Overview

Welcome to the homepage of FileZilla, the free FTP solution. Both a client and a server are available. FileZilla is open source software distributed free of charge under the terms of the GNU General Public License

Support is available through our forums, the wiki and the bug and feature request trackers.

In addition, you will find documentation on how to compile FileZilla and nightly builds for multiple platforms in the development section.

Quick download links

Pick the client if you want to transfer files. Get the server if you want to make files available for others.

News Atom feed icon

2009-11-15 - FileZilla Client 3.3.0.1 released

New features:

  • Ctrl-Tab and Ctrl-Shift-Tab to cycle tabs now loop around if reaching the end of the tab list

Bugfixes and minor changes:

  • Fix crash on showing/hiding of directory trees after closing a tab
  • Tabs no longer become unresponsive if not approving to close a busy tab
  • Directory comparison did not work properly on all but the first tab
  • Fix spurious error messages if connecting to a new site while synchronized browsing is enabled
  • *nix: Work around a bug in KDE preventing restore from minimize to notification area
  • Do not show update dialog if there is already some other dialog open
  • Fix synchronized browsing option on site-specific bookmarks

2009-11-09 - FileZilla Client 3.3.0 released

Bugfixes and minor changes:

  • Aborting a previous connection attempt by establishing a new connection in the same tab no longer renders the new connection unusable
  • *nix: Quote filenames containing spaces if editing using default editor for text files
  • *nix: Fix crash while emitting queue finished notifications

2009-11-03 - FileZilla Client 3.3.0-rc1 released

New features:

  • *nix: Display desktop notification if all transfers have finished and FileZilla isn't focused

Bugfixes and minor changes:

  • Navigating controls inside tab using tabulator key now works on all tabs
  • Fix splitter positions on horizontal interface layouts

2009-03-03 - Security advisory

FileZilla Server 0.9.31 fixes a buffer overflow in the SSL/TLS code.

This vulnerability could potentially be used for denial of service attacks.

Affected versions

All versions prior to 0.9.31 are affected. This vulnerability has been fixed in 0.9.31

2008-07-24 - Security Advisory

FileZilla 3.1.0.1 fixes a vulnerability regarding the way some errors are handled on SSL/TLS secured data transfers.

If the data connection of a transfer gets closed, FileZilla did not check if the server performed an orderly TLS shutdown.

Impact

An attacker could send spoofed FIN packets to the client. Even though GnuTLS detects this with GNUTLS_E_UNEXPECTED_PACKET_LENGTH, FileZilla did not record a transfer failure in all cases.

Unfortunately not all servers perform an orderly SSL/TLS shutdown. Since this cannot be distinguished from an attack, FileZilla will not be able to download listings or files from such servers.

Affected versions

All versions prior to 3.1.0.1 are affected. This vulnerability has been fixed in 3.1.0.1