This is a simple maintenance release that mostly fixes a few small bugs, and updates the bundled DDS FileType plugin.
There are two releases of Paint.NET:
Settings -> Updates -> Check Now.
Changes since 5.1.7:
If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8
There is a new experimental docker image, which is much faster. See this post for more info.
You can help to translate Part-DB to other languages. See this post for more info.
Until this version, users could upload SVG files containing JS code, that would be executed if a user opened the SVG in a new tab, allowing for a XSS vulnerability. This was only possible if the SVG files were explicitly opened in a new tab, if the file was embedded inside a Part-DB tab, then there was no risk.
Since this version, SVG files gets sanitized during upload, to prevent any JS code execution. If you have existing SVG files, you can sanitize them, by running the console command php bin/console partdb:attachments:sanitize-svg.
If you are using Part-DB with nginx, you should add the following block to your server configuration, to further harden it by setting a content security policy for SVG files.
Log in
# Set Content-Security-Policy for svg files, to block embedded javascript in there
location ~* \.svg$ {
add_header Content-Security-Policy "default-src 'self'; script-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; frame-ancestors 'none';";
}
For apache, this is done automatically in the .htaccess file of Part-DB.
Full Changelog: v1.17.0...v1.17.1
bookworm). This point release mainly adds corrections for security issues, along with a few adjustments for serious problems. Security advisories have already been published separately and are referenced where available.
bookworm). This point release mainly adds corrections for security issues, along with a few adjustments for serious problems. Security advisories have already been published separately and are referenced where available.
bookworm). This point release mainly adds corrections for security issues, along with a few adjustments for serious problems. Security advisories have already been published separately and are referenced where available.
bookworm). This point release mainly adds corrections for security issues, along with a few adjustments for serious problems. Security advisories have already been published separately and are referenced where available.
This release contains the following fixes and changes:
Below are development builds for testing purposes.
Latest development build: 2.4.2.22 (May 15th 2025)
Latest stable release build: 2.4.2
https://github.com/clsid2/mpc-hc/releases/tag/2.4.2
Fixed a crash that could occur when viewing websites that use WebGL. (Bug 1961191)
Fixed an issue where the browser could repeatedly crash when certain SVG effects (like blur or drop shadow) were applied to very small areas. (Bug 1924241)
On Linux, fixed an issue where video playback would appear washed-out on Wayland when HDR support was unavailable. (Bug 1961610)
Fixed an issue where the "Match Case" shortcut Alt+C in the find-in-page toolbar did not toggle the checkbox as expected. (Bug 1952611)
Reference link to 138.0.1 release notes.
