Differences
This shows you the differences between the selected revisions of the page.
| 2026-11-11 | 2026-11-11 | ||
| bug 2485 (martin) | moving 2485 up (martin) | ||
| Line 20: | Line 20: | ||
| * XML parser upgraded to Expat 2.10.0. | * XML parser upgraded to Expat 2.10.0. | ||
| * Installer upgraded to Inno Setup 6.7.4. | * Installer upgraded to Inno Setup 6.7.4. | ||
| + | * Security fix: Prevent loading PuTTY and custom GSS library settings that can lead to remote code execution from handled URLs. [[bug>2485]] | ||
| * Bug fix: Memory leak in encrypted HTTP/S3/WebDAV connections. [[bug>2476]] | * Bug fix: Memory leak in encrypted HTTP/S3/WebDAV connections. [[bug>2476]] | ||
| * Bug fix: Recursive SCP directory download allows local path traversal when replacing of invalid characters in filenames is disabled. [[bug>2477]] | * Bug fix: Recursive SCP directory download allows local path traversal when replacing of invalid characters in filenames is disabled. [[bug>2477]] | ||
| Line 26: | Line 27: | ||
| * Bug fix: Remote file Properties unreadable with themes disabled. [[bug>2483]] | * Bug fix: Remote file Properties unreadable with themes disabled. [[bug>2483]] | ||
| * Bug fix: Failure when showing a message box and its accessibility interface is requested too early. [[bug>2484]] | * Bug fix: Failure when showing a message box and its accessibility interface is requested too early. [[bug>2484]] | ||
| - | * Security fix: Prevent loading PuTTY and custom GSS library settings that can lead to remote code execution from handled URLs. [[bug>2485]] | ||
| ===== [[6.7]] 6.7 ((2026-10-14)) ===== | ===== [[6.7]] 6.7 ((2026-10-14)) ===== | ||