winget install --id MichalTrojnara.osslsigncodeAbout osslsigncode
osslsigncode is a small tool that implements part of the functionality of the Microsoft tool signtool.exe
What's new in 2.13
2.13 (2026.02.10) MULTIPLE SECURITY VULNERABILITIES This release includes important security fixes. Users are strongly encouraged to upgrade, as the issues below may be exploitable when processing untrusted files. - fixed integer overflows when processing APPX compressed data streams (by Małgorzata Olszówka) - fixed double-free vulnerabilities in APPX file processing (by Małgorzata Olszówka) - fixed multiple memory corruption issues in PE page hash computation (by Antoni Klajn (Opera) and Małgorzata Olszówka)
Version history
| Version | Updated | Notes |
|---|---|---|
| 2.13 | Unknown | 2.13 (2026.02.10) MULTIPLE SECURITY VULNERABILITIES This release includes important security fixes. Users are strongly encouraged to upgrade, as the issues below may be exploitable when processing untrusted files. - fixe... |
| 2.12 | Unknown | 2.12 (2026.02.02) CRITICAL SECURITY VULNERABILITY This release fixes a critical memory corruption vulnerability. A malicious attacker could create a signed file, which, when verified with osslsigncode, triggers arbitrary... |