Welcome to the homepage of FileZilla, the free FTP solution. Both a client and a server are available. FileZilla is open source software distributed free of charge under the terms of the GNU General Public License

Support is available through our forums, the wiki and the bug and feature request trackers.

In addition, you will find documentation on how to compile FileZilla and nightly builds for multiple platforms in the development section.

Quick download links

News

2012-01-08 - FileZilla Client 3.5.3 released

New features:

• Ctrl+Shift+O can be used to toggle between modification time and filesize based directory comparison

Bugfixes and minor changes:

• It is now possible to use custom passwords if using "anonymous" as user name
• After un-hiding toolbar, update toolbar button states
• Fix TLS compatibility issues with TLS 1.2 servers
• MSW: Unset hidden attribute on FileZilla's settings files
• Building FileZilla from source now requires wxWidgets 2.8.12 or higher.

2011-11-08 - FileZilla Client 3.5.2 released

Bugfixes and minor changes:

• Updated translations

2011-11-01 - FileZilla Client 3.5.2-rc1 released

New features:

• Added option to open site manager on startup to the settings dialog

Bugfixes and minor changes:

• The "Don't save passwords" option was not being saved
• The queue was not saved correctly if having items from multiple servers
• Queue items with the lowest priority setting are now being restored again
• Drag & Drop did not work with all saved sites if saving of passwords had been disabled

2010-01-02 - Subversion repository moved

The address of the subversion repository has changed.

The old address, http(s)://filezilla.svn.sourceforge.net/svnroot/filezilla is no longer valid. The new address is http(s)://svn.filezilla-project.org/svn/

The new repository can be browsed using http://svn.filezilla-project.org/filezilla/.

2009-03-03 - Security advisory

FileZilla Server 0.9.31 fixes a buffer overflow in the SSL/TLS code.

This vulnerability could potentially be used for denial of service attacks.

Affected versions

All versions prior to 0.9.31 are affected. This vulnerability has been fixed in 0.9.31

2008-07-24 - Security Advisory

FileZilla 3.1.0.1 fixes a vulnerability regarding the way some errors are handled on SSL/TLS secured data transfers.

If the data connection of a transfer gets closed, FileZilla did not check if the server performed an orderly TLS shutdown.

Impact

An attacker could send spoofed FIN packets to the client. Even though GnuTLS detects this with GNUTLS_E_UNEXPECTED_PACKET_LENGTH, FileZilla did not record a transfer failure in all cases.

Unfortunately not all servers perform an orderly SSL/TLS shutdown. Since this cannot be distinguished from an attack, FileZilla will not be able to download listings or files from such servers.

Affected versions

All versions prior to 3.1.0.1 are affected. This vulnerability has been fixed in 3.1.0.1