Differences
This shows you the differences between the selected revisions of the page.
| history 2026-08-25 | history 2026-09-11 (current) | ||
| Line 7: | Line 7: | ||
| * Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]] | * Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]] | ||
| - | ===== [[6.6.3]] 6.6.3 (not released yet) ((2026-08-21)) ===== | + | ===== [[6.6.4]] 6.6.4 (not released yet) ((2026-09-11)) ===== |
| + | |||
| + | * Increased length limit of proxy host name for updates preferences. [[bug>2456]] | ||
| + | * Optionally default to keeping Login dialog open after opening session in PuTTY. [[bug>2459]] | ||
| + | * Improving placement of widows, particularly those opened, while the main window is not visible (notably during command-line operations). | ||
| + | * Bug fix: When selecting a site to perform a command-line operation with, it was possible to select a workspace or a folder, resulting in unexpected behaviour or failure. [[bug>2457]] | ||
| + | * Bug fix: After opening session in PuTTY, WinSCP process is never closed. [[bug>2458]] | ||
| + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] | ||
| + | |||
| + | ===== [[6.6.3]] 6.6.3 RC ((2026-09-03)) ===== | ||
| * Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish. | * Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish. | ||
| * Some parts of GUI (panel headers, scrollbars, buttons, checkboxes) show dark in dark theme even when system-wide app theme is light. | * Some parts of GUI (panel headers, scrollbars, buttons, checkboxes) show dark in dark theme even when system-wide app theme is light. | ||
| + | * SSH core and private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. \\ It brings the following change: | ||
| + | * Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>pageant-deferred-decryption-uaf]] | ||
| + | * Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]] | ||
| + | * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] | ||
| + | * Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] | ||
| + | * Bundled SSH private key tools (PuTTYgen and Pageant) are 64-bit. | ||
| * On Windows 11, using system dark tab theme, that uses different shades for active and disabled/disconnected tabs. [[bug>2452]] | * On Windows 11, using system dark tab theme, that uses different shades for active and disabled/disconnected tabs. [[bug>2452]] | ||
| - | * XML parser upgraded to Expat 2.8.3. | + | * TLS/SSL core upgraded to OpenSSL 3.5.8. |
| + | ··* XML parser upgraded to Expat 2.8.4. | ||
| * Source code package build script supports 64-bit target. | * Source code package build script supports 64-bit target. | ||
| + | * Installer upgraded to Inno Setup 6.7.3. | ||
| * 64-bit build is identified in version information. | * 64-bit build is identified in version information. | ||
| * Resolving version of pwsh installed with MSIX. | * Resolving version of pwsh installed with MSIX. | ||
| * Thirdparty information from the About dialog can be copied to the clipboard even when the browser control malfunctions. | * Thirdparty information from the About dialog can be copied to the clipboard even when the browser control malfunctions. | ||
| * Bug fix: No error is shown when connection fails. | * Bug fix: No error is shown when connection fails. | ||
| - | * Bug fix: ''x-name'' URL parameter was incorrectly decoded | + | * Bug fix: ''x-name'' URL parameter was incorrectly decoded. |
| * Bug fix: Incorrect number validation. | * Bug fix: Incorrect number validation. | ||
| * Bug fix: Some controls (notably list view headers) do not correctly apply dark mode in 64-bit build. [[bug>2453]] | * Bug fix: Some controls (notably list view headers) do not correctly apply dark mode in 64-bit build. [[bug>2453]] | ||
| * Bug fix: 64-bit build did not identify its system to be 64-bit, what among other prevented it from identifying 64-bit COM registrations. | * Bug fix: 64-bit build did not identify its system to be 64-bit, what among other prevented it from identifying 64-bit COM registrations. | ||
| + | * Bug fix: Some strings use incorrect translation in 64-bit version. [[bug>2455]] | ||
| ===== [[6.6.2]] 6.6.2 RC ((2026-06-17)) ===== | ===== [[6.6.2]] 6.6.2 RC ((2026-06-17)) ===== | ||
| Line 147: | Line 165: | ||
| * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | ||
| - | ===== [[6.5.7]] 6.5.7 (not released yet) ((2026-06-17)) ===== | + | ===== [[6.5.9]] 6.5.9 (not released yet) ((2026-09-10)) ===== |
| - | * Translations completed: Croatian, Finnish, Georgian, Italian and Serbian. | + | * Back-propagated fixes from 6.6.4 release: |
| + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] | ||
| + | |||
| + | ===== [[6.5.8]] 6.5.8 ((2026-09-10)) ===== | ||
| + | |||
| + | * This is Microsoft Store-only release that fixes packaging problem of 6.5.7. The actual binaries are still 6.5.7. | ||
| + | * Bug fix: Cannot install from Microsoft Store because of invalid 'sr' language. [[bug>2460]] | ||
| + | |||
| + | ===== [[6.5.7]] 6.5.7 ((2026-09-09)) ===== | ||
| + | |||
| + | ··* Translations completed: Croatian, Finnish, Georgian, Italian and Serbian, and updated: Slovenian. | ||
| * TLS/SSL core upgraded to OpenSSL 3.3.7. | * TLS/SSL core upgraded to OpenSSL 3.3.7. | ||
| - | * Back-propagated fixes from 6.6.2 beta release: | + | * SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. SSH core upgraded to include some fixes. \\ It brings the following change: |
| - | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | + | * Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>;pageant-deferred-decryption-uaf]] |
| + | * Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]] | ||
| + | * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>;argon2-parameter-checks]] | ||
| + | * Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] | ||
| * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | ||
| * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | ||
| + | * Back-propagated fixes from 6.6.2 beta release: | ||
| + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | ||
| Line 186: | Line 219: | ||
| * Bug fix: Failure after reloading file panel when number of files decreases. [[bug>2402]] | * Bug fix: Failure after reloading file panel when number of files decreases. [[bug>2402]] | ||
| * Bug fix: Failure or silently missing headers when when S3 request headers were too long. | * Bug fix: Failure or silently missing headers when when S3 request headers were too long. | ||
| - | |||
| - | ===== [[6.5.3]] 6.5.3 ((2025-07-16)) ===== | ||
| - | |||
| - | * Translations updated: Belarusian, Brazilian Portuguese [[bug>2386]] and Slovenian. | ||
| - | * TLS/SSL core upgraded to OpenSSL 3.3.4. | ||
| - | * Temporarily not updating drag&drop shell extension for minor changes when installing for current user. [[bug>2381]] | ||
| - | * Bug fix: Failure when reading empty certificate authority configuration. | ||
| - | * Bug fix: Failure when running Maximized. [[bug>2387]] | ||
| - | * Bug fix: Incorrect scaling of navigation tree on Login and Preferences dialogs. [[bug>2385]] | ||
| - | * Bug fix: Incorrect scaling of drag&drop shell extension status display on Preferences dialog. | ||
| - | |||
| - | ===== [[6.5.2]] 6.5.2 ((2025-06-18)) ===== | ||
| - | |||
| - | * Translation updated: Brazilian Portuguese and Polish. | ||
| - | * Added new ''ap-east-2'' AWS region. | ||
| - | * Bug fix: Some translations (notably Japanese) are not loaded. [[bug>2372]] | ||
| - | * Bug fix: Directory tree indentation is scaled incorrectly when starting on scaled display on system with scaled primary monitor. [[bug>2374]] | ||
| - | * Bug fix: Wrong icon size is used when starting on secondary monitor with different scaling than the primary one. | ||
| - | * Bug fix: Failure when proxy hostname resolution fails with SFTP/SCP protocols. [[bug>2376]] | ||
| - | * Bug fix: Avoid replacing ''%2F'' with a slash and ''%2E'' with a dot in special cases on upload to avoid path traversal. [[bug>2377]] | ||
| - | * Bug fix: Failure when canceling reconnection on authentication banner, when the connection was already closed by the server. [[bug>2379]] | ||
| - | * Bug fix: Local directories sometimes cannot be deleted. [[bug>2380]] | ||
| [[history_old|Older versions]] | [[history_old|Older versions]] | ||
| ~~NOTOC~~ | ~~NOTOC~~ | ||
| ~~ARCHIVE=history_old~~ | ~~ARCHIVE=history_old~~ | ||