Download PuTTY

Pin this version: winget install --id PuTTY.PuTTY --version 0.85.0.0 --exact

- Security issue: fixed a remotely triggerable use-after-free in Pageant. (Might be exploitable to execute code, although this is not proved.) - Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. (However they are only used if a server supports nothing else.) - Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. (Only triggerable on purpose if you let somebody else generate your key for you.) - Denial-of-service security fixes: a server can trigger a tight loop in PuTTY, and even a MITM can make it consume unlimited memory at startup.

Release notes

Manifest: manifests/p/PuTTY/PuTTY/0.85.0.0

Pin this version: winget install --id PuTTY.PuTTY --version 0.84.0.0 --exact

- Security issue: fixed a remotely triggerable double-free in RSA key exchange. (We don't know of any way it is exploitable to execute code.) - Minor security issue: fixed a remotely triggerable crash in NIST ECDSA signature verification. (An assertion failure – definitely not exploitable to execute code.) - Minor security issue: fixed marking of Telnet and Rlogin session data with a trust sigil after you authenticated to a proxy (possibly allowing a server to spoof a repeat proxy password prompt). - Ability to run a specified command before starting the connection, e.g. to perform wake-on-LAN or a port knock. - On Unix: display 'pre-edit text', showing the progress of using multiple keystrokes to compose a single Unicode character. - On Unix: improved support for to running the GUI tools on Wayland (fixed startup issues and tuned performance). - Bug fix: configuring a SSH certificate authority on Unix would fail unless you manually made a config directory. - Bug fix: spurious "Network error: Socket is not connected" when authenticating to some HTTP proxies. - Bug fix: disabling cursor blinking in the Windows Control Panel but enabling it in PuTTY would lead to a tight loop.

Release notes

Manifest: manifests/p/PuTTY/PuTTY/0.84.0.0

Pin this version: winget install --id PuTTY.PuTTY --version 0.83.0.0 --exact

- Support for ML-KEM, the NIST-standardised post-quantum key exchange mechanism. (In addition to NTRU Prime, which has been supported since 0.78.) - Support for full Unicode file names in Windows file selector dialogs. (However, these do not yet round-trip through a saved session.) - Bug fix: psftp -b works again. - Bug fix: assertion failure if an SSH connection times out at the login prompt. - Bug fix: crash in Pageant if an SSH connection is abandoned while waiting for a deferred decryption passphrase. - Bug fix: tight loop if PuTTY tried to send an empty answerback string. - Bug fix: accidental truncation of some configuration edit boxes' contents to 127 characters. - Bug fix: Windows XP support was accidentally broken, and now reinstated. - Bug fix: restored interoperation with third-party tools that auto-fill login prompts by sending ^M for Return. - Bug fix: confusion when terminal window resized by tools like FancyZones. - Bug fix: the small keypad keys didn't reliably work in the terminal on Unix.

Release notes

Manifest: manifests/p/PuTTY/PuTTY/0.83.0.0

Pin this version: winget install --id PuTTY.PuTTY --version 0.82.0.0 --exact

- Major refactoring of Unicode handling to allow the use of 'foreign' Unicode characters, i.e. outside the system's configured default character set / code page. Not yet complete, but the following things work: - Windows console: usernames and passwords entered interactively into PSCP, PSFTP and Plink can use foreign characters. - Windows command line: usernames, remote commands, and filenames entered via command-line options can use foreign characters. - PuTTY's own terminal (on Windows and Unix): even if it's not configured into UTF-8 mode for the main session, interactive usernames and passwords can use foreign characters. - Unicode version update: all character analysis is updated to Unicode 16.0.0. - Unicode terminal rendering: national and regional flags are now understood by PuTTY's terminal emulator. (However, correct display of those flags will depend on fonts and operating system.) - The Event Log mentions the local address and port number of the outgoing connection socket. - Bracketed paste mode can now be turned off in the Terminal > Features panel. - Unix Pageant: new --foreground mode for running as a subprocess. - Bug fix: the 'border width' configuration option is now honoured even when the window is maximised. - Bug fix: SHA-2 based RSA signatures are now sent with correct zero padding. - Bug fix: terminal wrap mishandling caused occasional incorrect redraws in curses-based applications. - Bug fix: Alt + function key in "Xterm 216+" mode sent a spurious…

Release notes

Manifest: manifests/p/PuTTY/PuTTY/0.82.0.0

Pin this version: winget install --id PuTTY.PuTTY --version 0.81.0.0 --exact

Manifest: manifests/p/PuTTY/PuTTY/0.81.0.0

Pin this version: winget install --id PuTTY.PuTTY --version 0.80.0.0 --exact

Manifest: manifests/p/PuTTY/PuTTY/0.80.0.0

Pin this version: winget install --id PuTTY.PuTTY --version 0.79.0.0 --exact

Manifest: manifests/p/PuTTY/PuTTY/0.79.0.0

Pin this version: winget install --id PuTTY.PuTTY --version 0.78.0.0 --exact

• Support for OpenSSH certificates, for both user authentication keys and host keys. • New SSH proxy modes, for running a custom shell command or subsystem on the proxy server instead of forwarding a port through it. • New plugin system to allow a helper program to provide responses in keyboard-interactive authentication, intended to automate one-time password systems. • Support for NTRU Prime post-quantum key exchange, • Support for AES-GCM (in the OpenSSH style rather than RFC 5647). • Support for more forms of Diffie-Hellman key exchange: new larger integer groups (such as group16 and group18), and support for using those and ECDH with GSSAPI. • Bug fix: the 32-bit Windows build now runs on Windows XP again. • Bug fix: server-controlled window title setting now works again even if the character set is ISO 8859 (or a few other affected single-byte character sets). • Bug fix: certain forms of OSC escape sequences (sent by some real servers) could cause PuTTY to crash. • Bug fix: the -pwfile/-pw options no longer affect local key passphrase prompts, and no longer suppress Plink's anti-spoofing measures.

Release notes

Manifest: manifests/p/PuTTY/PuTTY/0.78.0.0

Pin this version: winget install --id PuTTY.PuTTY --version 0.77.0.0 --exact

• Major improvements to network proxy support: • Support for interactively prompting the user if the proxy server requires authentication. • Built-in support for proxying via another SSH server, so that PuTTY will SSH to the proxy and then automatically forward a port through it to the destination host. (Similar to running plink -nc as a subprocess, but more convenient to set up, and allows you to answer interactive prompts presented by the proxy.) • Support for HTTP Digest authentication, when talking to HTTP proxies. • Introduced pterm.exe, a PuTTY-like wrapper program for Windows command prompts (or anything else running in a Windows console). Not yet included in the installer, but available as a .exe file from the Download page. • Updated Unicode and bidi support to Unicode 14.0.0. • New command-line option -pwfile, like -pw except that it reads the password from a file so that it doesn't show up on the command line. • Windows Pageant: option --openssh-config to allow easy interoperation with Windows's ssh.exe. • -pw (and -pwfile) now do not fall back to interactively prompting for a password if the provided password fails. (That was the original intention.) • New configuration options for keyboard handling: • Option to control handling of Shift + arrow keys • Extra mode in the function-keys option, for modern xterm (v216 and above). • Bug workaround flag to wait for the server's SSH greeting before sending our own, for servers (or proxies) that lose outgoing data…

Release notes

Manifest: manifests/p/PuTTY/PuTTY/0.77.0.0

Pin this version: winget install --id PuTTY.PuTTY --version 0.76.0.0 --exact

• New option to abandon an SSH connection if the server allows you to authenticate in a trivial manner. • Bug fix: Windows PuTTY crashed when the 'Use system colours' option was used. • Bug fix: crash on Windows when using MIT Kerberos together with 'Restart Session'. • Bug fix: Windows PuTTY leaked named pipes after contacting Pageant. • Bug fix: Windows PuTTY didn't update the window while you held down the scrollbar arrow buttons long enough to 'key-repeat'. • Bug fix: user colour-palette reconfiguration via 'Change Settings' were delayed-action. • Bug fix: server colour-palette reconfigurations were sometimes lost. • Bug fix: a tight loop could occur on reading a truncated private key file. • Bug fix: the Windows Pageant GUI key list didn't display key lengths.

Release notes

Manifest: manifests/p/PuTTY/PuTTY/0.76.0.0

Pin this version: winget install --id PuTTY.PuTTY --version 0.75.0.0 --exact

• Security fix: on Windows, a server could DoS the whole Windows GUI by telling the PuTTY window to change its title repeatedly at high speed. • Pageant now supports loading a key still encrypted, and decrypting it later by prompting for the passphrase on first use. • Upgraded default SSH key fingerprint format to OpenSSH-style SHA-256. • Upgraded private key file format to PPK3, with improved passphrase hashing and no use of SHA-1. • Terminal now supports ESC [ 9 m for strikethrough text. • New protocols: bare ssh-connection layer for use over already-secure IPC channels, and SUPDUP for talking to very old systems such as PDP-10s. • PuTTYgen now supports alternative provable-prime generation algorithm for RSA and DSA. • The Unix tools can now connect directly to a Unix-domain socket.

Release notes

Manifest: manifests/p/PuTTY/PuTTY/0.75.0.0

Pin this version: winget install --id PuTTY.PuTTY --version 0.74.0.0 --exact

• Security fix: if an SSH server accepted an offer of a public key and then rejected the signature, PuTTY could access freed memory, if the key had come from an SSH agent. • Security feature: new config option to disable PuTTY's dynamic host key preference policy, if you prefer to avoid giving away to eavesdroppers which hosts you have stored keys for. • Bug fix: the installer UI was illegible in Windows high-contrast mode. • Bug fix: console password input failed on Windows 7. • Bug fixes in the terminal: one instance of the dreaded "line==NULL" error box, and two other assertion failures. • Bug fix: potential memory-consuming loop in bug-compatible padding of an RSA signature from an agent. • Bug fix: PSFTP's buffer handling worked badly with some servers (particularly proftpd's mod_sftp). • Bug fix: cursor could be wrongly positioned when restoring from the alternate terminal screen. (A bug of this type was fixed in 0.59; this is a case that that fix missed.) • Bug fix: character cell height could be a pixel too small when running GTK PuTTY on Ubuntu 20.04 (or any other system with a similarly up-to-date version of Pango). • Bug fix: old-style (low resolution) scroll wheel events did not work in GTK 3 PuTTY. This could stop the scroll wheel working at all in VNC.

Release notes

Manifest: manifests/p/PuTTY/PuTTY/0.74.0.0