Differences

This shows you the differences between the selected revisions of the page.

2026-08-25 2026-08-26
PuTTY 0.85 (martin) PuTTY 0.85 64-bit (martin)
Line 7: Line 7:
  * Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]]   * Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]]
-===== [[6.6.3]] 6.6.3 (not released yet) ((2026-08-21)) =====+===== [[6.6.3]] 6.6.3 (not released yet) ((2026-08-26)) =====
  * Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish.   * Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish.
  * Some parts of GUI (panel headers, scrollbars, buttons, checkboxes) show dark in dark theme even when system-wide app theme is light.   * Some parts of GUI (panel headers, scrollbars, buttons, checkboxes) show dark in dark theme even when system-wide app theme is light.
 +  * SSH core and private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. \\ It brings the following change:
 +    * Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>pageant-deferred-decryption-uaf]]
 +    * Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]]
 +    * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]]
 +    * Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]]
 +  * Bundled SSH private key tools (PuTTYgen and Pageant) are 64-bit.
  * On Windows 11, using system dark tab theme, that uses different shades for active and disabled/disconnected tabs. [[bug>2452]]   * On Windows 11, using system dark tab theme, that uses different shades for active and disabled/disconnected tabs. [[bug>2452]]
  * XML parser upgraded to Expat 2.8.3.   * XML parser upgraded to Expat 2.8.3.

Last modified: by martin