Greenshot 1.3.323: Stabilization Release with Security Fixes

The Greenshot development team has released version 1.3.323, which focuses on improving the stability and reliability of the application. Despite active work on the 1.4 branch, the developers decided not to keep users waiting and moved part of the already prepared improvements into the current stable line. This approach makes tangible benefits available right now, without the need to wait for a major update.

A significant portion of the fixes and improvements was prepared by community members, and the team expresses its sincere gratitude for their contribution. Special thanks go to those participants who not only proposed individual solutions but also joined efforts to work together on features and bug elimination. Such collaboration is an important factor in the development of an open-source project.

In the area of security, a number of serious vulnerabilities have been eliminated. In particular, an issue related to the disabling of TLS certificate validation at the process-wide level was corrected, which could put OAuth tokens and plugin uploads at risk. In addition, an out-of-bounds read was eliminated when processing specially crafted clipboard data, and the possibility of SSRF attacks when opening prepared SVG files was prevented. Furthermore, vulnerable dependencies used during build and at runtime were updated.

Particular attention was paid to fixing bugs that affected everyday work. Crashes were eliminated when opening the editor, when changing the icon size in the settings, when performing a region capture of the screen, and when saving to a locked file. Incorrect behavior when holding down the CTRL key during resizing was corrected, as was the issue of the tray icon disappearing in RemoteApp sessions. The stability of editor layout updates and the processing of OneDrive hotkey settings was increased.

Among the new features, a configurable border effect is worth noting, which can be enabled via a setting in the Greenshot.ini file. The installer was also improved: it now removes leftover files and plugin directories from previous Greenshot versions, and when upgrading to the 1.4 branch, the 1.3 application can shut down correctly via the Windows Restart Manager. This release is the tenth stable build of the 1.3 series, and the changes from intermediate builds are fully included in it.