1
0
mirror of https://github.com/winscp/winscp.git synced 2026-10-24 02:28:55 +03:00

9908 Commits

Author SHA1 Message Date
Martin Prikryl
1bdfc8066c Bumping devel version to 6.5.9
Source commit: 4323bd1a203811988212ae1fca9ec1548bfe6ae4
2026-09-10 16:49:38 +02:00
Martin Prikryl
2f89cb6ac0 Bumping devel version to 6.5.8
Source commit: 2aaf577d4e5861ef07fd96caf4cf5830e9eb85f3
6.5.8
2026-09-10 00:34:32 +02:00
Martin Prikryl
d0b87ea398 Showing that WinSCP includes features on top of PuTTY 0.83
Source commit: 0640e953ab6a214cb7e21a1c9cac26af209dd5a1
6.5.7
2026-09-09 15:06:48 +02:00
Martin Prikryl
2a71d8b219 Bumping .NET assembly version number before 6.5.7 release as there were changes
Source commit: 6f3552b8770b75a6de1cda33c7f4147d5771ff1d
2026-09-09 14:26:25 +02:00
Martin Prikryl
afbcdcd14b Updating PuTTY 0.85 fixes to bcc32
Source commit: 0fe575bc262df9e28a86ab8e0ba39163410e56b6
2026-08-26 00:47:07 +02:00
Martin Prikryl
fec8b0d00d Merge branch 'thirdparty_hotfix' into hotfix
# Conflicts:
#	source/putty/ssh/connection2.c

Source commit: b4afce76ac7977473f5f01de24061065eecc66f2
2026-08-26 00:46:09 +02:00
Simon Tatham
2b1419f914 Validate Argon2 parameters when loading a PPK file.
This prevents a couple of different possible crashes if a PPK file
constructed by something other than PuTTYgen contains invalid
parameters. If parallelism is 0 then the Argon2 code can divide by
zero; if the memory requirement is too small for the parallelism then
it can overrun a buffer.

Signed-off-by: Martin Prikryl <martin@winscp.net>

Source commit: e66db8e4bd600fd9d92467fb8b6cc31cd86fc0ad
2026-08-26 00:45:11 +02:00
Simon Tatham
f4157b1cd4 Reject remote max packet size 0 when opening channels.
This case led to a tight loop in ssh2_try_send, which would calculate
the largest size of data packet it could send on a channel as the min
of various things including the max packet size; find, of course, that
the largest size was therefore 0; send no data; and loop round again
to keep trying.

There's nothing you can sensibly do about that by the time you get to
ssh2_try_send, so a better response is to reject the connection at
open time.

When the connection is initiated from the far end (i.e. we receive
CHANNEL_OPEN) we can do this relatively nondestructively, by rejecting
just that one channel-open request. When it's initiated from our end,
and the CHANNEL_OPEN_CONFIRMATION we got back contained the zero
maxpkt, there's no similar protocol method for rejecting the
confirmation, so instead we disconnect the whole SSH session.

(That seems harsh, but I think it's reasonable, because one reason for
aborting an SSH connection is that you genuinely don't _know_ what
your client can legally do next – and this is exactly that situation.)

Signed-off-by: Martin Prikryl <martin@winscp.net>

Source commit: 5b7de97f5fcb3f4b957e9585ea15018831c8b547
2026-08-26 00:44:50 +02:00
Simon Tatham
28b3293ac1 Fix buffer overflow in ETM mode packet decode.
The space allocated for the decrypted packet was 4 bytes too small,
because we end up reading (s->packetlen + s->maclen) bytes into it,
but we allocated the buffer based on the largest possible size of
(s->len + s->maclen). The two differ by 4. So if a packet is within 4
bytes of the largest size accepted by the check of s->len against
OUR_V2_PACKETLIMIT, then it overruns the buffer allocated for the
following BPP_READ.

Thanks to Yukihiro Nakamura for spotting this.

Signed-off-by: Martin Prikryl <martin@winscp.net>

Source commit: dc1ea030899bc7ec7ed4388cfc01757c41816f0c
2026-08-26 00:44:30 +02:00
Martin Prikryl
fd91110e2a Merge branch 'thirdparty_hotfix' into hotfix
Source commit: 501c3d9161972483dde1dd9d43cc1c183c958c2a
2026-06-23 00:56:46 +02:00
Martin Prikryl
538bc331dd Merge branch 'thirdparty' into thirdparty_hotfix
Source commit: 2c3cdff2c1af637c9ccf0aa5dee28772eb42cc97
2026-06-22 17:13:15 +02:00
Martin Prikryl
acb5f14699 Merge branch 'master' into hotfix
Source commit: 6f9ef689e119a87ec12a16671716367a4d79e0ad
2026-06-22 16:29:59 +02:00
Martin Prikryl
74a8c03f4b Merge remote-tracking branch 'origin/translations'
Source commit: 2f3acf50ffec4de210912ae12c14f4d8e664699f
2026-06-17 15:37:42 +02:00
Martin Přikryl
a6d3971084 Restoring official Inno Setup translation
FI.113

Translated: 100%
WinSCP 6.5.6

Source commit: d2ae899e1c503bca17d6764812b5fce7a0f34290
2026-06-17 15:35:11 +02:00
Sami Kuusisto
4fb3f87750 Finnish translation reviewed and corrected for language, spelling, and ICT terminology.
FI.112

Translated: 100%
WinSCP 6.5.6

Source commit: 2824eadcfef6ab8f8001b7674e2d41e2320f5d2b
2026-06-17 15:33:54 +02:00
Martin Prikryl
bb46bb15db Bug fix: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. CVE-2026-45447 fix from OpenSSL 3.4.6.
Cherry picking OpenSSL 3.4.6 commit "Fix possible use-after-free in OpenSSL PKCS7_verify() - Fixes CVE-2026-45447"
a541ae8bfe

Source commit: 63e80f855f5d545aea3004ddf9dd4635a01e380e
2026-06-13 00:51:40 +02:00
Martin Prikryl
de373bb36e Merge remote-tracking branch 'origin/translations'
Source commit: a517ade865e78fdd7251a87ed5d53e226b90d03f
2026-06-10 16:23:39 +02:00
Temuri Doghonadze
9644aaf492 KA.11
Translated: 81%
WinSCP 6.5.6

Source commit: 0ed8739d040cb0c3ac6e81e8e74416da88bf806a
2026-06-06 01:19:15 +02:00
Mario Galevski
d1f9bbc7b8 Serbian Latin (srl) full translation update - 3506 strings, 100% complete. Uploaded 2026-06-03.
SRL.46

Translated: 100%
WinSCP 6.5.6

Source commit: 13cf98140e22434a7d2ab227abb62f7a445a95b1
2026-06-04 00:43:12 +02:00
Mario Galevski
0db175a07c Croatian (hr) full translation update - 3517 strings, 100% complete. Uploaded 2026-06-03.
HR.40

Translated: 100%
WinSCP 6.5.6

Source commit: 75d82dca3772db2185037ae651c6348a70d87fa0
2026-06-04 00:42:23 +02:00
Martin Prikryl
1dacf16980 Merge remote-tracking branch 'origin/translations'
# Conflicts:
#	translations/PT.ini

Source commit: 35be3e12397dab71ed5b747bc9954515270be635
2026-06-02 01:21:52 +02:00
Martin Prikryl
1ff7647ca2 Merge branch 'thirdparty'
Source commit: ff1126042810cf1f1bf9cfee5ddb1690973fc0d0
2026-06-02 01:19:23 +02:00
Martin Prikryl
f0ce0b0a1e Merge branch 'thirdparty_hotfix' into thirdparty
Source commit: 109ed37d677485c2d53f226882338cff6195d87a
2026-06-02 01:16:45 +02:00
Martin Prikryl
95ac37750b rsakex-double-free and ecdsa-remotely-triggerable-assertion fixes from PuTTY 0.84
Source commit: 5fae646d5c4e8b820fe0a423f2758c33259f0b4e
2026-06-02 01:14:19 +02:00
Martin Prikryl
8d257cc59a Merge branch 'hotfix'
Source commit: b7cb499bdc47a8b5e54277bec7ea5d7f28b0ec89
2026-06-02 01:10:36 +02:00
Martin Prikryl
ce7699c617 Merge branch 'thirdparty_hotfix' into hotfix
Source commit: 2b8a2d2bab169ca7ba5b36f1face51a4de3cecb4
2026-06-02 01:07:40 +02:00
Martin Prikryl
94af53fd2d rsakex-double-free and ecdsa-remotely-triggerable-assertion fixes from PuTTY 0.84
(cherry picked from commit 5fae646d5c4e8b820fe0a423f2758c33259f0b4e)

Source commit: 309869e4787025160d0b47f342a26e18e8605d89
2026-06-02 01:04:36 +02:00
Martin Přikryl
cb2c827695 Accelerator
PT.88

Translated: 100%
WinSCP 6.5.6

Source commit: 859ce680bc5732c955894d6a9e520ea24e618ffd
2026-05-26 00:48:45 +02:00
Martin Přikryl
4ea3fb2580 GitHub Pull request #62 "Update name Pageant" by maisondasilva
PT.87

Translated: 100%
WinSCP 6.5.6

Source commit: 888da3f5ddf5fed9174e9c43f27f2b111d9615fc
2026-05-26 00:47:16 +02:00
Maison da Silva
c3e7c9cd42 Update name Pageant
Update name Pageant
https://winscp.net/forum/viewtopic.php?t=5502#129751
2026-05-25 09:18:24 +02:00
Martin Prikryl
c13a46c1e4 Issue 2441 – Failure setting Session.DebugLogPath when running in impersonated context
https://winscp.net/tracker/2441
(cherry picked from commit 1aadd6cfa3)

Source commit: b6bb24afa9db57c8d5b3ac2d0cae67b83cc6b15c
2026-05-22 01:02:07 +02:00
Martin Přikryl
43e937e62e Resetting to official Inno Setup translation
IT.130

Translated: 100%
WinSCP 6.5.6

Source commit: 101df5c7d4c68626e87d89827c3d4c8d91aaac57
2026-05-11 14:35:23 +02:00
bovirus
e44adb90bb Italian language update
IT.129

Translated: 100%
WinSCP 6.5.6

Source commit: 0bbfa8a7d0d7384e85b80794565589209b179fb4
2026-05-07 01:06:56 +02:00
Martin Přikryl
c565f306b1 Resetting to official Inno Setup translation
IT.128

Translated: 100%
WinSCP 6.5.6

Source commit: 7380d00be801bfc71f42c013e2c39f0258881589
2026-05-06 07:23:34 +02:00
Martin Přikryl
2e6a07199f Resetting to official Inno Setup translation
SL.34

Translated: 81%
WinSCP 6.5.6

Source commit: 13927cce0fe87d63aeb92975d3af402ad1c00023
2026-05-06 07:22:25 +02:00
Martin Přikryl
868eb0f702 Corrected a few typos and other minor issues
FI.111

Translated: 100%
WinSCP 6.5.6

Source commit: 357233ff8753b5ad2768a8b1521255e46c8d1038
2026-05-06 07:21:37 +02:00
Žiga Vodnjov Frelih
e51c2c7818 Well...I have translated I think I lot last week. I was doing about a fer % a day.
Also today fixed some of the "Warnings".

Now I need again a little pause from this ;)

SL.33

Translated: 81%
WinSCP 6.5.6

Source commit: 474e753e3783a36ac7077b0b5e58dfea7fb417eb
2026-05-06 07:20:48 +02:00
bovirus
2f9079dafc Fix typos
IT.127

Translated: 100%
WinSCP 6.5.6

Source commit: 01ce182f0e9a3b24d52be1542e318331794f1a9f
2026-05-06 07:19:57 +02:00
bovirus
f4626e1c4e Italian language update
IT.126

Translated: 100%
WinSCP 6.5.6

Source commit: 1bdd7cc85fc33a4627c770e7254055bbb57dc03a
2026-05-06 07:19:02 +02:00
bovirus
f54fd5637d Final changes
IT.125

Translated: 100%
WinSCP 6.5.6

Source commit: 878493912033596015def48a673ee691390f4021
2026-05-06 07:17:57 +02:00
bovirus
45b743dce8 Update Italian language
IT.124

Translated: 100%
WinSCP 6.5.6

Source commit: 6ed5f756de450cf4f93bade6d090d8fceecf620e
2026-05-06 01:01:57 +02:00
bovirus
deb4085872 Fix string endings
IT.123

Translated: 100%
WinSCP 6.5.6

Source commit: 2d0b64e3ca27e28e84271b998e30867d793d7a3c
2026-05-06 01:01:17 +02:00
Martin Přikryl
d0aeca0343 Typo (Pagent)
UK.47

Translated: 90%
WinSCP 6.5.6

Source commit: e6d3128c587b5caaf5abec1fbeb1cb915bba254e
2026-05-06 00:59:56 +02:00
Martin Přikryl
74b0113054 Automatic changes
UK.46

Translated: 90%
WinSCP 6.5.6

Source commit: 22cf92bd2666e78a1773da5a753935d3787b4830
2026-05-06 00:58:48 +02:00
Martin Přikryl
f95a678c1f Typo (Pagent)
SL.32

Translated: 60%
WinSCP 6.5.6

Source commit: a3d5b04184ab4cb68b0ea0f2ffb8615454cfccfb
2026-05-06 00:57:37 +02:00
Martin Přikryl
c805e0ae17 Typo (Pagent)
PT.86

Translated: 100%
WinSCP 6.5.6

Source commit: 76e5f29303b901004385467aaaf6c5fb561f9b6f
2026-05-06 00:56:59 +02:00
Martin Přikryl
7bd79a2127 Typo (Pagent)
NO.56

Translated: 100%
WinSCP 6.5.6

Source commit: 26cc8b0c4c608e8377cf1181cad9ec12c6f82e5c
2026-05-06 00:56:22 +02:00
Martin Přikryl
8adc89c8f5 Typo (Pagent)
NL.90

Translated: 100%
WinSCP 6.5.6

Source commit: d52c54f2277fb4c23b92fa32fcff4eb7ca590a5d
2026-05-06 00:55:26 +02:00
Martin Přikryl
f104a50e7f Typo (Pagent)
KO.59

Translated: 100%
WinSCP 6.5.6

Source commit: 66a18e4248cd6a6d290e3e8cec781d921350002b
2026-05-06 00:54:15 +02:00
Martin Přikryl
a696074105 Typo (Pagent)
JP.80

Translated: 100%
WinSCP 6.5.6

Source commit: 535b960a863144d9b918561be9a98dbf008e72fc
2026-05-06 00:53:16 +02:00