[RESOLVED] tis-greenshot CVE with CVSS at 7.8

Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is provided on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version (1.8.2 / 2.0 / 2.1 / 2.2 / etc.) AS WELL AS the Enterprise / Discovery edition.
* Specify the server OS (Linux / Windows) and version (Debian Stretch/Buster - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine (Windows 7 / 10)
. * As with any community forum, support is provided voluntarily by members. If you require sales support, you can contact the Tranquil IT sales department at 02.40.97.57.55
Locked
tux
Messages: 62
Registration: Sep 05, 2023 - 09:44

August 8, 2025 - 09:03

Hello,

Greenshot version 1.2.10.6 has a significant CVE.

Version 1.3.296 was released on July 26th to fix this CVE.
I've noticed that the LUTI tests for this version are failing.

When do you expect to be able to release the package with version 1.3.296?
Wapt Enterprise Edition 2.6.1.17765
WAPTConsole Enterprise on Windows
WAPT Server on Debian 12
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

August 8, 2025 - 10:19

Hi Sébastien,

I just saw that the autobuild started but failed:
https://luti.tranquil.it/get_folder_res ... 93aW5kb3dz

The package as is would work for an upgrade but not for a fresh install. We'll look into why.

Simon
jlepiquet
Messages: 69
Registration: Sep 3, 2024 - 4:09 p.m.

August 8, 2025 - 12:15

Hello,

Greenshot has added a parameter for installations.
I just corrected the package for build 1.3.296.

The package will be available in pre-production for 5 days and then in production.
https://wapt.tranquil.it/wapt-testing/t ... EPROD.wapt

Regards,
Locked