Notepad++ v8.9.8 Release Candidate

[donho]

Notepad++ 8.9.8 Release Candidate is available here:
Notepad++ 8.9.8 RC2 is available here:
https://github.com/donho/notepad-plus-plus/releases/tag/RC2

Red items are the new fixed issues in RC2.

Notepad++ v8.9.8 vulnerability fixes, bug-fixes & new enhancements:

1. Vulnerabilty: Fix an eventual crash while loading UDL. CVE ID not assigned yet
2. Vulnerabilty: Fix an eventual crash when loading a UTF-16 file. CVE ID not assigned yet
3. Vulnerabilty: Fix out-of-bounds array write. CVE ID not assigned yet
4. Vulnerabilty: Fix authenticode verification bypass. CVE ID not assigned yet
5. Vulnerabilty: Fix a TOCTOU issue in the Notepad++ Updater (WinGUp). CVE ID not assigned yet
6. Vulnerabilty: Fix session backup path-traversal allowing deletiion outside backup directory. CVE ID not assigned yet
7. Vulnerabilty: Fix potential exposure of Windows login info (SMB/NTLM) via UNC path. CVE ID not assigned yet 1, CVE ID not assigned yet 2, CVE ID not assigned yet 3, CVE ID not assigned yet 4
8. Vulnerabilty: Fix shortcuts.xml HMAC bypass via the “Run a Macro Multiple Times”. CVE ID not assigned yet
9. Vulnerabilty: Fix Null pointer in NPPM_SAVESESSION handler causing crash. CVE ID not assigned yet
10. Vulnerabilty: Fix stack buffer overflow caused by overlong session paths. CVE ID not assigned yet
11. Vulnerabilty: Fix Folder as Workspace “Run by system” target hijacking issue. CVE ID not assigned yet
12. Fix crash in WM_COPYDATA COPYDATA_PARAMS for invalid payload. (Fix #18207)
13. Fix crash in API NPPM_ALLOCATE* calls. (Fix #18222)
14. Add an option to allow loading symlinks in Folder as Workspace. (Fix #18226)
15. Regression: Fix loading session for alone subview and doc/tab with untitle name. (Fix #18294)
16. Fix CJK IME issues in Save As dialog. (Fix #11582, #15431, #16772, #12225, #12366)
17. Update to Scintilla 5.6.6 & Lexilla 5.5.3. (Implement #18290)
18. Add plugin deactivation capability. (Fix #18206)
19. Add “-monitoringMode” command line argument to open files with monitoring enabled. (Fix #18188)
20. Fix Proxy Settings issue in portable mode. (Fix #13382)
21. Fix langs.xml model update not not applying file extension fields. (Fix #18220)
22. Fix luminosity slider in ChooseColor not visible in dark mode. (Fix #12451)
23. Fix empty sub-menus in compact language menu. (Fix #18202)
24. Fix Search Results vertical scrolling not matching with OS mouse settings. (Implement #18194)
25. Use modern question mark icon in dark message box. (Fix Repported in comment)
26. Format count numbers using current locale separators when needed. (Fix #18190)

Please note that all the vulnerability links might not be accessible for the moment.
They will be published once the release is available.

[donho]

FYI v8.9.8 RC is changed to RC2:
https://github.com/donho/notepad-plus-plus/releases/tag/RC2