Differences

This shows you the differences between the selected revisions of the page.

history 2024-12-21 history 2026-08-08 (current)
Line 3: Line 3:
This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]]. This is a full list of changes for each release of WinSCP. See also [[project_history|Project history]] and [[incompatible_changes|Incompatible changes between versions]].
-Un all+===== [[6.6.3]] 6.6.3 (not released yet) ((2026-08-06)) =====
 +  * Translations completed: Belarusian, Brazilian Portuguese, Catalan, Croatian, Czech, Danish, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Lithuanian, Macedonian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swedish, Tamil, Traditional Chinese and Turkish.
 +  * XML parser upgraded to Expat 2.8.2.
 +  * Source code package build script supports 64-bit target.
 +  * 64-bit build is identified in version information.
 +  * Resolving version of pwsh installed with MSIX.
 +  * Thirdparty information from the About dialog can be copied to the clipboard even when the browser control malfunctions.
 +  * Bug fix: No error is shown when connection fails.
 +  * Bug fix: ''x-name'' URL parameter was incorrectly decoded
 +  * Bug fix: Incorrect number validation.
 +  * Bug fix: Some controls (notably list view headers) do not correctly apply dark mode in 64-bit build. [[bug>2453]]
 +===== [[6.6.2]] 6.6.2 RC ((2026-06-17)) =====
-Un all+  * Experimental 64-bit version of WinSCP. [[bug>618]] 
 +  * Optionally not showing error message when connection is lost while idle. [[bug>2360]] 
 +  * SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.84]]. \\ It brings the following change: 
 +    * Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] 
 +    * Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] 
 +    * Bug fix: spurious //"Network error: Socket is not connected"// when authenticating to some HTTP proxies. [[pbug>http-proxy-auth-wsaenotconn]] 
 +  * TLS/SSL core upgraded to OpenSSL 3.5.7. 
 +  * XML parser upgraded to Expat 2.8.1. 
 +  * Restored faster C TLS/SSL AES implementation. 
 +  * Configurable warning when opening large file in an internal editor. [[bug>2437]] 
 +  * Informing that when preserving directory timestamps is enabled, using multiple connections for transfer is not possible. [[bug>2439]] 
 +  * Warning when pasting a session URL with unsafe settings. 
 +  * When opening session in PuTTY to a host for which WinSCP has multiple host keys cached, using the last key or the key that PuTTY has cached. [[bug>2440]] 
 +  * Always (re)registering drag&drop shell extension during installation, even when the extension is not replaced. 
 +  * Allowed Console interface tool to have ''.exe'' extension to avoid false positive detections by some antiviruses. [[bug>2434]] 
 +  * Using //"username"// and //"hostname"// as one word. 
 +  * Reading all system settings from 64-bit registry. 
 +  * Allow assigning ''null'' to ''Session.SessionLogPath''. [[bug>2438]] 
 +  * Avoiding using ''SSH_FXF_EXCL'' together with ''SSH_FXF_TRUNC'' SFTP file opening flags. [[bug>2444]] 
 +  * Optimized file system monitoring when looking for dummy directory during drag&drop downloads. [[bug>2445]] 
 +  * Change: Not allowing WebDAV redirects to other hosts by default. [[bug>2447]] 
 +  * Change: Not allowing WebDAV redirects to an unencrypted URL by default. [[bug>2448]] 
 +  * Updated to JCL library 2.9 commit c669fd12. 
 +  * Bug fix: Failure when trying to connect via HTTP proxy to FTP host with excessively long login details. [[bug>2435]] 
 +  * Bug fix: Buffer overflow in Console interface tool. [[bug>2436]] 
 +  * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] 
 +  * Bug fix: Message boxes from secondary windows (like the internal editor) caused application to move to the background when when the main window was minimized. [[bug>2443]] 
 +  * Bug fix: Heap over-read via crafted encrypted filename. [[bug>2449]] 
 +  * Bug fix: Slashes in filenames can cause path traversal when invalid filename characters replacement is disabled. [[bug>2450]]
-===== [[6.3.6]] 6.3.6 ((2024-11-25)) =====+===== [[6.6.1]] 6.6.1 beta ((2026-04-01)) =====
-  * Back-propagated improvements and fixes from 6.4.1 beta and 6.4.2 beta releases: +  * Support for OpenSSH ssh-agent. [[bug>1682]] 
- ···* Compatibility with new OneDrive WebDAV interface. [[bug>2321]] +  * Optionally connecting all workspace/folder sessions immediately. [[bug>1026]] 
- ···* XML parser upgraded to Expat 2.6.3+  * Preserving panel scroll position after rename. [[bug>2425]] 
- ···* Added new ''ap-southeast-5'' AWS region+  * ''Ctrl+C'' works in list views on 'Server and protocol information' dialog. 
- ···* Bug fix: After delete operation is moved to background, some operations (notably editing) do not work anymore. [[bug>2319]] + ·* Preventing moving or copying a file or folder over ancestor folder with the same name. [[bug>2427]] 
- ···* Bug fix: ''Shift+Ctrl+P'' keyboard shortcut on Login dialog to open site in PuTTY without closing the dialog does not work. [[bug>2320]] + * WebDAV/HTTP core upgraded to neon 0.37.1. 
- ···* Bug fix: Hang when trying to open an inaccessible drive from drive drop down menu+··* XML parser upgraded to Expat 2.7.5
-  * Translations completed: Danish, and updated: Belarusian.+ ·* Bug fix: Some menus were not working on displays to the left or above the primary display. [[bug>2423]] 
 +··* Bug fix: Mouse wheel downwards scrolling did not work on toolbar drop down lists. 
 +··* Bug fix: Once any control of permissions popup box was focused the popup no longer closed when user clicked outside of it. 
 +··* Bug fix: Failure when closing Transfer settings dialog with //X// button while a permissions popup box control is focused. [[bug>2420]] 
 + ·* Bug fix: Failure when switching to a session that is being reconnected
 +· * Bug fix: Failure when the first bit of an SFTP response is set. [[bug>2422]] 
 + ·* Bug fix: Copying to clipboard with ''Ctrl+C'' from 'Server and protocol information' was broken. 
 +  * Bug fix: Protocol additional information scrolling was broken. 
 + * Bug fix: Master password dialog was missing //Help// button. 
 +  * Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]] 
 + ·* Bug fix: Wrapped settings values from Raw Site Settings dialog were not preserved. 
 +  * Bug fix: Some files modified by local custom command in SCP session fail to upload back. [[bug>2428]] 
 +  * Bug fix: Whole //Key exchange// page was incorrectly hidden when //"Handles SSH key re-exchange badly"// bug was enabled
 +  * Bug fix: Some message boxes leak GDI handle. [[bug>2430]] 
 +  * Bug fix: Login dialog leaks GDI handles. [[bug>2431]]
-===== [[6.3.5]] 6.3.5 ((2024-09-10)) =====+===== [[6.6]] 6.6 beta ((2026-02-02)) =====
-  * TLS/SSL core upgraded to OpenSSL 3.2.3+  * Synchronizing two local directories. [[bug>2020]] 
-  * XML parser upgraded to Expat 2.6.3+  * Compiler upgraded to Clang/bcc32c. [[bug>618]] 
-  * Better error message when server is using incompatible TLS protocol version. [[bug>2299]] +  * Inactive sessions can be automatically reconnected. [[bug>2232]] 
-  * Translations updated: Belarusian and Finnish+  * Added dark theme support to: [[bug>1696]] 
-  * Bug fix: Incorrect //"Credentials were not specified"// error when authentication fails due to incorrect password with FTP protocol. [[bug>2302]] +    * Login dialog. [[bug>2345]] 
-  * Bug fix: Stall when switching from //S3// to other protocol on Login dialog on some networks. [[bug>2309]]+    * Transfer Options dialog. 
 +    * Message boxes. 
 +    * Queue column headers. [[bug>2356]] 
 +    * Progress window. 
 +    * Authentication Progress window. [[bug>2358]] 
 +    * Bug fix: Scrollbar colors did not always reflect the color theme 
 +  * Using modern directory selection dialog that scales correctly and allows creating new directory. [[bug>2373]] [[bug>2389]] 
 +  * Optimized GUI when working with large subdirectory selection. [[bug>2396]] 
 +  * Change: Default to UTF-8 encoding in internal editor. [[bug>2397]] 
 +  * New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries. 
 +··* TLS/SSL core upgraded to OpenSSL 3.5.5. 
 +  * WebDAV/HTTP core upgraded to neon 0.36.0
 +  * XML parser upgraded to Expat 2.7.4. 
 +  * Installer upgraded to Inno Setup 6.7.0 with dark mode support enabled
 +  * Increased WinSCP memory limit to 4 GB. [[bug>2412]] 
 +  * Defined and implemented interface for the .NET library. By @mjkent. [[bug>856]] 
 +  * Optimized TLS/SSL AES implementation. 
 +  * Restoring ability to restart Explorer to allow upgrade of drag&drop shell extension, when installing for current user, as after-restart replacement is not possible without Administrator privileges. [[bug>2381]] 
 +  * MSI toolset updated to WiX 5
 +  * Commands to copy paths to the clipboard on the Synchronization checklist window
 +  * Cryptography optimization. 
 +  * Support long AWS/S3 session tokens. [[bug>2403]] 
 +  * Prevent hang when new device is attached or removed while some mapped network drive is not available. [[bug>2382]] 
 +  * Copy and paste improvements: 
 +    * Consistently renaming local files dropped or pasted back to their source directory to avoid collisions. 
 +····* Bug fix: When copying local files to clipboard from system context menu, "cut" state of previously cut files was not cleared. 
 +  * Not redundantly verifying WebDAV or S3 certificate in Windows Certificate store if it is already marked as trusted in session settings. [[bug>2404]] 
 +  * Provide SNI when opening FTP data connection. [[bug>2410]] 
 +  * Optimized synchronization checklist sorting. 
 +  * Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] 
 +  * Convert unsupported SSH proxy to SSH tunnel when importing site from PuTTY. [[bug>2408]] 
 +  * FTP directory listing falls back to the other active/passive mode, consistently with file transfers. 
 +  * Consistently calling command to open window with specific directory //Explore//, instead of sometimes //Browse//. 
 + * Consistently referring to file last modification timestamp column as //Date modified//. 
 +  * With INI file provided on command-line, using the same INI file when starting a new instance. 
 +  * Windows shell local file copy status window is centered on the main window. 
 +  * Made taskbar flashing configurable in GUI. [[bug>2411]] 
 +  * Control labels on transfer settings dialogs do not show keyboard accelerator cue, until ''Alt'' key is pressed. 
 +  * Not using drag images even with directory trees. [[bug>1274]] 
 +  * Allow configuring checksum commands. [[bug>2394]] 
 +  * Updated to JCL library 2.8.1. 
 +  * Updating jump list only when running with GUI. 
 +  * Made space on permissions box for longer translations. [[bug>2398]] 
 +  * Opening //Default Apps// //Settings// page directly to open it in the foreground and avoid flashing //Control Panel// window. 
 +  * Improving order in which Windows Narrator reads window controls. 
 +  * All edit boxes with history consistently do not auto complete and show 16 entries in the drop down. 
 +  * Removed obsolete //Preserve remote timestamp// session settings. 
 +  * Bug fix: Local file with invalid characters replaced could not be explored from the Synchronization checklist window. 
 +  * Bug fix: Files modified by local custom command are not always uploaded to the correct remote directory. [[bug>2370]] 
 +  * Bug fix: List of network drives in drive drop down and directory tree did not always match. 
 +  * Bug fix: Host key prompt did not have the default button. 
 +  * Bug fix: When the local path specified on Open directory/Location profile dialog is not existing, when browsing for a new path, the trailing part of the nonexisting path was appended to the new path. 
 +  * Bug fix: Trying to enter an invalid link in local panel fails silently. 
 +  * Bug fix: After FTP data connection fails to open further use of the session is broken. 
 +  * Bug fix: Pasting cut files from the clipboard into a local panel copies them instead of moving them. [[bug>2400]] 
 +  * Bug fix: Some edits did not save their value to history when submitting with ''Enter''. 
 +  * Bug fix: Too long edit history dropdown can overflow monitor bounds. [[bug>2432]] 
 +  * Bug fix: Message box texts and some control labels are not visible to screen readers. [[bug>2413]] 
 +  * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]]
-===== [[6.3.4]] 6.3.4 ((2024-06-17)) =====+===== [[6.5.7]] 6.5.7 (not released yet) ((2026-06-17)) =====
-  * TLS/SSL core upgraded to OpenSSL 3.2.2+  * Translations completed: Croatian, Finnish, Georgian, Italian and Serbian. 
-  * Translations updated: Belarusian, Danish and Russian. +··* TLS/SSL core upgraded to OpenSSL 3.3.7
-  * Standalone executable installer can run over corrupted MSI installation. [[bug>2294]] +  * Back-propagated fixes from 6.6.2 beta release: 
- ·* Support for up-to 16KB WebDAV cookies. [[bug>2289]] +····* Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] 
- ·* Bug fix: Failure when trying to automate file synchronization by checksum on an SFTP server that does not support it natively. [[bug>2291]] + ···* Security issue: fixed a remotely triggerable double-free in RSA key exchange. [[pbug>rsakex-double-free]] 
-  * Bug fix: Remote panel does not refresh after //"ZIP and Upload"//. [[bug>2292]]+ ···* Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. [[pbug>ecdsa-remotely-triggerable-assertion]] 
 +  * Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6.
-===== [[6.3.3]] 6.3.3 ((2024-04-16)) =====+===== [[6.5.6]] 6.5.6 ((2026-03-25)) =====
-  * SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.81]]. \\ It brings the following change+  * Translations completed: Macedonian, and updated: Lithuanian, and Russian
-    * Security fix for CVE-2024-31497: NIST P521/ecdsa-sha2-nistp521 signatures are no longer generated with biased values of //k//. The previous bias compromises private keys. [[bug>2285]] [[pbug>vuln-p521-bias]] +  * TLS/SSL core upgraded to OpenSSL 3.3.6. 
- * Translation updated: Belarusian. +··* Back-propagated improvements from 6.6–6.6.1 beta release
-··* XML parser upgraded to Expat 2.6.2+    * New DigiCert EV code signing certificate valid until March 2029 is used for signing binaries
- ·* Support for TortoiseMerge in //Compare Files// extension. [[bug>2279]] + ···* XML parser upgraded to Expat 2.7.5
- ·* Bug fix: File panel does not have focus after Login in Explorer interface. [[bug>2276]] + ···* Support for Beyond Compare 5 in Compare Files extension. [[bug>2417]] 
-  * Bug fix: Failure when closing the last remote tab. [[bug>;2283]] + ···* Bug fix: Checking if edited/opened file was modified externally didn't work for inactive sessions. [[bug>2426]]
-  * Bug fix: Copy and paste to another application in Store installation sometimes does not work. [[bug>2284]]+
-===== [[6.3.2]] 6.3.2 ((2024-03-12)) =====+===== [[6.5.5]] 6.5.5 ((2025-11-19)) =====
-  * Translation updated: Belarusian+  * Translation updated: Vietnamese
-  * XML parser upgraded to Expat 2.6.1. +  * Bug fix: Pasting files using local directory tree context menu pastes them to the current directory, instead of the selected one
-  * Optimized startup when right panel local directory tree is not visible. +  * Bug fix: Failure when opening site imported from PuTTY with unsupported SSH proxy. [[bug>2407]] 
- * Workaround for SFTP servers (Cisco) which omit message field from status response. [[bug>2272]] +  * Bug fix: Incorrect hostname validation when connecting to S3 endpoint with certificate that does not cover root S3 hostname. [[bug>2409]]
-  * Bug fix: Password pipe cannot be used to open a session in an existing instance. [[bug>2265]] +
-  * Bug fix: Hang when canceling connection while reading remote directory. [[bug>2266]] +
-  * Bug fix: Failure when canceling FTP connection while reading remote directory. [[bug>2267]] +
-  * Bug fix: Cannot start on Windows XP. [[bug>2268]] +
-  * Bug fix: Installation hangs when adding installation path to search path when executed in session 0. [[bug>2270]] +
-  * Bug fix: Misplaced stored site use warning in scripting when session name is specified. [[bug>2271]] +
-  * Bug fix: Correcting neon version in About box and logs.+
-===== [[6.3.1]] 6.3.1 ((2024-02-21)) ===== +===== [[6.5.4]] 6.5.4 ((2025-10-16)) =====
-  * Translation completed: Norwegian. +
-  * Bug fix: Badly encoded SFTP packet when renaming a file using SFTP version 5 and newer. [[bug>2259]] +
-  * Bug fix: Failure when trying to synchronize files by checksum on server that does not support it. [[bug>2260]] +
-  * Bug fix: Random hang/failure when closing FTP TLS 1.3 connection. [[bug>2261]] +
-  * Bug fix: Cannot use IPv6 literal as hostname on Login dialog. [[bug>2263]]+
-===== [[6.3]] 6.3 ((2024-02-14)) =====+··* Translations updated: Belarusian and Georgian. 
 +  * TLS/SSL core upgraded to OpenSSL 3.3.5. 
 +  * XML parser upgraded to Expat 2.7.3. 
 +  * Added new ''ap-southeast-6'' AWS region. 
 +  * Bug fix: When restored after operation completed while minimized the window is disabled. [[bug>2393]] 
 +  * Bug fix: Command ''md5sums'' is incorrectly used to calculate MD5 checksum instead of ''md5sum''. [[bug>2392]] 
 +· * Bug fix: Incomplete FTP upload when the source stream/stdin reads less than requested. [[bug>2395]] 
 +· * Bug fix: ''Shift''-clicking //OK// button on Synchronization checklist window when synchronization in the background was not possible still closed the window. 
 +··* Bug fix: Failure after reloading file panel when number of files decreases. [[bug>2402]] 
 +  * Bug fix: Failure or silently missing headers when when S3 request headers were too long.
-··* XML parser upgraded to Expat 2.6.0. +===== [[6.5.3]] 6.5.3 ((2025-07-16)) =====
-··* Bug fix: Hang when prompt pops up while SFTP session is being reconnected. [[bug>2258]]+
-===== [[6.2.4]] 6.2.4 RC ((2024-02-03)) =====+··* Translations updated: Belarusian, Brazilian Portuguese [[bug>2386]] and Slovenian. 
 +  * TLS/SSL core upgraded to OpenSSL 3.3.4
 +  * Temporarily not updating drag&drop shell extension for minor changes when installing for current user. [[bug>2381]] 
 +· * Bug fix: Failure when reading empty certificate authority configuration. 
 +  * Bug fix: Failure when running Maximized. [[bug>2387]] 
 +  * Bug fix: Incorrect scaling of navigation tree on Login and Preferences dialogs. [[bug>2385]] 
 +· * Bug fix: Incorrect scaling of drag&drop shell extension status display on Preferences dialog.
-··* Translations completed: Farsi, French, Japanese, Spanish and Traditional Chinese. +===== [[6.5.2]] 6.5.2 ((2025-06-18)) =====
-  * TLS/SSL core upgraded to OpenSSL 3.2.1. +
-  * WebDAV/HTTP core upgraded to neon 0.33.0. +
-· * Bug fix: Failure when trying to upload file using double-click over disconnected session. [[bug>2254]] +
-· * Bug fix: Failure after long frequent use of session tabs. [[bug>2255]] +
-  * Bug fix: //New tab// icon is drawn incorrectly on Explorer interface with //Show selective text labels// turned off. [[bug>2257]] +
-  * Bug fix: Failure when switching to another application while new session is being opened using //New Tab// tab. [[bug>2251]]+
-===== [[6.2.3]] 6.2.3 RC ((2024-01-19)) ===== +··* Translation updated: Brazilian Portuguese and Polish. 
- +  * Added new ''ap-east-2'' AWS region. 
-  * Added new ''ca-west-1'' AWS region. +  * Bug fix: Some translations (notably Japanese) are not loaded. [[bug>2372]] 
-  * Translations completed: Catalan, Czech, Dutch, Finnish, German, Hungarian, Italian, Korean, Polish, Portuguese, Romanian, Russian, Simplified Chinese, Slovak, Turkish and Tamil; and updated: Japanese+  * Bug fix: Directory tree indentation is scaled incorrectly when starting on scaled display on system with scaled primary monitor. [[bug>2374]] 
-  * Support for ''posix-rename@openssh.com'' SFTP extension. [[bug>2231]] +  * Bug fix: Wrong icon size is used when starting on secondary monitor with different scaling than the primary one
-  * When cleaning up application data, deleting even ''Martin Prikryl'' and ''WinSCP 2'' root keys, if they remain empty. +  * Bug fix: Failure when proxy hostname resolution fails with SFTP/SCP protocols. [[bug>2376]] 
-  * Ignoring attempts to directly move/duplicate file over itself, as if protocol requires deleting, the file would be lost. +  * Bug fix: Avoid replacing ''%2F'' with a slash and ''%2E'' with a dot in special cases on upload to avoid path traversal. [[bug>2377]] 
-  * Configurable FTP TLS shutdown procedure. [[bug>2250]] +  * Bug fix: Failure when canceling reconnection on authentication banner, when the connection was already closed by the server. [[bug>2379]] 
-  * Not failing connection when FTP server responds to ''CSID'' command with an error. [[bug>2253]] +  * Bug fix: Local directories sometimes cannot be deleted. [[bug>2380]]
-  * Bug fix: Certificate authority cache was not copied to new configuration storage nor cleaned up with other caches. +
-  * Bug fix: ''ssh'' protocol URL handling was not completely unregistered+
-  * Bug fix: Reported transfer size is rarely incorrect during FTP downloads. +
- * Bug fix: Failure after connecting to server. [[bug>2251]] +
-  * Bug fix: FTP ''CSID'' command does not end with semicolon. [[bug>2252]] +
- +
-===== [[6.2.2]] 6.2.2 beta ((2023-12-22)) ===== +
- +
-  * SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.80]]. \\ It brings the following change: +
-    * Mitigations for SSH protocol "Terrapin" vulnerability. [[bug>2246]] [[pbug>vuln-terrapin]] +
-  * Support for ''Include'' directive when importing sites from OpenSSH. [[bug>2239]] +
- * Change: .NET assembly collections are tagged with ''ClassInterfaceType.None'' to avoid warnings from ''regasm''. +
-  * Not using directory listing to keep FTP session alive by default. [[bug>2244]] +
-  * Windows Store installation on Windows 11 was incorrectly using INI file for configuration storage by default. [[bug>2245]] +
-  * Bug fix: Find dialog file list is scaled incorrectly on some multi monitor systems with different scaling. [[bug>2241]] +
-  * Bug fix: Cannot browse long local paths. [[bug>2242]] +
- +
-.+
 +[[history_old|Older versions]]
 +~~NOTOC~~
 +~~ARCHIVE=history_old~~

Last modified: by 182.232.234.42