osslsigncode

Michał Trojnara·MichalTrojnara.osslsigncode

OpenSSL based Authenticode signing for PE/MSI/Java CAB files.

osslsigncode is a small tool that implements part of the functionality of the Microsoft tool signtool.exe

winget install --id MichalTrojnara.osslsigncode --exact --source winget

Latest 2.13·February 10, 2026

Release Notes

2.13 (2026.02.10) MULTIPLE SECURITY VULNERABILITIES This release includes important security fixes. Users are strongly encouraged to upgrade, as the issues below may be exploitable when processing untrusted files.

  • fixed integer overflows when processing APPX compressed data streams (by Małgorzata Olszówka)
  • fixed double-free vulnerabilities in APPX file processing (by Małgorzata Olszówka)
  • fixed multiple memory corruption issues in PE page hash computation (by Antoni Klajn (Opera) and Małgorzata Olszówka)

Installer type: zip

ArchitectureScopeDownloadSHA256
x64DownloadC6D3EC8F383A6ED204503A9D4445788F2D3E71DA87F3604C42E40167AD9CEB8E

Details

Homepage
https://github.com/mtrojnar/osslsigncode
License
GPL-3.0
Publisher
Michał Trojnara
Support
https://github.com/mtrojnar/osslsigncode/issues
Copyright
Copyright (C) 2005-2026 Per Allansson <[email protected]>

Older versions (1)

2.12
ArchitectureScopeDownloadSHA256
x64Download1AD189E915FF78974CD80A8734937691721EA4D87A91A26C2205F3D3CF7EF974