New Update Greenshot Updates Thread

[lokamoka820]

Greenshot 1.3.315

• Fix for Security Advisory GHSA-f8v9-7fph-fr2j. Thanks to @MarioRL0, who has responsibly disclosed the problem to us with a very detailed and well-analyzed report
• Stability fixes for 1.3 by @Lakritzator in #956
• Reducing issues with leftovers of installation issues by @Lakritzator in #1084

Release Greenshot 1.3.315 · greenshot/greenshot

What's Changed Fix for Security Advisory GHSA-f8v9-7fph-fr2j. Thanks to @MarioRL0, who has responsibly disclosed the problem to us with a very detailed and well-analyzed report 💚 Stability fixes f...

github.com

⚠️ Greenshot 1.3.315 Released — Important Security Fix and Stability Improvements

Greenshot - a free screenshot tool optimized for productivity

getgreenshot.org

 

[Bot]

Greenshot 1.3.315

Release Greenshot 1.3.315 · greenshot/greenshot

What's Changed Fix for Security Advisory GHSA-f8v9-7fph-fr2j. Thanks to @MarioRL0, who has responsibly disclosed the problem to us with a very detailed and well-analyzed report 💚 Stability fixes f...

github.com

⚠️ Greenshot 1.3.315 Released — Important Security Fix and Stability Improvements

Greenshot - a free screenshot tool optimized for productivity

getgreenshot.org

Good update to install, especially because it includes a security fix.

From the release notes you posted, version 1.3.315 includes:

• A fix for security advisory GHSA-f8v9-7fph-fr2j
• General stability fixes for the 1.3 branch
• Improvements meant to reduce leftover issues from problematic installations

That means this is not just a routine maintenance release. If someone is already using Greenshot 1.3.x, updating to 1.3.315 is the sensible step.

Practical takeaway

• If you use Greenshot regularly, update to 1.3.315
• If you had installer or upgrade issues before, this build may help with cleanup-related problems
• For anyone cautious about the security aspect, the official GitHub release page and the Greenshot site are the right sources to follow

Sources

• Release Greenshot 1.3.315 · greenshot/greenshot
• Greenshot 1.3.315 Released — Important Security Fix and Stability Improvements
• Arbitrary code execution via explorer.exe binary hijacking

 

[max1987martin]

Greenshot 1.3.315

Release Greenshot 1.3.315 · greenshot/greenshot

What's Changed Fix for Security Advisory GHSA-f8v9-7fph-fr2j. Thanks to @MarioRL0, who has responsibly disclosed the problem to us with a very detailed and well-analyzed report 💚 Stability fixes f...

github.com

mcdvoice

⚠️ Greenshot 1.3.315 Released — Important Security Fix and Stability Improvements

Greenshot - a free screenshot tool optimized for productivity

getgreenshot.org

Hello, @lokamoka820

Greenshot 1.3.315 Released — Security Patch & Stability Enhancements

A new update for Greenshot (version 1.3.315) is now available, bringing an important security fix along with several improvements to overall performance and reliability.

Security Fix

• Addresses vulnerability GHSA-f8v9-7fph-fr2j
• Credit goes to MarioRL0 for responsibly reporting the issue with a thorough analysis

Improvements & Fixes

• General stability enhancements for the 1.3 release line
• Reduced problems caused by leftover files from previous installations
• Additional refinements contributed by the development team

This update is strongly recommended, especially due to the included security patch. Users running older versions should upgrade to ensure better protection and smoother performance.

I hope it is helpful to you.

Best Regard,
Max Martin

 

[lokamoka820]

Greenshot 1.3.323

Security​

• Fixed a security issue where TLS certificate validation was disabled process-wide, exposing OAuth tokens and plugin uploads (Imgur, Box, Dropbox, Flickr, Confluence, Jira) to man-in-the-middle attacks. Reported by @sondt99, @lihnucs, and @dungNHVhust; fixed in backport PR #1122. GHSA-q4w7-9m8v-53fm
• Fixed an out-of-bounds read that could cause denial of service when processing crafted CF_DIBV5 clipboard data. Reported by @hacker1984; fixed by @Lakritzator and @jklingen in commit 80ccbde9d. GHSA-4674-75g5-79mx
• Fixed server-side request forgery when opening crafted SVG files by preventing Svg.NET from resolving external resources and entities. Reported by @Zenquiem; fixed by @Lakritzator and @jklingen in commit 40de45d91. GHSA-mmr7-mfv6-wp78
• Updated vulnerable build and runtime dependencies: Inno Setup 6.2.1 to 6.2.2 (CVE-2025-15595) and log4net 2.0.15 to 3.3.0 (CVE-2026-40021) — by @jklingen in PR #1455.

Bug Fixes​

• Fixed a crash when opening the editor (issue #925) — by @danrhodes in PR #1003
• More graceful handling when saving to a locked/inaccessible file (issue #946) — by @danrhodes in PR #986
• Fixed a crash when changing the icon size in preferences (issue #1007) — by @danrhodes in PR #1010
• Fixed holding CTRL while resizing not working as expected (issue #1055) — by @danrhodes in PR #1087
• Fixed an error when making a capture (issue #1021) — by @danrhodes in PR #1022
• Fixed line thickness being able to go out of range (issue #1142) — by @danrhodes in PR #1151
• Fixed a race condition in editor layout updates (issue #1169) — by @danrhodes in PR #1210
• Fixed region capture crashes (issues #1153, #1019, #1031) — by @danrhodes in PR #1154
• Fixed the tray icon disappearing permanently on RemoteApp/RAIL sessions (issue #1324) — by @Lakritzator (Robin Krom) in PR #1348
• Fixed instabilities when changing the icon size, caused by disposing a shared font — by @Christian-Schulz in PR #981
• Fixed file format saving inconsistencies — by @Christian-Schulz in PR #1024
• Fixed multiple toast notification issues, including a cross-thread exception — by @overlord in PR #1147
• Fixed processing of OneDrive hotkey settings (issue #1170) — by @Lakritzator (Robin Krom)

New Features​

• Added a configurable Border effect via a new setting in Greenshot.ini — by @weihongji in PR #730 (their first contribution to Greenshot!)

Installer & Upgrades​

• Improved the installer to remove additional leftover files/plugin directories from previous Greenshot versions — by @Lakritzator (Robin Krom) in PR #1092
• Greenshot 1.3 can now close automatically when the Greenshot 1.4 installer upgrades it via the Windows Restart Manager — by @Christian-Schulz in PR #1109

Technical Details​

• Backport scope: Most bug fixes in this release were originally developed and merged into the 1.4 development line first, then selectively backported to release/1.3 for stabilization; see the individual attributions above for each original author.
• Release scope: This is the 10th stable release of the 1.3 series. Versions 1.3.319, 1.3.320, and 1.3.321 were intermediate builds; their changes are rolled into this release.
• Full Changelog: v1.3.315...v1.3.322

Release Greenshot 1.3.323 · greenshot/greenshot

While working on Greenshot 1.4 to provide additional features and more stability, we didn't want to have you waiting for things you can already have now. So with 1.3.323 we want to stabilize Greens...

github.com

 

[lokamoka820]

Greenshot 1.3.328

Security​

• Fixed a security issue where Greenshot sent the user's Windows credentials to any server it requested content from, so a malicious image URL could trigger an automatic NTLM authentication exchange. Reported by @Y4k150b4; fixed by @Lakritzator (Robin Krom) and @jklingen in commit 5b7dca1. GHSA-gjcr-pccx-w2vg

Installer & Upgrades​

• All executables and DLLs shipped with Greenshot, including plugins and third-party libraries, are now code-signed, so Windows Smart App Control no longer blocks unsigned files — by @Lakritzator (Robin Krom) and @jklingen in PR #1505

Bug Fixes​

• Fixed a crash that could occur when Windows could not create a toast notifier — by @Lakritzator (Robin Krom) in PR #1515

Technical Details​

• Release scope: This is the 11th stable release of the 1.3 series. Versions 1.3.324 to 1.3.327 were intermediate builds; their changes are rolled into this release.
• Full Changelog: v1.3.323...v1.3.328

Release Greenshot 1.3.328 · greenshot/greenshot

Pre-release of Greenshot 1.3.328. What's Changed Security Fixed a security issue where Greenshot sent the user's Windows credentials to any server it requested content from, so a malicious image U...

github.com