2.17.2

niri-wm/niri2.17.2Aug 27, 2026by github-actions[bot]

Upgrading?

AI Summary

This patch release addresses critical security vulnerabilities and stabilizes the SVG export engine by fixing gradient rendering and typography token integrity issues.

Key Highlights

  • Fixed command injection vulnerability in SVG exporter via legacy fill-color
  • Corrected linear gradients in SVG text exports being emitted as radial gradients
  • Resolved typography token detachment when editing text content

Full Release Notes


### :bug: Bugs fixed

- Fix linear gradients in SVG text exports being emitted as radial gradients [#5972](https://github.com/penpot/penpot/issues/5972) (PR: [#11272](https://github.com/penpot/penpot/pull/11272))
- Fix typography token becoming detached when editing text content [#11362](https://github.com/penpot/penpot/issues/11362) (PR: [#11366](https://github.com/penpot/penpot/pull/11366))
- Fix command injection in SVG exporter via legacy fill-color (https://github.com/penpot/penpot/security/advisories/GHSA-4f36-m4hj-cv86)

Related Repositories