winget install --id MichalTrojnara.osslsigncodeAbout osslsigncode
osslsigncode is a small tool that implements part of the functionality of the Microsoft tool signtool.exe
What's new in 2.14
2.14 (2026.07.20) - added comprehensive command documentation in Markdown; man page and HTML versions are generated when Pandoc is available - CMake installations now honor standard GNU install directories, include README and NEWS, and can be uninstalled - attach-signature now uses digest-only verification instead of full signature validation; output file is not kept if digest verification fails - fixed a memory leak when rejecting invalid compressed APPX data
Version history
| Version | Updated | Notes |
|---|---|---|
| 2.14 | Unknown | 2.14 (2026.07.20) - added comprehensive command documentation in Markdown; man page and HTML versions are generated when Pandoc is available - CMake installations now honor standard GNU install directories, include READM... |
| 2.13 | Unknown | 2.13 (2026.02.10) MULTIPLE SECURITY VULNERABILITIES This release includes important security fixes. Users are strongly encouraged to upgrade, as the issues below may be exploitable when processing untrusted files. - fixe... |
| 2.12 | Unknown | 2.12 (2026.02.02) CRITICAL SECURITY VULNERABILITY This release fixes a critical memory corruption vulnerability. A malicious attacker could create a signed file, which, when verified with osslsigncode, triggers arbitrary... |