Differences
This shows you the differences between the selected revisions of the page.
| history 2026-09-02 | history 2026-09-11 (current) | ||
| Line 7: | Line 7: | ||
| * Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]] | * Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]] | ||
| - | ===== [[6.6.3]] 6.6.3 (not released yet) ((2026-09-02)) ===== | + | ===== [[6.6.4]] 6.6.4 (not released yet) ((2026-09-11)) ===== |
| + | |||
| + | * Increased length limit of proxy host name for updates preferences. [[bug>2456]] | ||
| + | * Optionally default to keeping Login dialog open after opening session in PuTTY. [[bug>2459]] | ||
| + | * Improving placement of widows, particularly those opened, while the main window is not visible (notably during command-line operations). | ||
| + | * Bug fix: When selecting a site to perform a command-line operation with, it was possible to select a workspace or a folder, resulting in unexpected behaviour or failure. [[bug>2457]] | ||
| + | * Bug fix: After opening session in PuTTY, WinSCP process is never closed. [[bug>2458]] | ||
| + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] | ||
| + | |||
| + | ===== [[6.6.3]] 6.6.3 RC ((2026-09-03)) ===== | ||
| * Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish. | * Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish. | ||
| Line 26: | Line 35: | ||
| * Thirdparty information from the About dialog can be copied to the clipboard even when the browser control malfunctions. | * Thirdparty information from the About dialog can be copied to the clipboard even when the browser control malfunctions. | ||
| * Bug fix: No error is shown when connection fails. | * Bug fix: No error is shown when connection fails. | ||
| - | * Bug fix: ''x-name'' URL parameter was incorrectly decoded | + | * Bug fix: ''x-name'' URL parameter was incorrectly decoded. |
| * Bug fix: Incorrect number validation. | * Bug fix: Incorrect number validation. | ||
| * Bug fix: Some controls (notably list view headers) do not correctly apply dark mode in 64-bit build. [[bug>2453]] | * Bug fix: Some controls (notably list view headers) do not correctly apply dark mode in 64-bit build. [[bug>2453]] | ||
| Line 156: | Line 165: | ||
| * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | ||
| - | ===== [[6.5.7]] 6.5.7 (not released yet) ((2026-08-25)) ===== | + | ===== [[6.5.9]] 6.5.9 (not released yet) ((2026-09-10)) ===== |
| - | * Translations completed: Croatian, Finnish, Georgian, Italian and Serbian. | + | * Back-propagated fixes from 6.6.4 release: |
| + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] | ||
| + | |||
| + | ===== [[6.5.8]] 6.5.8 ((2026-09-10)) ===== | ||
| + | |||
| + | * This is Microsoft Store-only release that fixes packaging problem of 6.5.7. The actual binaries are still 6.5.7. | ||
| + | * Bug fix: Cannot install from Microsoft Store because of invalid 'sr' language. [[bug>2460]] | ||
| + | |||
| + | ===== [[6.5.7]] 6.5.7 ((2026-09-09)) ===== | ||
| + | |||
| + | ··* Translations completed: Croatian, Finnish, Georgian, Italian and Serbian, and updated: Slovenian. | ||
| * TLS/SSL core upgraded to OpenSSL 3.3.7. | * TLS/SSL core upgraded to OpenSSL 3.3.7. | ||
| * SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. SSH core upgraded to include some fixes. \\ It brings the following change: | * SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. SSH core upgraded to include some fixes. \\ It brings the following change: | ||
| Line 165: | Line 184: | ||
| * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] | * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] | ||
| * Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] | * Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] | ||
| - | * Back-propagated fixes from 6.6.2 beta release: | ||
| - | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | ||
| * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | ||
| + | * Back-propagated fixes from 6.6.2 beta release: | ||
| + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | ||