Notepad++ release v8.8.3

PowerEditor/bin/change.log

@@ -1,3 +1,10 @@
+Notepad++ v8.8.3 vulnerability-fixes & new enhancement:
+
+ 1. Use self-signed certificate to sign new release binaries.
+ 2. Fix uninstaller security issue (CVE-2025-49144).
+ 3. Enhance security for DLL loading.
+
+
 Notepad++ v8.8.2 regression-fixes, bug-fixes & new features:
 
  1. Fix regression of folding state not being remembered through sessions.
@@ -27,7 +34,7 @@ Notepad++ v8.8.2 regression-fixes, bug-fixes & new features:
 
 
 Get more info on
-https://notepad-plus-plus.org/downloads/v8.8.2/
+https://notepad-plus-plus.org/downloads/v8.8.3/
 
 
 Included plugins:

PowerEditor/src/MISC/Common/verifySignedfile.h

@@ -67,8 +67,9 @@ private:
 
 	// Code signing certificate
 	std::wstring _signer_display_name = L"Notepad++";
-	std::wstring _signer_subject = L"C=FR, S=Ile-de-France, L=Saint Cloud, O=\"Notepad++\", CN=\"Notepad++\"";
+	std::wstring _signer_subject = L"C=FR, S=Ile-de-France, L=Saint Cloud, O=\"Notepad++\", CN=\"Notepad++\", E=don.h@free.fr";
-	std::wstring _signer_key_id = L"BDA51B6C752C9E448498A690CCDA00A609F244A3";
+	std::wstring _signer_key_id = L"7B4D26B77F8269B987AC3E8EBC3899E1A4176DFA"; //=> Should be UPPERCASE
+
 	bool _doCheckRevocation = false;
 	bool _doCheckChainOfTrust = false;
 

PowerEditor/src/resource.h

@@ -1,5 +1,5 @@
 // This file is part of Notepad++ project
-// Copyright (C)2023 Don HO <don.h@free.fr>
+// Copyright (C)2025 Don HO <don.h@free.fr>
 
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU General Public License as published by
@@ -19,14 +19,14 @@
 
 //************ Notepad++ version **************************
 
-#define NOTEPAD_PLUS_VERSION L"Notepad++ v8.8.2"
+#define NOTEPAD_PLUS_VERSION L"Notepad++ v8.8.3"
 
 // should be X.Y : ie. if VERSION_DIGITALVALUE == 4, 7, 1, 0 , then X = 4, Y = 71
 // ex : #define VERSION_VALUE L"5.63\0"
-#define VERSION_INTERNAL_VALUE L"8.82\0"
+#define VERSION_INTERNAL_VALUE L"8.83\0"
 
-#define VERSION_PRODUCT_VALUE L"8.8.2\0"
+#define VERSION_PRODUCT_VALUE L"8.8.3\0"
-#define VERSION_DIGITALVALUE 8, 8, 2, 0
+#define VERSION_DIGITALVALUE 8, 8, 3, 0
 
 //**********************************************************
 

README.md

@@ -11,8 +11,35 @@ natural languages. Running in the MS Windows environment, its use is governed by
 
 See the [Notepad++ official site](https://notepad-plus-plus.org/) for more information.
 
-Notepad++ Release Key
+
----------------------
+Notepad++ Root Certificate
+--------------------------
+_Since the release of version 8.8.3 Notepad++ is signed using code signing certificate issued by the following CA:_
+
+- **Name:** Notepad++ Root Certificate
+- **Serial Number:** 7A137FBEA48E8D469D2B43D49EBBCB21
+- **Fingerprint:** C80539FF7076D22E73A01F164108DAFBF06E45E4
+- **SHA256:** 443B4543C3A682804540849793556FFD3A6CE5D4721C9ADFDA6450223DDD54D7
+- **Created:** 2025-07-09
+- **Expires:** 2035-07-09
+
+https://github.com/notepad-plus-plus/notepad-plus-plus/blob/master/nppRoot.crt
+
+Notepad++ Code Signing Certificate
+----------------------------------
+_Since the release of version 8.8.3 Notepad++ is signed using code signing certificate:_
+
+- **Name:** Notepad++
+- **Emitted by:** Notepad++ Root Certificate
+- **Serial Number:** 38D07732D5E4A2628A303D479035C1D1
+- **Fingerprint:** 7F517E235584AFC146F6D3B44CD34C6CC36A3AB2
+- **SHA256:** E372E385C1A04527D152B155254F03B073C3A1E332D3288774CBE440E4C59A94
+- **Created:** 2025-07-09
+- **Expires:** 2028-07-09
+
+
+Notepad++ GPG Release Key
+-------------------------
 _Since the release of version 7.6.5 Notepad++ is signed using GPG with the following key:_
 
 - **Signer:** Notepad++

nppRoot.crt

@@ -0,0 +1,100 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----