New Update Notepad++ (Updates Thread)

[Marko :)]

People still use this after all the controversies and vulnerabilities? Gosh!

 

[Zero Knowledge]

People still use this after all the controversies and vulnerabilities? Gosh!

Yeah I've moved entirely in my stack to VsCode + notepad for copy/paste.

 

[lokamoka820]

Notepad++ release 8.9.7

Notepad++ v8.9.7 vulnerability fix, regression-fix, bug-fix & new features:​

1. Vulnerability: Fix Stack Buffer Overflow in expandNppEnvironmentStrs. (Fix CVE-2026-54758 )
2. Vulnerability: Enhance loading session.xml security by normalizing the file paths. (Fix CVE-2026-52886 )
3. Vulnerability: Fix updater (WinGUp) path traversal (Zip Slip) issue. (Fix CVE-2026-57233 )
4. Vulnerability: Fix shortcuts.xml macro HMAC bypass issue. (Fix CVE ID not assigned yet )
5. Vulnerability: Improve robustness of Powershell command in installer. (Fix CVE ID not assigned yet )
6. Fix “Find in Files” unresponsive issue. (Fix #11774 )
7. Fix regression where opening relative paths as file & in Explorer didn’t work. (Fix #18114 )
8. Fix disappearing or duplicated file items in Folder as Workspace. (Fix #10710 , #15831 , #16053 , #16197 , #18091 )
9. Fix freeze caused by directory symbolic links in Folder as Workspace root. (Fix #1566 , #18171 )
10. Update to Scintilla 5.6.4 & Lexilla 5.5.1. (Implement #18193 )
11. Fix undo in cloned document not scrolling to undone change in original document. (Fix #17913 )
12. Fix crash issue caused by LexBaan. (Fix #18186 )
13. Make XML CDATA color different from the enclosed elements. (Fix #18122 )
14. Update pugixml to v1.16. (Implement #18147 )
15. Remember Folder as Workspace expand/collapse state across sessions. (Fix #4057 , #5979 )
16. Add “Count” option to improve Incremental Search performance. (Fix #11613 )
17. Add “nth of count” information to Incremental Search. (Fix #11899 )
18. Improve “Count” performance in Incremental Search. (Implement #18185 , ##18201 , #18209 )
19. Add full ANSI EscapeSequence lexing. (Fix #17120 , #18065 )
20. Fix plugin toolbar icon not scaling correctly on high DPI displays. (Fix #16723 )
21. Fix incorrectly disabled Paste command. (Fix #18118 )
22. Add “Print FormFeed as Page Break” option. (Fix #18059 )
23. Make message boxes dark via task dialogs. (Implement #18132 )
24. Enhance color picker to remember custom colors across sessions. (Fix #4782 )
25. Ensure searchResult stays last after styles XML merge. (Fix issue )
26. Update PHP keywords / auto-completion. (Implement #18175 )
27. Update CSS keywords / auto-completion. (Fix #13555 )
28. Fix truncted INS/OVR indicator on Status bar. (Fix #18142 )

Notepad++ release 8.9.7

Notepad++ release 8.9.7 is available: https://notepad-plus-plus.org/news/v897-slava-ukraini/ Notepad++ v8.9.7 vulnerability fix, regression-fix, bug-fix & ne...

community.notepad-plus-plus.org

 

[lokamoka820]

Notepad++ release 8.9.8

Notepad++ v8.9.8 vulnerability fix, bug-fixes & new features:​

1. Vulnerabilty: Fix an eventual crash while loading UDL. CVE ID not assigned yet
2. Vulnerabilty: Fix an eventual crash when loading a UTF-16 file. CVE ID not assigned yet
3. Vulnerabilty: Fix out-of-bounds array write. CVE ID not assigned yet
4. Vulnerabilty: Fix authenticode verification bypass. CVE ID not assigned yet
5. Vulnerabilty: Fix a TOCTOU issue in the Notepad++ Updater (WinGUp). CVE ID not assigned yet
6. Vulnerabilty: Fix session backup path-traversal allowing deletiion outside backup directory. CVE ID not assigned yet
7. Vulnerabilty: Fix potential exposure of Windows login info (SMB/NTLM) via UNC path. CVE ID not assigned yet 1 , CVE ID not assigned yet 2 , CVE ID not assigned yet 3 , CVE ID not assigned yet 4
8. Vulnerabilty: Fix shortcuts.xml HMAC bypass via the “Run a Macro Multiple Times”. CVE ID not assigned yet
9. Vulnerabilty: Fix Null pointer in NPPM_SAVESESSION handler causing crash. CVE ID not assigned yet
10. Vulnerabilty: Fix stack buffer overflow caused by overlong session paths. CVE ID not assigned yet
11. Vulnerabilty: Fix Folder as Workspace “Run by system” target hijacking issue. CVE ID not assigned yet
12. Vulnerabilty: Fix install-path injection possibility with PowerShell. CVE ID not assigned yet
13. Vulnerabilty: Fix lower IL (Integrity Level) process sends WM_COMMAND to higher IL Notepad++. CVE ID not assigned yet
14. Vulnerabilty: Fix Notepad++ UIPI Bypass via WM_COPYDATA. CVE ID not assigned yet
15. Fix crash in WM_COPYDATA COPYDATA_PARAMS for invalid payload. (Fix #18207 )
16. Fix crash in API NPPM_ALLOCATE* calls. (Fix #18222 )
17. Add an option to allow loading symlinks in Folder as Workspace. (Fix #18226 )
18. Regression: Fix loading session for alone subview and doc/tab with untitle name. (Fix #18294 )
19. Fix CJK IME issues in Save As dialog. (Fix #11582 , #15431 , #16772 , #12225 , #12366 )
20. Update to Scintilla 5.6.6 & Lexilla 5.5.3. (Implement #18290 )
21. Add plugin deactivation capability. (Fix #18206 )
22. Add “-monitoringMode” command line argument to open files with monitoring enabled. (Fix #18188 )
23. Fix Proxy Settings issue in portable mode. (Fix #13382 )
24. Fix langs.xml model update not not applying file extension fields. (Fix #18220 )
25. Fix luminosity slider in ChooseColor not visible in dark mode. (Fix #12451 )
26. Fix empty sub-menus in compact language menu. (Fix #18202 )
27. Fix Search Results vertical scrolling not matching with OS mouse settings. (Implement #18194 )
28. Use modern question mark icon in dark message box. (Fix Repported in comment )
29. Format count numbers using current locale separators when needed. (Fix #18190 )

Notepad++ release 8.9.8

Notepad++ release 8.9.8 is available: https://notepad-plus-plus.org/news/v898-released/ Notepad++ v8.9.8 vulnerability fix, bug-fixes & new features: Vulner...

community.notepad-plus-plus.org

 

[lokamoka820]

Notepad++ release 8.9.8.1

Notepad++ v8.9.8.1 vulnerability fixes, regression fix & bug-fixes:​

1. Vulnerability: Fix crash caused by “Open file” & “Search on Internet” commands. CVE ID not assigned yet
2. Vulnerability: Fix Function List array out-of-bounds risks when parsing functions. CVE ID not assigned yet
3. Vulnerability: Fix UAC operations performed without verifying the caller. CVE ID not assigned yet
4. Vulnerability: Fix incomplete UNC detection allowing NTLM leak bypass. CVE ID not assigned yet
5. Vulnerability: Fix crash of NPPM API when invalid value passed as argument. CVE ID not assigned yet
6. Regression: Fix failure to open files via Notepad++ symlink paths. (Fix #18314 )
7. Fix a crash after canceling UAC saving operation. (Fix commit )
8. Fix Network Path Warning dialog usability problem. (Fix #18319 (comment) )
9. Fix symlinks setting for Folder as Workspace not remembered across sessions. (Fix #18367 )
10. Fix continous validation of the same server when loading network path files. (Fix #18319 )
11. Fix UDL line comments not being correctely detected. (Fix #9193 , #18141 )
12. Fix Unicode text alternation in clipboard by Notepad++ encoding conversion. (Fix #18356 )
13. Fix incorrect paste behaviour in column mode. (Fix #18355 )
14. Fix visual glitch in the UDL dialog when main window uses vertical tabs. (Fix #18335 )
15. Fix GDI leaks of tab context menu. (Fix #18297 )
16. Fix inaccurate display information in PluginAdmin “Updates” tab. (Fix #18312 )

Notepad++ release 8.9.8.1

Notepad++ release 8.9.8.1 is available: https://notepad-plus-plus.org/news/v8981-released/ Notepad++ v8.9.8.1 vulnerability fixes, regression fix & bug-fixes...

community.notepad-plus-plus.org