timestamp, downloaded file was set to oldest possible timestamp. | + | |
| - | * Bug fix: When session URL is typed into //Host name// box or pasted using context menu of the box and the Login dialog is submitted using ''Enter'' key, the URL is not parsed correctly. | + | |
| - | * Bug fix: Failure when saving edited file over reconnected session after previous reconnect attempt was aborted. [[bug>2238]] | + | |
| [[history_old|Older versions]] | [[history_old|Older versions]] | ||
| ~~NOTOC~~ | ~~NOTOC~~ | ||
| ~~ARCHIVE=history_old~~ | ~~ARCHIVE=history_old~~ | ||