FileZilla

The free FTP solution.

Overview

Welcome to the homepage of FileZilla, the free FTP solution. Both a client and a server are available. FileZilla is open source software distributed free of charge under the terms of the GNU General Public License

Support is available through our forums, the wiki and the bug and feature request trackers.

In addition, you will find documentation on how to compile FileZilla and nightly builds for multiple platforms in the development section.

Quick download links

News

2010-01-03 - FileZilla Client 3.3.1 released

Bugfixes and minor changes:

• Implement missing tab creation from context menu
• *nix: Reduce flicker on tab creation
• Set initial focus in chmod dialog to input box for numeric value
• Correct handling of unexpected closure of SFTP connection

2010-01-02 - Subversion repository moved

The address of the subversion repository has changed.

The old address, http(s)://filezilla.svn.sourceforge.net/svnroot/filezilla is no longer valid. The new address is http(s)://svn.filezilla-project.org/svn/

The new repository can be browsed using http://svn.filezilla-project.org/filezilla/.

2009-12-31 - FileZilla Server 0.9.34 released

New features:

• Show address of server in title bar of administration interface (patch submitted by eyebex)

Bugfixes and minor changes:

• Disable some weak TLS/SSL ciphers such as DES-CBC-SHA which shouldn't be used anymore
• Work around some obscure error reported by OpenSSL, fixes spurious transfer failures
• Use case-insensitive comparison instead of always converting to lowercase in permissions handling. Fixes problems with sharing case-sensitive network resources.
• Settings with empty data were not loaded from settings file correctly and reverted back to default values (patch submitted by eyebex)
• Improve performance of (re-)loading settings

2009-12-27 - FileZilla Client 3.3.1-rc1 released

New features:

• New tab context menu, can be used to close or refresh current tab or to close all but the current tab.
• *nix, OS X: Display sort indicators in filelist header control
• Remember size of dialog showing all files opened for editing
• Add refresh item to filelist context menus
• Scroll treeview horizontally if needed to keep item in view on changing directories

Bugfixes and minor changes:

• Fix crash of fzsftp if server closes connection
• Successfully downloaded update file is no longer deleted if user cancels the finish page of the update check wizard
• Do not retry connecting if not trusting certificate on FTP over TLS connections
• Better reporting of handshake failures on FTP over TLS connections
• *nix: Check for xdg-open. This program from the xdg-utils is an indirect runtime dependency. It is used by wxWidgets to open URLs in the default browser
• Refactored most of the tabbing code
• Use proper address type on SOCKS proxies
• Add missing default button in bookmarks dialog

2009-03-03 - Security advisory

FileZilla Server 0.9.31 fixes a buffer overflow in the SSL/TLS code.

This vulnerability could potentially be used for denial of service attacks.

Affected versions

All versions prior to 0.9.31 are affected. This vulnerability has been fixed in 0.9.31

2008-07-24 - Security Advisory

FileZilla 3.1.0.1 fixes a vulnerability regarding the way some errors are handled on SSL/TLS secured data transfers.

If the data connection of a transfer gets closed, FileZilla did not check if the server performed an orderly TLS shutdown.

Impact

An attacker could send spoofed FIN packets to the client. Even though GnuTLS detects this with GNUTLS_E_UNEXPECTED_PACKET_LENGTH, FileZilla did not record a transfer failure in all cases.

Unfortunately not all servers perform an orderly SSL/TLS shutdown. Since this cannot be distinguished from an attack, FileZilla will not be able to download listings or files from such servers.

Affected versions

All versions prior to 3.1.0.1 are affected. This vulnerability has been fixed in 3.1.0.1