Differences
This shows you the differences between the selected revisions of the page.
| history 2022-01-25 | history 2026-08-08 (current) | ||
| Line 3: | Line 3: | ||
| This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. | This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. | ||
| - | ===== [[6.0]] 6.0 (not released yet) ((2022-01-12)) ===== | + | ===== [[6.6.3]] 6.6.3 (not released yet) ((2026-08-06)) ===== |
| - | * Local file manager mode (two local panels). [[bug>1893]] | + | |
| - | * Ongoing delete operation can be moved to background queue. [[bug>194]] | + | |
| - | * Showing directory size in file panel. [[bug>41]] | + | |
| - | * Tab titles are shortened to fit window width as needed. [[bug>1423]] | + | |
| - | * Tabs show tooltips with full session name and paths. | + | |
| - | * Remembering remote directory tree nodes state when switching sessions. [[bug>1057]] | + | |
| - | * ''Shift''-clicking //New Session// command opens the Login dialog in new WinSCP instance, instead of possibly opening new instance of workspace. | + | |
| - | * When switching tabs, prevent visibly scrolling the panels when focusing the last selected file. | + | |
| - | * Removed the "compression" indicator from the status bar. | + | |
| - | * Allowed normal behavior of double-click on a file even when resolving of symlinks is disabled. [[bug>2037]] | + | |
| - | * ''Session.ExecutablePath'' returns detected or actual executable path when not set. [[bug>2055]] | + | |
| - | * Change: Keyboard shortcut for //Command Line// command changed to ''Shift+Ctrl+M'' (''Shift+Ctrl+N'' previously). | + | |
| - | ===== [[5.20.2]] 5.20.2 (not released yet) ((2022-01-25)) ===== | + | ··* Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish. |
| + | * XML parser upgraded to Expat 2.8.2. | ||
| + | · * Source code package build script supports 64-bit target. | ||
| + | * 64-bit build is identified in version information. | ||
| + | · * Resolving version of pwsh installed with MSIX. | ||
| + | · * Thirdparty information from the About dialog can be copied to the clipboard even when the browser control malfunctions. | ||
| + | ··* Bug fix: No error is shown when connection fails. | ||
| + | * Bug fix: ''x-name'' URL parameter was incorrectly decoded | ||
| + | * Bug fix: Incorrect number validation. | ||
| + | * Bug fix: Some controls (notably list view headers) do not correctly apply dark mode in 64-bit build. [[bug>2453]] | ||
| - | ··* Translation updated: German. | + | ===== [[6.6.2]] 6.6.2 RC ((2026-06-17)) ===== |
| - | · * WebDAV core upgraded to neon 0.32.2. | + | |
| - | · * XML parser upgraded to Expat 2.4.3. | + | |
| - | * Allowed uploading edited files over encrypted session. [[bug>1989]] | + | |
| - | · * Building .NET assembly in Visual Studio 2019. | + | |
| - | * Bug fix: Failure when attempting to switch to an unconnected sessions using keyboard shortcuts while another session is being connected. | + | |
| - | ===== [[5.20.1]] 5.20.1 beta ((2022-01-11)) ===== | + | ··* Experimental 64-bit version of WinSCP. [[bug>618]] |
| - | * File masks relative to the root of an operation. [[bug>2052]] | + | * Optionally not showing error message when connection is lost while idle. [[bug>2360]] |
| - | * Private key can be provided as string in .NET assembly and scripting. [[bug>2044]] | + | * SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.84]]. \\ It brings the following change: |
| - | * Support for importing key files that are specified using home ''~'' prefix from OpenSSH ''config'' file. [[bug>2053]] | + | * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] |
| - | * Translation updated: German. | + | * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1m. | + | * Bug fix: spurious //"Network error: Socket is not connected"// when authenticating to some HTTP proxies. [[pbug>http-proxy-auth-wsaenotconn]] |
| - | * Commands that do not fit on //Custom Commands// toolbar are presented in drop down menu, instead of a horizontal bar. [[bug>554]] | + | · * TLS/SSL core upgraded to OpenSSL 3.5.7. |
| - | * First hiding right-most //Custom Commands// toolbar commands that do not fit | + | * XML parser upgraded to Expat 2.8.1. |
| - | * Prevent hang when dragging files without drag&drop shell extensions when some mapped network drive is not available. [[bug>2054]] | + | * Restored faster C TLS/SSL AES implementation. |
| - | * Added new ''ap-southeast-3'' AWS region. | + | * Configurable warning when opening large file in an internal editor. [[bug>2437]] |
| - | * XML parser upgraded to Expat 2.4.2. | + | * Informing that when preserving directory timestamps is enabled, using multiple connections for transfer is not possible. [[bug>2439]] |
| - | * Bug fix: When initial remote directory specified in the ''open'' command does not exist, the error was silently ignored. | + | * Warning when pasting a session URL with unsafe settings. |
| - | * Bug fix: File color rules with path mask do not work for local files. | + | * When opening session in PuTTY to a host for which WinSCP has multiple host keys cached, using the last key or the key that PuTTY has cached. [[bug>2440]] |
| + | * Always (re)registering drag&drop shell extension during installation, even when the extension is not replaced. | ||
| + | * Allowed Console interface tool to have ''.exe'' extension to avoid false positive detections by some antiviruses. [[bug>2434]] | ||
| + | * Using //"username"// and //"hostname"// as one word. | ||
| + | * Reading all system settings from 64-bit registry. | ||
| + | * Allow assigning ''null'' to ''Session.SessionLogPath''. [[bug>2438]] | ||
| + | * Avoiding using ''SSH_FXF_EXCL'' together with ''SSH_FXF_TRUNC'' SFTP file opening flags. [[bug>2444]] | ||
| + | * Optimized file system monitoring when looking for dummy directory during drag&drop downloads. [[bug>2445]] | ||
| + | * Change: Not allowing WebDAV redirects to other hosts by default. [[bug>2447]] | ||
| + | * Change: Not allowing WebDAV redirects to an unencrypted URL by default. [[bug>2448]] | ||
| + | * Updated to JCL library 2.9 commit c669fd12. | ||
| + | * Bug fix: Failure when trying to connect via HTTP proxy to FTP host with excessively long login details. [[bug>2435]] | ||
| + | * Bug fix: Buffer overflow in Console interface tool. [[bug>2436]] | ||
| + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||
| + | * Bug fix: Message boxes from secondary windows (like the internal editor) caused application to move to the background when when the main window was minimized. [[bug>2443]] | ||
| + | * Bug fix: Heap over-read via crafted encrypted filename. [[bug>2449]] | ||
| + | * Bug fix: Slashes in filenames can cause path traversal when invalid filename characters replacement is disabled. [[bug>2450]] | ||
| - | ===== [[5.20]] 5.20 beta ((2021-12-02)) ===== | + | ===== [[6.6.1]] 6.6.1 beta ((2026-04-01)) ===== |
| - | * Support for ACL for S3 protocol. [[bug>1641]] | + | * Support for OpenSSH ssh-agent. [[bug>1682]] |
| - | * SSH core upgraded to [[&url(puttychanges)|PuTTY 0.76]]. [[bug>1984]] \\ It brings the following changes: | + | * Optionally connecting all workspace/folder sessions immediately. [[bug>1026]] |
| - | * Support Curve448 key exchange method. [[pbug>curve448]] | + | * Preserving panel scroll position after rename. [[bug>2425]] |
| - | ····* Support Ed448 user and host keys. [[pbug>ed448]] | + | * ''Ctrl+C'' works in list views on 'Server and protocol information' dialog. |
| - | * Support rsa-sha2-256 and rsa-sha2-512 SSH public key algorithms. [[bug>1952]] [[pbug>rsa-sha2]] | + | * Preventing moving or copying a file or folder over ancestor folder with the same name. [[bug>2427]] |
| - | * Change: SHA-256 fingerprints are not padded anymore. | + | * WebDAV/HTTP core upgraded to neon 0.37.1. |
| - | * It is possible to import sessions from OpenSSH ''config'' file. [[bug>1896]] | + | * XML parser upgraded to Expat 2.7.5. |
| - | * Change: Removed support for SSH-1. | + | * Bug fix: Some menus were not working on displays to the left or above the primary display. [[bug>2423]] |
| - | * Optionally keeping symbolic link name in path instead of resolving it with SFTP protocol. [[bug>;81]] | + | * Bug fix: Mouse wheel downwards scrolling did not work on toolbar drop down lists. |
| - | * Improved shortening long paths, when single level name is too long on its own. [[bug>2043]] | + | * Bug fix: Once any control of permissions popup box was focused the popup no longer closed when user clicked outside of it. |
| - | * WebDAV core upgraded to neon 0.32.1. | + | * Bug fix: Failure when closing Transfer settings dialog with //X// button while a permissions popup box control is focused. [[bug>2420]] |
| - | * Allow displaying all VMS file revisions with FTP protocol. [[bug>1944]] | + | * Bug fix: Failure when switching to a session that is being reconnected. |
| - | * Support reading S3 credentials from AWS CLI configuration. [[bug>1941]] | + | * Bug fix: Failure when the first bit of an SFTP response is set. [[bug>2422]] |
| - | * Bytes transferred are recorded in XML log and available in .NET assembly API. [[bug>597]] | + | * Bug fix: Copying to clipboard with ''Ctrl+C'' from 'Server and protocol information' was broken. |
| - | * Generating PPK3 keys. | + | * Bug fix: Protocol additional information scrolling was broken. |
| - | * It is possible to copy information to the clipboard from the Properties dialog. | + | * Bug fix: Master password dialog was missing //Help// button. |
| - | * Made ''WinSCP.exe'' be deployed even when WinSCP NuGet package is included as transitive dependency. [[bug>2017]] | + | * Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]] |
| - | * When performing a single-item atomic operation, displaying indeterminate progress status. | + | * Bug fix: Wrapped settings values from Raw Site Settings dialog were not preserved. |
| - | * S3 //Security token// session option renamed to a more appropriate //Session Token//. | + | * Bug fix: Some files modified by local custom command in SCP session fail to upload back. [[bug>2428]] |
| - | * Not resetting protocol to WebDAV when S3 protocol is selected and HTTP URL is pasted on the Login dialog. [[bug>2045]] | + | * Bug fix: Whole //Key exchange// page was incorrectly hidden when //"Handles SSH key re-exchange badly"// bug was enabled. |
| - | * Automatically reconnect when FTP server fails to open data connection, if it previously worked. [[bug>2046]] | + | * Bug fix: Some message boxes leak GDI handle. [[bug>2430]] |
| - | * Confirm closing when multiple tabs are opened and auto workspace saving is not enabled, even when none of the tabs contain an active remote session. | + | * Bug fix: Login dialog leaks GDI handles. [[bug>2431]] |
| - | * Including host key of tunnel session in generated code. [[bug>2006]] | + | |
| - | * Support for custom certificate store files with configurable path. [[bug>2034]] | + | |
| - | * Allowed providing tunnel private key passphrase in scripting. [[bug>2029]] | + | |
| - | * Improved handling of long shell command error messages. [[bug>1949]] | + | |
| - | * Considering global passive/active mode settings when importing sessions from FileZilla | + | |
| - | * Automatically retry when S3 transfer fails with ''503'' code (//Slow down// or //Service unavailable//). [[bug>2047]] | + | |
| - | * Improving formatting of errors displayed after an operation completed in //Continue on error// mode. | + | |
| - | * ''Shift+Ctrl+R'' keyboard shortcut for //Reconnect Session// command. | + | |
| - | * Change: Keyboard shortcut for //Restore Selection// command changed to ''Shift+Ctrl+S'' (''Shift+Ctrl+R'' previously). | + | |
| - | * Change: Monitoring ''A:'' and ''B:'' drives. [[bug>2014]] | + | |
| - | * Preventing beep when using ''Alt+Enter'' to open the Properties dialog. | + | |
| - | * When collecting list of files for background transfer, say //"Listing"// instead of //"Calculating"// not to give an impression that it is a superfluous operation. [[bug>2026]] | + | |
| - | * Checking for too many parameters with ''/keygen'' switch. | + | |
| - | * PNG code upgraded to PngComponents 1.7.0. | + | |
| - | * Warning when selecting too new key file. | + | |
| - | * Warning when opening more than 100 tabs. [[bug>1997]] | + | |
| - | * Including HTTP message into S3 error message. | + | |
| - | * Bug fix: Do not say //"Terminated by user"// when the session has actually timed out. | + | |
| - | * Bug fix: Cannot use passwords and passphrases longer than 255 characters in automation and various other purposes. [[bug>1988]] | + | |
| - | * Bug fix: When size of a file downloaded with FTP protocol changes (or when ASCII mode is used) the logged size did not reflect the actual transfer size. | + | |
| - | * Bug fix: When connecting disconnected session the directory might be loaded twice. | + | |
| - | * Bug fix: Failure when entering directory that contains file with a slash in its name. [[bug>2016]] | + | |
| - | * Bug fix: When S3 authentication region changes during session, previously visited buckets from the original authentication region could not be accessed anymore. [[bug>2027]] | + | |
| - | * Bug fix: Failure when using multiple connections with local proxy command. [[bug>2028]] | + | |
| - | * Bug fix: Configuration import did not remove old sites and did not load all GUI settings. [[bug>2040]] | + | |
| - | * Bug fix: When S3 transfer fatally fails, error details were lost. | + | |
| - | ===== [[5.19.5]] 5.19.5 ((2021-11-25)) ===== | + | ===== [[6.6]] 6.6 beta ((2026-02-02)) ===== |
| - | * Compatibility with Google Cloud S3 API when duplicating files. [[bug>2038]] | + | * Synchronizing two local directories. [[bug>2020]] |
| - | * Compatibility with Google Cloud S3 API when deleting implicitly existing directories. [[bug>2042]] | + | * Compiler upgraded to Clang/bcc32c. [[bug>618]] |
| - | * Translation updated: Turkish. | + | * Inactive sessions can be automatically reconnected. [[bug>2232]] |
| - | * Logging a reference to [[bug>1952]] when an OpenSSH 8.8 (or newer) server refuses the key. | + | * Added dark theme support to: [[bug>1696]] |
| - | * Bug fix: Crash when new contents is copied to the clipboard while downloading files pasted from the clipboard. [[bug>2036]] | + | * Login dialog. [[bug>2345]] |
| - | * Bug fix: //Browse Remote Directory// command on Synchronization checklist did not locate file with spaces. | + | * Transfer Options dialog. |
| - | * Bug fix: Extension //ZIP and Upload// does not work with files in a drive root. [[bug>2039]] | + | ···* Message boxes. |
| - | * Bug fix: Path on Console window was not shortened when it did not fit. | + | * Queue column headers. [[bug>2356]] |
| + | * Progress window. | ||
| + | ····* Authentication Progress window. [[bug>2358]] | ||
| + | * Bug fix: Scrollbar colors did not always reflect the color theme | ||
| + | * Using modern directory selection dialog that scales correctly and allows creating new directory. [[bug>2373]] [[bug>2389]] | ||
| + | * Optimized GUI when working with large subdirectory selection. [[bug>2396]] | ||
| + | * Change: Default to UTF-8 encoding in internal editor. [[bug>2397]] | ||
| + | * New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries. | ||
| + | * TLS/SSL core upgraded to OpenSSL 3.5.5. | ||
| + | * WebDAV/HTTP core upgraded to neon 0.36.0. | ||
| + | * XML parser upgraded to Expat 2.7.4. | ||
| + | * Installer upgraded to Inno Setup 6.7.0 with dark mode support enabled. | ||
| + | * Increased WinSCP memory limit to 4 GB. [[bug>2412]] | ||
| + | * Defined and implemented interface for the .NET library. By @mjkent. [[bug>856]] | ||
| + | * Optimized TLS/SSL AES implementation. | ||
| + | * Restoring ability to restart Explorer to allow upgrade of drag&drop shell extension, when installing for current user, as after-restart replacement is not possible without Administrator privileges. [[bug>2381]] | ||
| + | * MSI toolset updated to WiX 5. | ||
| + | * Commands to copy paths to the clipboard on the Synchronization checklist window. | ||
| + | * Cryptography optimization. | ||
| + | * Support long AWS/S3 session tokens. [[bug>2403]] | ||
| + | * Prevent hang when new device is attached or removed while some mapped network drive is not available. [[bug>2382]] | ||
| + | * Copy and paste improvements: | ||
| + | * Consistently renaming local files dropped or pasted back to their source directory to avoid collisions. | ||
| + | ····* Bug fix: When copying local files to clipboard from system context menu, "cut" state of previously cut files was not cleared. | ||
| + | * Not redundantly verifying WebDAV or S3 certificate in Windows Certificate store if it is already marked as trusted in session settings. [[bug>2404]] | ||
| + | * Provide SNI when opening FTP data connection. [[bug>2410]] | ||
| + | * Optimized synchronization checklist sorting. | ||
| + | * Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] | ||
| + | * Convert unsupported SSH proxy to SSH tunnel when importing site from PuTTY. [[bug>2408]] | ||
| + | * FTP directory listing falls back to the other active/passive mode, consistently with file transfers. | ||
| + | * Consistently calling command to open window with specific directory //Explore//, instead of sometimes //Browse//. | ||
| + | * Consistently referring to file last modification timestamp column as //Date modified//. | ||
| + | * With INI file provided on command-line, using the same INI file when starting a new instance. | ||
| + | * Windows shell local file copy status window is centered on the main window. | ||
| + | * Made taskbar flashing configurable in GUI. [[bug>2411]] | ||
| + | * Control labels on transfer settings dialogs do not show keyboard accelerator cue, until ''Alt'' key is pressed. | ||
| + | * Not using drag images even with directory trees. [[bug>1274]] | ||
| + | * Allow configuring checksum commands. [[bug>2394]] | ||
| + | * Updated to JCL library 2.8.1. | ||
| + | * Updating jump list only when running with GUI. | ||
| + | * Made space on permissions box for longer translations. [[bug>2398]] | ||
| + | * Opening //Default Apps// //Settings// page directly to open it in the foreground and avoid flashing //Control Panel// window. | ||
| + | * Improving order in which Windows Narrator reads window controls. | ||
| + | * All edit boxes with history consistently do not auto complete and show 16 entries in the drop down. | ||
| + | * Removed obsolete //Preserve remote timestamp// session settings. | ||
| + | * Bug fix: Local file with invalid characters replaced could not be explored from the Synchronization checklist window. | ||
| + | * Bug fix: Files modified by local custom command are not always uploaded to the correct remote directory. [[bug>2370]] | ||
| + | * Bug fix: List of network drives in drive drop down and directory tree did not always match. | ||
| + | * Bug fix: Host key prompt did not have the default button. | ||
| + | * Bug fix: When the local path specified on Open directory/Location profile dialog is not existing, when browsing for a new path, the trailing part of the nonexisting path was appended to the new path. | ||
| + | * Bug fix: Trying to enter an invalid link in local panel fails silently. | ||
| + | * Bug fix: After FTP data connection fails to open further use of the session is broken. | ||
| + | * Bug fix: Pasting cut files from the clipboard into a local panel copies them instead of moving them. [[bug>2400]] | ||
| + | * Bug fix: Some edits did not save their value to history when submitting with ''Enter''. | ||
| + | * Bug fix: Too long edit history dropdown can overflow monitor bounds. [[bug>2432]] | ||
| + | * Bug fix: Message box texts and some control labels are not visible to screen readers. [[bug>2413]] | ||
| + | * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | ||
| - | ===== [[5.19.4]] 5.19.4 ((2021-10-24)) ===== | + | ===== [[6.5.7]] 6.5.7 (not released yet) ((2026-06-17)) ===== |
| - | * Translation updated: Hungarian. | + | * Translations completed: Croatian, Finnish, Georgian, Italian and Serbian. |
| - | * Showing release date on the About dialog. | + | * TLS/SSL core upgraded to OpenSSL 3.3.7. |
| - | * Support for custom certificate store files. [[bug>2034]] | + | * Back-propagated fixes from 6.6.2 beta release: |
| - | * Allow other ''2xx'' responses to ''PWD'' command, not only the standard ''257''. [[bug>1768]] | + | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] |
| - | * Bug fix: When there are both site folder and site with the same name and the site was selected when closing the Login dialog, when reopening, the folder was selected instead. | + | ····* Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>;rsakex-double-free]] |
| + | ····* Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] | ||
| + | * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6. | ||
| - | ===== [[5.19.3]] 5.19.3 ((2021-10-11)) ===== | + | ===== [[6.5.6]] 6.5.6 ((2026-03-25)) ===== |
| - | * Translation updated: French. | + | * Translations completed: Macedonian, and updated: Lithuanian, and Russian. |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1l. | + | * TLS/SSL core upgraded to OpenSSL 3.3.6. |
| - | * Using //Documents// folder when the last used local directory in Explorer interface does not exist anymore. [[bug>2011]] | + | * Back-propagated improvements from 6.6–6.6.1 beta release: |
| - | * Bug fix: TLS session resumption is not working for subsequent FTP transfers with TLS 1.3 when the server requires reuse of the session of the previous transfer. [[bug>2018]] | + | ···* New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries. |
| - | ·* Bug fix: Cannot access S3 bucket root when the access policy checks for empty prefix. [[bug>2021]] | + | ···* XML parser upgraded to Expat 2.7.5. |
| - | ·* Bug fix: Response from ProFTPD FTP checksum commands is not recognized. [[bug>2023]] | + | ···* Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] |
| - | ·* Bug fix: Failure when submitting prompt with //"Never ask me again"// selected. [[bug>2022]] | + | ···* Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]] |
| - | ·* Bug fix: Panels are drawn incorrectly after toggling //Full row select//. [[bug>2025]] | + | |
| - | * Bug fix: Timeout while uploading files to some FTP servers using TLS 1.3. [[bug>;2030]] | + | |
| - | * Bug fix: Incomplete listing for S3 servers that indicate truncated listing after the contents and whose pagination is a multiple of 8 (e.g. Backblaze). [[bug>2032]] | + | |
| - | ===== [[5.19.2]] 5.19.2 ((2021-07-21)) ===== | + | ===== [[6.5.5]] 6.5.5 ((2025-11-19)) ===== |
| - | * Translation completed: French. | + | * Translation updated: Vietnamese. |
| - | * Restored compatibility with FTP servers that return malformed ''cdir'' and ''pdir'' entries in directory listing. [[bug>2004]] | + | * Bug fix: Pasting files using local directory tree context menu pastes them to the current directory, instead of the selected one. |
| - | * Fix from [[&url(puttychanges)|PuTTY 0.76]]: Avoid crash in MIT Kerberos for Windows on session restart. | + | * Bug fix: Failure when opening site imported from PuTTY with unsupported SSH proxy. [[bug>2407]] |
| - | * SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.76. It brings the following change: After 30 or so simultaneous sessions, Pageant stops working. [[pbug>win-pageant-max-connections]] | + | * Bug fix: Incorrect hostname validation when connecting to S3 endpoint with certificate that does not cover root S3 hostname. [[bug>2409]] |
| - | * Bug fix: Empty local drive could not be entered. [[bug>2000]] | + | |
| - | * Bug fix: TLS settings in default site settings is not restored when opening Login dialog in some cases. [[bug>2001]] | + | |
| - | * Bug fix: Memory leak when deleting completed background transfers. | + | |
| - | * Bug fix: Hang when running under Task Scheduler or a similar service with session logging enabled. [[bug>2005]] | + | |
| - | ===== [[5.19.1]] 5.19.1 ((2021-06-30)) ===== | + | ===== [[6.5.4]] 6.5.4 ((2025-10-16)) ===== |
| - | * Translation updated: Italian. | + | * Translations updated: Belarusian and Georgian. |
| - | * Incrementing port numbers for secondary connections of tunneled sessions with fixed forwarding port number. [[bug>1996]] | + | * TLS/SSL core upgraded to OpenSSL 3.3.5. |
| - | * Bug fix: Failure when automatically opening a workspace on startup with too many sessions. [[bug>1997]] | + | * XML parser upgraded to Expat 2.7.3. |
| - | * Bug fix: Failure when reading a key file without a trailing newline. [[bug>1998]] | + | * Added new ''ap-southeast-6'' AWS region. |
| - | * Bug fix: Failure when SFTP server resolves ''.'' path to an empty string. [[bug>1999]] | + | * Bug fix: When restored after operation completed while minimized the window is disabled. [[bug>2393]] |
| + | * Bug fix: Command ''md5sums'' is incorrectly used to calculate MD5 checksum instead of ''md5sum''. [[bug>2392]] | ||
| + | * Bug fix: Incomplete FTP upload when the source stream/stdin reads less than requested. [[bug>2395]] | ||
| + | * Bug fix: ''Shift''-clicking //OK// button on Synchronization checklist window when synchronization in the background was not possible still closed the window. | ||
| + | * Bug fix: Failure after reloading file panel when number of files decreases. [[bug>2402]] | ||
| + | * Bug fix: Failure or silently missing headers when when S3 request headers were too long. | ||
| - | ===== [[5.19]] 5.19 ((2021-06-17)) ===== | + | ===== [[6.5.3]] 6.5.3 ((2025-07-16)) ===== |
| - | * When installing an extension from a URL, not saving the extension with BOM. | + | * Translations updated: Belarusian, Brazilian Portuguese [[bug>2386]] and Slovenian. |
| - | ··* Not aborting "Keep remote directory up to date" function when connection is lost while deleting files or looking for differences and the session is reconnected. [[bug>1994]] | + | * TLS/SSL core upgraded to OpenSSL 3.3.4. |
| - | * Bug fix: When handling URL in an existing WinSCP instance, session settings from a stored site named after the URL hostname are not used. [[bug>1992]] | + | * Temporarily not updating drag&drop shell extension for minor changes when installing for current user. [[bug>2381]] |
| - | * Bug fix: It was possible to move toolbar on progress windows. | + | * Bug fix: Failure when reading empty certificate authority configuration. |
| - | * Bug fix: When installing an extension from a file, it is always saved in UTF-8 with BOM, disregarding the original encoding. [[bug>1993]] | + | * Bug fix: Failure when running Maximized. [[bug>2387]] |
| - | * Bug fix: When "Keep remote directory up to date" function was started from command-line, disconnects were not detected. | + | * Bug fix: Incorrect scaling of navigation tree on Login and Preferences dialogs. [[bug>2385]] |
| - | * Bug fix: When connection was lost and not reconnected, the "Keep remote directory up to date" window was not closed. | + | * Bug fix: Incorrect scaling of drag&drop shell extension status display on Preferences dialog. |
| - | ===== [[5.18.6]] 5.18.6 RC ((2021-06-10)) ===== | + | ===== [[6.5.2]] 6.5.2 ((2025-06-18)) ===== |
| - | * XML parser upgraded to Expat 2.4.1. | + | * Translation updated: Brazilian Portuguese and Polish. |
| - | * Installer upgraded to Inno Setup 6.2.0. | + | * Added new ''ap-east-2'' AWS region. |
| - | * Using multipart uploads with S3 protocol on Google Cloud as it is supported there now. | + | * Bug fix: Some translations (notably Japanese) are not loaded. [[bug>2372]] |
| - | * Bug fix: Broken layout of Properties dialog when opening on a secondary display with high DPI primary display. [[bug>1990]] | + | * Bug fix: Directory tree indentation is scaled incorrectly when starting on scaled display on system with scaled primary monitor. [[bug>2374]] |
| - | * Bug fix: The //"Drag & drop shell extension"// installation component was not showing its size. | + | * Bug fix: Wrong icon size is used when starting on secondary monitor with different scaling than the primary one. |
| - | * Bug fix: When saving a local file, the //"Saving"// status on the Internal editor status bar is never cleared. | + | * Bug fix: Failure when proxy hostname resolution fails with SFTP/SCP protocols. [[bug>2376]] |
| - | * Bug fix: No error message is sometimes shown when SFTP server disconnects. [[bug>1991]] | + | * Bug fix: Avoid replacing ''%2F'' with a slash and ''%2E'' with a dot in special cases on upload to avoid path traversal. [[bug>2377]] |
| - | + | * Bug fix: Failure when canceling reconnection on authentication banner, when the connection was already closed by the server. [[bug>2379]] | |
| - | ===== [[5.18.5]] 5.18.5 RC ((2021-05-20)) ===== | + | * Bug fix: Local directories sometimes cannot be deleted. [[bug>2380]] |
| - | + | ||
| - | ··* Translation updated: Farsi. | + | |
| - | * Support for PPK version 3 keys from PuTTY 0.75. [[bug>1986]] [[pbug>ppk3]] | + | |
| - | * SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.75. It brings the following changes: | + | |
| - | * Pageant now supports loading a key still encrypted, and decrypting it later by prompting for the passphrase on first use. [[pbug>pageant-deferred-decrypt]] | + | |
| - | ····* Upgraded default SSH key fingerprint format to OpenSSH-style SHA-256.[[pbug>ssh-fingerprint-formats]] | + | |
| - | * PuTTYgen now supports alternative provable-prime generation algorithm for RSA and DSA. | + | |
| - | * Replaces Windows Pageant's IPC with named pipes. [[pbug>pageant-named-pipe]] | + | |
| - | * Bug fix: PuTTYgen mis-writes OpenSSH private key format for some Ed25519 keys. [[pbug>;openssh-ed25519-corrupt-private-key]] | + | |
| - | * Bug fix: Moving a transfer to background just in between two individual file transfers cancels the transfer. [[bug>1983]] | + | |
| - | * Bug fix: Files saved in external editors are not uploaded in timezones behind UTC. [[bug>1985]] | + | |
| - | * Bug fix: //Sort > By Type icon// for was still incorrect. | + | |
| - | + | ||
| - | ===== [[5.18.4]] 5.18.4 RC ((2021-05-06)) ===== | + | |
| - | + | ||
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1k. | + | |
| - | * XML parser upgraded to Expat 2.3.0. | + | |
| - | * The enumerable returned by ''Session.EnumerateRemoteFiles'' implements the interface implicitly to allow access to the interface method (''GetEnumerator'') from late-bound languages, like PowerShell. | + | |
| - | * Disabling multipart uploads with S3 protocol on Google Cloud they are not supported there. [[bug>1972]] | + | |
| - | * Allow downloading a file from an FTP server via a symbolic link in scripting or when handling a URL. [[bug>1973]] | + | |
| - | * Allowing use of the stream returned by ''Session.GetFile'' from a different thread. [[bug>1978]] | + | |
| - | * Workaround for specific encoding of special characters in filenames by OneDrive WebDAV interface. [[bug>1824]] | + | |
| - | * ''%%https://%%'' URL with known S3 API hostname (''s3.amazonaws.com'', ''digitaloceanspaces.com'', ''storage.googleapis.com'') is interpreted as S3 protocol, instead of WebDAV. | + | |
| - | * Automatically resume transfer when TLS re-key fails. [[bug>1982]] | + | |
| - | * Translation updated: German. | + | |
| - | * Bug fix: Ignoring disconnect messages from the server while closing the connection. [[bug>1977]] | + | |
| - | * Bug fix: Preventing another application (or WinSCP instance) stealing the selected tunnel port. [[bug>1971]] | + | |
| - | * Bug fix: Hang after receiving multiline response from FTP server. [[bug>1963]] | + | |
| - | * Bug fix: //Sort > By Type// icon for was incorrect. | + | |
| - | * Bug fix: Keyboard cues were shown in toolbar buttons drop down menus even when the menu was dropped down with mouse. | + | |
| - | * Bug fix: Failure when connecting to FTPS server that supports client certificates with translation that uses multi byte encoding. [[bug>1966]] | + | |
| - | * Bug fix: Remembered password is forgotten after the first failed (re)connect, even if the failure did not involve the password. [[bug>1967]] | + | |
| - | * Bug fix: Problems with port forwarding are not detected. [[bug>1970]] | + | |
| - | * Bug fix: Potential failure when waiting for a command executed from Console window is aborted. | + | |
| - | * Bug fix: When saving a site with a slash in the username, it is misinterpreted as a site folder. | + | |
| - | * Bug fix: DST start or end causes edited/opened files to be uploaded. [[bug>1974]] | + | |
| - | * Bug fix: Failure when retrieving a directory listing from an FTP server when the data are transmitted in huge amount of tiny chunks. [[bug>1976]] | + | |
| - | * Bug fix: Some operations with relative paths (notably creating and deleting a subdirectory) were failing on encrypted session. | + | |
| - | * Bug fix: //Local > Go to > Explore Directory// was not working with focused remote panel. | + | |
| - | * Bug fix: A workspace session opened from a stored site could not be used for operation in a new window or duplicated. | + | |
| - | * Bug fix: Error when uploading an empty folder in the foreground or any folder in the background to an FTP server with permissions configured. | + | |
| - | * Bug fix: Adding new background transfer while queue processing is disabled and some parallelized transfer was already started results in "waiting" items being endlessly added to the queue list. | + | |
| - | + | ||
| - | ===== [[5.18.3]] 5.18.3 RC ((2021-03-17)) ===== | + | |
| - | + | ||
| - | * Translations completed: Korean and Romanian. | + | |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1j. | + | |
| - | * When opening or switching to a session whose local directory does not exist, open the nearest existing parent directory. [[bug>1951]] | + | |
| - | * Switch-like raw session settings can be configured using ''on''/''off''/''auto'' keywords. | + | |
| - | * Improving validation of port numbers in scripting and .NET assembly. | + | |
| - | * Bug fix: Parsing of multiline VMS FTP listing entries is broken. [[bug>1950]] | + | |
| - | * Bug fix: When moving files to an unvisited folder in an encrypted session, the folder contents is cached as before the move. | + | |
| - | * Bug fix: Failure when dropping files to a disconnected tab or duplicating to a disconnected session. | + | |
| - | * Bug fix: Failure when duplicating a not-yet-connected session. | + | |
| - | * Bug fix: Canceled or failed FTP transfer caused connection loss. | + | |
| - | * Bug fix: Some errors and information while opening a session in scripting were not logged. [[bug>1956]] | + | |
| - | * Bug fix: SFTP uploads are slow. [[bug>1957]] | + | |
| - | * Bug fix: Failure when S3 bucket contains a subfolder with an empty name. [[bug>1958]] | + | |
| - | * Bug fix: Cannot enter an S3 folder that only contains a subfolder with an empty name. [[bug>1959]] | + | |
| - | * Bug fix: Error when moving or copying file with non-ASCII file name using S3 protocol. [[bug>1960]] | + | |
| - | * Bug fix: Timezone is not correctly reflected in S3 timestamps. | + | |
| - | + | ||
| - | ===== [[5.18.2]] 5.18.2 beta ((2021-02-02)) ===== | + | |
| - | + | ||
| - | * Compatibility with Google Cloud Storage when using S3 protocol to access the buckets. [[bug>1939]] | + | |
| - | * Bug fix: Failure when closing with no tab. [[bug>1947]] | + | |
| - | * Bug fix: Debug information is printed at the end of the scripting session when debug logging level is set even if logging is turned off. [[bug>1948]] | + | |
| - | + | ||
| - | ===== [[5.18.1]] 5.18.1 beta ((2021-01-27)) ===== | + | |
| - | + | ||
| - | * Improved FTP support for VMS servers (and potentially for other non-Unix-like systems). [[bug>49]] | + | |
| - | * Translations completed: Brazilian Portuguese, Catalan, Czech, Dutch, Finnish, German, Hungarian, Italian, Japanese, Norwegian, Polish, Portuguese, Russian, Simplified Chinese, Slovak, Spanish, Swedish, Traditional Chinese, Ukrainian and Turkish. | + | |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1i. | + | |
| - | * Preserve file permissions when overwritten files are recycled and transfer resume is disabled. [[bug>1929]] | + | |
| - | * Keyboard-interactive authentication challenges can be copied to the clipboard and links contained in the challenges can be opened. [[bug>1930]] | + | |
| - | * Added method ''RemotePath.EscapeOperationMask'' to .NET assembly. | + | |
| - | * Added method ''ComparisonDifference.Reverse'' to .NET assembly. | + | |
| - | * Implemented method ''ComparisonDifference.ToString'' in .NET assembly. | + | |
| - | * ''Write'', ''CanWrite'', ''Length'' and ''Position'' methods and properties of the ''Stream'' returned by the ''Session.GetFile'' behave as expected for a read-only steam. | + | |
| - | * Allowed using SFTP servers that have problems with SSH_FXP_REALPATH requests. [[bug>1933]] | + | |
| - | * Bug fix: Target file name with escaped operation mask special symbols was incorrectly interpreted as an actual operation mask on some dialogs (upload, duplicate, etc), resulting in misplaced warnings | + | |
| - | * Bug fix: Local path argument of ''Session.PutFileToDirectory'' is incorrectly escaped. [[bug>1931]] | + | |
| - | * Bug fix: Path argument of ''Session.PutFile'' is incorrectly escaped. | + | |
| - | * Bug fix: Failure when using from single-file bundle. [[bug>1932]] | + | |
| - | * Bug fix: ''Session.GetFile'' can fail, if the server responds too quickly. | + | |
| - | * Bug fix: Failure when S3 bucket contains a folder with an empty name. [[bug>1934]] | + | |
| - | * Bug fix: When the active tab was disconnected, closing window with another active session did not require a confirmation. | + | |
| - | * Bug fix: Setting the logging level to -1 (Reduced) does not work in .NET assembly. [[bug>1936]] | + | |
| - | * Bug fix: Ellipses from German command names are not stripped from toolbar buttons. | + | |
| - | * Bug fix: Hang when the stream returned by ''Session.GetFile'' is closed before the download finished. | + | |
| - | * Bug fix: Failure when looking for PuTTY key tools and the ''PATH'' contain invalid paths. [[bug>1942]] | + | |
| - | * Bug fix: Prevent loading session settings that can lead to remote code execution from handled URLs. [[bug>1943]] | + | |
| - | * Bug fix: Hang when S3 server returns a truncated listing with folders only. [[bug>1946]] | + | |
| - | + | ||
| - | ===== [[5.18]] 5.18 beta ((2020-11-30)) ===== | + | |
| - | + | ||
| - | * A complete list of files that are part of a background transfer can be shown. [[bug>1785]] | + | |
| - | * ''Stream'' interface in .NET assembly. [[bug>1738]] | + | |
| - | * With SFTP protocol files can be streamed to stdout and from stdin in scripting. | + | |
| - | * Support SHA-256 fingerprints of TLS/SSL certificates. [[bug>1842]] | + | |
| - | * Extension //[[extension_synchronize_another_server|*]]//. | + | |
| - | * When connecting to new SSH host, its host key can be automatically accepted in scripting and .NET assembly. | + | |
| - | * Optional case-sensitive synchronization. [[bug>71]] | + | |
| - | * Enabled TLS 1.3 by default. | + | |
| - | * XML parser upgraded to Expat 2.2.10. | + | |
| - | * SSH core upgraded to [[&url(puttychanges)|PuTTY 0.74]]. It brings the following change: | + | |
| - | * Security fix: If an SSH server accepted an offer of a public key and then rejected the signature, WinSCP could access freed memory, if the key had come from an SSH agent. [[pbug>vuln-agent-keylist-used-after-free]] | + | |
| - | * Resume transfer when FTP data connection disconnects. [[bug>1878]] | + | |
| - | * Support for ''curve25519-sha256'' KEX. [[bug>1865]] | + | |
| - | * Support for authentication using temporary credentials from AWS Security Token Service (STS). [[bug>1839]] | + | |
| - | * Support for SNI with FTP. [[bug>1895]] | + | |
| - | * Installer upgraded to Inno Setup 6.1.2. | + | |
| - | * Change: Installer needs Windows 7 SP1/2008 R2 SP1. | + | |
| - | * Alternative way to provide credentials in scripting/command-line without URL-encoding. [[bug>1821]] | + | |
| - | * Compatibility with WebDAV servers that incorrectly encode file URL. [[bug>1876]] | + | |
| - | * Optimizing S3 connection buffers for speed. [[bug>1732]] | + | |
| - | * Edited/opened files from a disconnected session can now be attached to new session even if its username was entered only during authentication instead of directly on the Login dialog. [[bug>1890]] | + | |
| - | * Returning to Login dialog, when ad-hoc connection fails. [[bug>1909]] | + | |
| - | * Local ports for active FTP mode can be limited. [[bug>958]] | + | |
| - | * Allow explicit navigation to a hidden local folder by enabling showing of hidden files and folder, if not enabled yet. [[bug>1905]] | + | |
| - | * Added full //Go To// submenu to context menu of panel path label | + | |
| - | * Automatically restore external editor defaults when changing editor command from Notepad to 3rd party editor. [[bug>1872]] | + | |
| - | * Suppress errors when opened/edited files are locked. [[bug>1832]] | + | |
| - | * Support clearing GID/UID flag on directories with new versions of GNU coreutils. [[bug>1850]] | + | |
| - | * Added ''/nointeractiveinput'' to usage screen. | + | |
| - | * List encrypt-then-MAC algorithms in ''/info'' listing. [[bug>1917]] | + | |
| - | * Not using a transfer via temporary file for files that would exceed system length limit with the temporary extension. [[bug>1922]] | + | |
| - | * Automatically closing timed out ''Session''. [[bug>1923]] | + | |
| - | * Logging IANA encryption algorithm names. [[bug>1886]] | + | |
| - | * Displaying, what directory is being read at the end of login to a server, in a tooltip. [[bug>1916]] | + | |
| - | * Use dark window title for the main window in the dark mode on Windows 10 2004. [[bug>1920]] | + | |
| - | * Clarified that WinSCP may crash in the warning message when trying to load too big file into the internal editor. [[bug>1847]] | + | |
| - | * Do not prevent WinSCP from working when jump list cannot be updated. [[bug>1857]] | + | |
| - | * Allow forcing use of ''LIST'' command to retrieve file information in scripting for FTP servers that has broken support for ''MDTM''/''SIZE'' commands. [[bug>1921]] | + | |
| - | * //Duplicate// and //Rename// commands work even for disconnected sessions. | + | |
| - | * IPv6 literals with scope or literals that are already escaped in square brackets are formatted standardly in session URL (instead of URL-encoding them). | + | |
| - | * Allowed longer input on Edit file input box. [[bug>1911]] | + | |
| - | * Added help link to Add extension box and making the box wider. | + | |
| - | * GSSAPI key exchange authentication can be turned on. [[bug>1863]] | + | |
| - | * When trying to open an inaccessible local directory, display an error message, instead of silently doing nothing. | + | |
| - | * Cleanup application data dialog labels cache cleanup checkbox label updated to reflect previously updated functionality. | + | |
| - | * Disabling tips controls until some tips are actually available. | + | |
| - | * Optionally disable moving using drag&drop. [[bug>1884]] | + | |
| - | * Main window follows Login dialog to another monitor, when switched using keyboard shortcuts ''Shift+Win+Left''/''Right''. [[bug>1907]] | + | |
| - | * When path to an existing local directory is specified on the Download options dialog without an operation mask, a noop operation mask is implied. | + | |
| - | * Workaround for wrong description of ''Num *'' keyboard shortcut in menus with German keyboard. [[bug>1889]] | + | |
| - | * Files with the same name except for a letter case are sorted deterministically. [[bug>1894]] | + | |
| - | * Not offering pasting from clipboard on the file panels if the clipboard contains multi-line text. | + | |
| - | * Extending transfer dialog drop down menu size to 16 entries. | + | |
| - | * Bug fix: Local file panel ignored changes in latter case of files and folders. [[bug>1885]] | + | |
| - | * Bug fix: Local custom commands that need session but no remote files were not disabled when session was not connected. | + | |
| - | * Bug fix: Correct letter case variant of remote directory in directory tree was not always selected. [[bug>1891]] | + | |
| - | * Bug fix: With no connected session, shared bookmarks modifications are not preserved. | + | |
| - | * Bug fix: Using list header color appropriate for the actual light/dark column background color (list headers are not dark, unless system wide app dark mode is enabled). | + | |
| - | * Bug fix: ''Session.ParseUrl'' cannot accept fingerprint parameter for sessions over TLS. [[bug>1925]] | + | |
| - | * Bug fix: Custom command patterns ''!S''/''!E'' do not include fingerprint of TLS certificate. | + | |
| - | * Bug fix: Cannot work with filenames ending with space with FTP protocol. [[bug>1900]] | + | |
| - | * Bug fix: Canceling remote path drop down did not reset it back to the current path. | + | |
| - | * Bug fix: Folders in a drive root showed incorrect type name sometimes. | + | |
| - | * Bug fix: Customizing custom commands from Synchronization checklist window was not working. [[bug>1908]] | + | |
| - | * Bug fix: Whole local drive could have been scanned when trying to browse to non-existing or hidden folders. | + | |
| - | * Bug fix: Timed out status bar note was not added to history popup box, while a session is disconnected. | + | |
| - | * Bug fix: //Duplicate// command in remote file context menu operated over selected files instead of the focused file. | + | |
| - | * Bug fix: *nix shell special characters were unintentionally escaped in PuTTY/SSH terminal command patterns. [[bug>1906]] | + | |
| - | + | ||
| - | ===== [[5.17.10]] 5.17.10 ((2021-01-26)) ===== | + | |
| - | + | ||
| - | * Back-propagated security fixes from 5.18.1 release: | + | |
| - | * TLS/SSL core upgraded to OpenSSL 1.1.1i. | + | |
| - | ····* Bug fix: Prevent loading session settings that can lead to remote code execution from handled URLs. [[bug>1943]] | + | |
| [[history_old|Older versions]] | [[history_old|Older versions]] | ||
| ~~NOTOC~~ | ~~NOTOC~~ | ||
| ~~ARCHIVE=history_old~~ | ~~ARCHIVE=history_old~~ | ||