Notepad++ v8.5.7 Release (Vulnerability fixes)

donho

Notepad++ v8.5.7 Release:

https://notepad-plus-plus.org/news/v857-released-fix-security-issues/

Notepad++ v8.5.7 Change log:

Fix 4 security issues CVE-2023-40031, CVE-2023-40036, CVE-2023-40164 & CVE-2023-40166. (Fix #14073)
Security enhancement: Sign uninstall.exe. (Fix #14099)
Change the slogan in installer. (Fix #14052)
Fix eventual memory leak while reading Utf8-16 files. (Fix #4120, #5806, #4443)
Fix dragging tab performance issue while Document List is displayed. (Fix #13479, #12632)
Add suppress 2GB file warning option for x64. (Fix #14055)
Fix cloned document disassociated issue after Notepad++ being relaunched. (Fix #10266)
Fix session file saving problem if it’s read-only. (Fix #14024, #13894, #13859)
Fix activating wrong file(s) issue after loading session file. (Fix #14006)
Fix product version value displayed in file’s properties. (Fix #14010, #11886, #11431)

Please report here if you find any regression and critical bug. For other issues please post to General Discussion or other topics.

Auto-Update will be triggered in 1 week if there’s no regression & critical issue found.

CennoxX

@donho The GitHub-Release (https://github.com/notepad-plus-plus/notepad-plus-plus/releases/tag/v8.5.7) has a wrong link:
wrong: https://notepad-plus-plus.org/news/v856-released-fix-security-issues/
correct: https://notepad-plus-plus.org/news/v857-released-fix-security-issues/

donho

@CennoxX
Thank you for your heads up.
Fixed now.

Timo Moisio 0

Clearing Read-Only Flag does not make a file editable.

On v8.5.7, when you clear read-only flag of a file, you need to reload the file from the disk to be enable to edit it.

E.g. on v8.5.6, reload is not required, just clearing read-only flag makes a file editable.

donho

@Timo-Moisio-0 said in Notepad++ v8.5.7 Release (Vulnerability fixes):

Clearing Read-Only Flag does not make a file editable.

Fixed in:
https://github.com/notepad-plus-plus/notepad-plus-plus/commit/01ff1eb88163b8d3ca3356e3f8bf8de6fa33e786

The fix will be in next release.

Klaudiusz Gawlik

This post is deleted!

Alan Kilborn

@donho said in Notepad++ v8.5.7 Release (Vulnerability fixes):

Add supperss 2GB file warning

Typo: should be suppress

donho

@Alan-Kilborn said in Notepad++ v8.5.7 Release (Vulnerability fixes):

Add supperss 2GB file warning
Typo: should be suppress

I thought I were a perfectionist, but I turn out to be a prefectionist!
Thank you for your heads up, the typo is fixed (also on the website).

donho

FYI, auto-update is triggered to v8.5.7

agajjsjs

This post is deleted!

mkupper

@donho Please see the <NeedToBeUpdated> is always “yes” forum thread which covers a regression introduced by Notepad v8.5.7.

In this case likely fix will be in win4gup and then to https://notepad-plus-plus.org/update/getDownloadUrl.php

imanubdesigner

Greetings! If I decide to install Notepad++, Windows 11 in safe mode starts having a problem with Explorer.exe if I right-click on an image, or on an application.

Sometimes I happen to go into Safe Mode to completely uninstall the Nvidia video card drivers. And that’s where I noticed this. It took me a while to realize it was Notepad++.

It’s definitely something with the contextual menu, because if I use the portable version, which doesn’t insert anything into the contextual menu, everything works perfectly.

I hope this isn’t something said many times and, if not, I apologize in advance!

donho

@imanubdesigner said in Notepad++ v8.5.7 Release (Vulnerability fixes):

It’s definitely something with the contextual menu, because if I use the portable version, which doesn’t insert anything into the contextual menu, everything works perfectly.

This crash of NppShell is fixed in v8.5.8 release. The candidate of v8.5.8 is available here:
https://community.notepad-plus-plus.org/topic/25015/notepad-v8-5-8-release-candidate

Could you check it and confirm here that the issue has been fixed?

mkupper

@donho I have confirmed that at the shell context right-click menu works in Windows 11 safe mode for at least the 32-bit installed Notepad++ v8.5.8 RC1. I also also added a note at https://community.notepad-plus-plus.org/post/89824

Sorry for the semi-cross post as I saw the v8.5.8 RC announcement, downloaded and installed that, and then saw this thread which prompted me to reboot and test in safe mode.

When I tested this before I also tested the 64 bit installation and it was working in safe mode with the new NppShell.dll.

alikendarfen

8.5.7, bad news…

for information, when switching to “admin” in order to save a file, I’ve lost all my other opened (unsaved) documents.

imanubdesigner

@donho said in Notepad++ v8.5.7 Release (Vulnerability fixes):

@imanubdesigner said in Notepad++ v8.5.7 Release (Vulnerability fixes):

It’s definitely something with the contextual menu, because if I use the portable version, which doesn’t insert anything into the contextual menu, everything works perfectly.

This crash of NppShell is fixed in v8.5.8 release. The candidate of v8.5.8 is available here:
https://community.notepad-plus-plus.org/topic/25015/notepad-v8-5-8-release-candidate

Could you check it and confirm here that the issue has been fixed?

I’m so sorry for delay of my reply. I can confirm that worked. This new 8.5.8 RC work perfectly in safe mode. I can’t see any refresh after right click. Thank you so much!