Versie 6.5.7 van WinSCP is verschenen. Met dit open source programma kunnen op een veilige manier bestanden tussen twee computers worden gekopieerd. Het programma ondersteunt FTP, SFTP en SCP. WinSCP is niet alleen als een opzichzelfstaand programma beschikbaar, maar ook als plug-in voor de programma's FAR Manager en Altap Salamander. Hieronder is de changelog voor deze uitgave te vinden.
Changes in version 6.5.7:
- Translations completed: Croatian, Finnish, Georgian, Italian and Serbian, and updated: Slovenian.
- TLS/SSL core upgraded to OpenSSL 3.3.7.
- SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.85. SSH core upgraded to include some fixes.
It brings the following change:
- Security issue: fixed a remotely triggerable use-after-free in Pageant. pageant-deferred-decryption-uaf
- Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. etm-large-packet-overflow
- Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. argon2-parameter-checks
- Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. maxpkt-0-tight-loop
- Security issue: fixed a remotely triggerable double-free in RSA key exchange. rsakex-double-free
- Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. ecdsa-remotely-triggerable-assertion
- Back-propagated fixes from 6.6.2 beta release:
- Bug fix: Failure setting
Session.DebugLogPathwhen running in impersonated context. 2441- Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6.
/i/2005788946.png?f=imagegallery "WinSCP 6.1 screenshot (620 pix)")
:strip_exif()/i/2003418068.png?f=thumbmedium)