Differences
This shows you the differences between the selected revisions of the page.
| history 2026-09-08 | history 2026-10-26 (current) | ||
| Line 3: | Line 3: | ||
| This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. | This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. | ||
| - | ===== [[6.8]] 6.8 (not released yet) ((2026-08-22)) ===== | + | ===== [[6.8]] 6.8 (not released yet) ((2026-10-26)) ===== |
| * Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]] | * Word wrapping in the internal editor can be toggled from toolbar menu. [[bug>2451]] | ||
| + | * Support client certificates with intermediate certificate. [[bug>2475]] | ||
| + | * Allow opening file properties from S3 servers that keep no object ACLs. [[bug>2472]] | ||
| + | * Not loading S3 tags for directories to avoid errors when opening directory Properties from servers that do not implement directory tags. [[bug>2473]] | ||
| + | * Bug fix: Failure when SSH authentication banner is displayed while reconnecting a session. [[bug>2474]] | ||
| + | * Bug fix: Parsing of multiline VMS FTP listing entries is broken. [[bug>1950]] | ||
| + | * Bug fix: Dragging file from long path directory to remote panel results in uploading the file with 8.3 filename. [[bug>2480]] | ||
| - | ===== [[6.6.4]] 6.6.4 (not released yet) ((2026-09-08)) ===== | + | ===== [[6.7.1]] 6.7.1 (not released yet) ((2026-10-24)) ===== |
| + | |||
| + | * Bug fix: Memory leak in encrypted HTTP/S3/WebDAV connections. [[bug>2476]] | ||
| + | * Bug fix: Recursive SCP directory download allows local path traversal when replacing of invalid characters in filenames is disabled. [[bug>2477]] | ||
| + | * Bug fix: Failure when dragging remote file to external application using drag&drop shell extension in 64-bit build. [[bug>2478]] | ||
| + | |||
| + | ===== [[6.7]] 6.7 ((2026-10-14)) ===== | ||
| + | |||
| + | * Allowing to report abnormal program terminations. | ||
| + | * Bug fix: Failure when keeping remote directory up to date. [[bug>2468]] | ||
| + | * Bug fix: Failure when using options in button drop down menus on Overwrite confirmation box. [[bug>2469]] | ||
| + | * Bug fix: File handle leak. [[bug>2470]] | ||
| + | * Bug fix: Failure when using ''rmdir'' command with WebDAV protocol. [[bug>2471]] | ||
| + | |||
| + | ===== [[6.6.4]] 6.6.4 RC ((2026-10-07)) ===== | ||
| + | * TLS/SSL core upgraded to OpenSSL 3.5.9. | ||
| + | * XML parser upgraded to Expat 2.9.0. | ||
| * Increased length limit of proxy host name for updates preferences. [[bug>2456]] | * Increased length limit of proxy host name for updates preferences. [[bug>2456]] | ||
| * Optionally default to keeping Login dialog open after opening session in PuTTY. [[bug>2459]] | * Optionally default to keeping Login dialog open after opening session in PuTTY. [[bug>2459]] | ||
| + | * Improving placement of windows, particularly those opened, while the main window is not visible (notably during command-line operations). | ||
| + | * Not scanning local directory symlinks pointing to network drives. | ||
| + | * Show keyboard accelerators on Overwrite confirmation box when keyboard modifier is pressed. [[bug>2463]] | ||
| + | * Removed no longer working OneDrive code. | ||
| + | * Updated to JCL library 2.9 commit 10b92737. | ||
| + | * Using themed button drop down menu on Overwrite confirmation box. | ||
| * Bug fix: When selecting a site to perform a command-line operation with, it was possible to select a workspace or a folder, resulting in unexpected behaviour or failure. [[bug>2457]] | * Bug fix: When selecting a site to perform a command-line operation with, it was possible to select a workspace or a folder, resulting in unexpected behaviour or failure. [[bug>2457]] | ||
| + | * Bug fix: After opening session in PuTTY, WinSCP process is never closed. [[bug>2458]] | ||
| + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] | ||
| + | * Bug fix: Fix crashes or unexpected behaviour when user saves a site and a workspace with the same name. [[bug>2462]] | ||
| + | * Bug fix: System context menus always show in dark mode. [[bug>2467]] | ||
| + | * Bug fix: Temporary directory structure for edited remote file reflected the current remote directory path rather than an actual path of the edited file. [[bug>2466]] | ||
| ===== [[6.6.3]] 6.6.3 RC ((2026-09-03)) ===== | ===== [[6.6.3]] 6.6.3 RC ((2026-09-03)) ===== | ||
| Line 162: | Line 195: | ||
| * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | ||
| - | ===== [[6.5.7]] 6.5.7 (not released yet) ((2026-08-25)) ===== | + | ===== [[6.5.9]] 6.5.9 (not released yet) ((2026-09-10)) ===== |
| - | * Translations completed: Croatian, Finnish, Georgian, Italian and Serbian. | + | * Back-propagated fixes from 6.6.4 release: |
| + | * Bug fix: Invalid language code for Serbian was used for Microsoft Store package. [[bug>2460]] | ||
| + | |||
| + | ===== [[6.5.8]] 6.5.8 ((2026-09-10)) ===== | ||
| + | |||
| + | * This is Microsoft Store-only release that fixes packaging problem of 6.5.7. The actual binaries are still 6.5.7. | ||
| + | * Bug fix: Cannot install from Microsoft Store because of invalid 'sr' language. [[bug>2460]] | ||
| + | |||
| + | ===== [[6.5.7]] 6.5.7 ((2026-09-09)) ===== | ||
| + | |||
| + | ··* Translations completed: Croatian, Finnish, Georgian, Italian and Serbian, and updated: Slovenian. | ||
| * TLS/SSL core upgraded to OpenSSL 3.3.7. | * TLS/SSL core upgraded to OpenSSL 3.3.7. | ||
| * SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. SSH core upgraded to include some fixes. \\ It brings the following change: | * SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. SSH core upgraded to include some fixes. \\ It brings the following change: | ||
| Line 171: | Line 214: | ||
| * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] | * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] | ||
| * Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] | * Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] | ||
| - | * Back-propagated fixes from 6.6.2 beta release: | ||
| - | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] | ||
| * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | ||
| + | * Back-propagated fixes from 6.6.2 beta release: | ||
| + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | ||