Differences
This shows you the differences between the selected revisions of the page.
| history 2026-09-02 | history 2026-10-26 (current) | ||
| Line 3: | Line 3: | ||
| This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. | This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. | ||
| - | ===== [[6.8]] 6.8 (not released yet) ((2026-08-22)) ===== | + | ===== [[6.8]] 6.8 (not released yet) ((2026-10-26)) ===== |
| * Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]] | * Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]] | ||
| + | * Support client certificates with intermediate certificate. [[bug>2475]] | ||
| + | * Allow opening file properties from S3 servers that keep no object ACLs. [[bug>2472]] | ||
| + | * Not loading S3 tags for directories to avoid errors when opening directory Properties from servers that do not implement directory tags. [[bug>2473]] | ||
| + | * Bug fix: Failure when SSH authentication banner is displayed while reconnecting a session. [[bug>2474]] | ||
| + | * Bug fix: Parsing of multiline VMS FTP listing entries is broken. [[bug>1950]] | ||
| + | * Bug fix: Dragging file from long path directory to remote panel results in uploading the file with 8.3 filename. [[bug>2480]] | ||
| - | ===== [[6.6.3]] 6.6.3 (not released yet) ((2026-09-02)) ===== | + | ===== [[6.7.1]] 6.7.1 (not released yet) ((2026-10-24)) ===== |
| + | |||
| + | * Bug fix: Memory leak in encrypted HTTP/S3/WebDAV connections. [[bug>2476]] | ||
| + | * Bug fix: Recursive SCP directory download allows local path traversal when replacing of invalid characters in filenames is disabled. [[bug>2477]] | ||
| + | * Bug fix: Failure when dragging remote file to external application using drag&drop shell extension in 64-bit build. [[bug>2478]] | ||
| + | |||
| + | ===== [[6.7]] 6.7 ((2026-10-14)) ===== | ||
| + | |||
| + | * Allowing to report abnormal program terminations. | ||
| + | * Bug fix: Failure when keeping remote directory up to date. [[bug>2468]] | ||
| + | * Bug fix: Failure when using options in button drop down menus on Overwrite confirmation box. [[bug>2469]] | ||
| + | * Bug fix: File handle leak. [[bug>2470]] | ||
| + | * Bug fix: Failure when using ''rmdir'' command with WebDAV protocol. [[bug>2471]] | ||
| + | |||
| + | ===== [[6.6.4]] 6.6.4 RC ((2026-10-07)) ===== | ||
| + | |||
| + | * TLS/SSL core upgraded to OpenSSL 3.5.9. | ||
| + | * XML parser upgraded to Expat 2.9.0. | ||
| + | * Increased length limit of proxy host name for updates preferences. [[bug>2456]] | ||
| + | * Optionally default to keeping Login dialog open after opening session in PuTTY. [[bug>2459]] | ||
| + | * Improving placement of windows, particularly those opened, while the main window is not visible (notably during command-line operations). | ||
| + | * Not scanning local directory symlinks pointing to network drives. | ||
| + | * Show keyboard accelerators on Overwrite confirmation box when keyboard modifier is pressed. [[bug>2463]] | ||
| + | * Removed no longer working OneDrive code. | ||
| + | * Updated to JCL library 2.9 commit 10b92737. | ||
| + | * Using themed button drop down menu on Overwrite confirmation box. | ||
| + | * Bug fix: When selecting a site to perform a command-line operation with, it was possible to select a workspace or a folder, resulting in unexpected behaviour or failure. [[bug>2457]] | ||
| + | * Bug fix: After opening session in PuTTY, WinSCP process is never closed. [[bug>2458]] | ||
| + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] | ||
| + | * Bug fix: Fix crashes or unexpected behaviour when user saves a site and a workspace with the same name. [[bug>2462]] | ||
| + | * Bug fix: System context menus always show in dark mode. [[bug>2467]] | ||
| + | * Bug fix: Temporary directory structure for edited remote file reflected the current remote directory path rather than an actual path of the edited file. [[bug>2466]] | ||
| + | |||
| + | ===== [[6.6.3]] 6.6.3 RC ((2026-09-03)) ===== | ||
| * Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish. | * Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish. | ||
| Line 26: | Line 65: | ||
| * Thirdparty information from the About dialog can be copied to the clipboard even when the browser control malfunctions. | * Thirdparty information from the About dialog can be copied to the clipboard even when the browser control malfunctions. | ||
| * Bug fix: No error is shown when connection fails. | * Bug fix: No error is shown when connection fails. | ||
| - | * Bug fix: ''x-name'' URL parameter was incorrectly decoded | + | * Bug fix: ''x-name'' URL parameter was incorrectly decoded. |
| * Bug fix: Incorrect number validation. | * Bug fix: Incorrect number validation. | ||
| * Bug fix: Some controls (notably list view headers) do not correctly apply dark mode in 64-bit build. [[bug>2453]] | * Bug fix: Some controls (notably list view headers) do not correctly apply dark mode in 64-bit build. [[bug>2453]] | ||
| Line 156: | Line 195: | ||
| * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | ||
| - | ===== [[6.5.7]] 6.5.7 (not released yet) ((2026-08-25)) ===== | + | ===== [[6.5.9]] 6.5.9 (not released yet) ((2026-09-10)) ===== |
| - | * Translations completed: Croatian, Finnish, Georgian, Italian and Serbian. | + | * Back-propagated fixes from 6.6.4 release: |
| + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] | ||
| + | |||
| + | ===== [[6.5.8]] 6.5.8 ((2026-09-10)) ===== | ||
| + | |||
| + | * This is Microsoft Store-only release that fixes packaging problem of 6.5.7. The actual binaries are still 6.5.7. | ||
| + | * Bug fix: Cannot install from Microsoft Store because of invalid 'sr' language. [[bug>2460]] | ||
| + | |||
| + | ===== [[6.5.7]] 6.5.7 ((2026-09-09)) ===== | ||
| + | |||
| + | ··* Translations completed: Croatian, Finnish, Georgian, Italian and Serbian, and updated: Slovenian. | ||
| * TLS/SSL core upgraded to OpenSSL 3.3.7. | * TLS/SSL core upgraded to OpenSSL 3.3.7. | ||
| * SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. SSH core upgraded to include some fixes. \\ It brings the following change: | * SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. SSH core upgraded to include some fixes. \\ It brings the following change: | ||
| Line 165: | Line 214: | ||
| * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] | * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] | ||
| * Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] | * Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] | ||
| - | * Back-propagated fixes from 6.6.2 beta release: | ||
| - | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | ||
| * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | ||
| + | * Back-propagated fixes from 6.6.2 beta release: | ||
| + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | ||
| Line 200: | Line 249: | ||
| * Bug fix: Failure after reloading file panel when number of files decreases. [[bug>2402]] | * Bug fix: Failure after reloading file panel when number of files decreases. [[bug>2402]] | ||
| * Bug fix: Failure or silently missing headers when when S3 request headers were too long. | * Bug fix: Failure or silently missing headers when when S3 request headers were too long. | ||
| - | |||
| - | ===== [[6.5.3]] 6.5.3 ((2025-07-16)) ===== | ||
| - | |||
| - | * Translations updated: Belarusian, Brazilian Portuguese [[bug>2386]] and Slovenian. | ||
| - | * TLS/SSL core upgraded to OpenSSL 3.3.4. | ||
| - | * Temporarily not updating drag&drop shell extension for minor changes when installing for current user. [[bug>2381]] | ||
| - | * Bug fix: Failure when reading empty certificate authority configuration. | ||
| - | * Bug fix: Failure when running Maximized. [[bug>2387]] | ||
| - | * Bug fix: Incorrect scaling of navigation tree on Login and Preferences dialogs. [[bug>2385]] | ||
| - | * Bug fix: Incorrect scaling of drag&drop shell extension status display on Preferences dialog. | ||
| - | |||
| - | ===== [[6.5.2]] 6.5.2 ((2025-06-18)) ===== | ||
| - | |||
| - | * Translation updated: Brazilian Portuguese and Polish. | ||
| - | * Added new ''ap-east-2'' AWS region. | ||
| - | * Bug fix: Some translations (notably Japanese) are not loaded. [[bug>2372]] | ||
| - | * Bug fix: Directory tree indentation is scaled incorrectly when starting on scaled display on system with scaled primary monitor. [[bug>2374]] | ||
| - | * Bug fix: Wrong icon size is used when starting on secondary monitor with different scaling than the primary one. | ||
| - | * Bug fix: Failure when proxy hostname resolution fails with SFTP/SCP protocols. [[bug>2376]] | ||
| - | * Bug fix: Avoid replacing ''%2F'' with a slash and ''%2E'' with a dot in special cases on upload to avoid path traversal. [[bug>2377]] | ||
| - | * Bug fix: Failure when canceling reconnection on authentication banner, when the connection was already closed by the server. [[bug>2379]] | ||
| - | * Bug fix: Local directories sometimes cannot be deleted. [[bug>2380]] | ||
| [[history_old|Older versions]] | [[history_old|Older versions]] | ||
| ~~NOTOC~~ | ~~NOTOC~~ | ||
| ~~ARCHIVE=history_old~~ | ~~ARCHIVE=history_old~~ | ||