New version: MichalTrojnara.osslsigncode version 2.12

manifests/m/MichalTrojnara/osslsigncode/2.12/MichalTrojnara.osslsigncode.installer.yaml

@@ -0,0 +1,25 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.installer.1.12.0.schema.json
+
+PackageIdentifier: MichalTrojnara.osslsigncode
+PackageVersion: "2.12"
+InstallerType: zip
+NestedInstallerType: portable
+NestedInstallerFiles:
+- RelativeFilePath: bin/osslsigncode.exe
+InstallModes:
+- interactive
+- silent
+- silentWithProgress
+UpgradeBehavior: uninstallPrevious
+Dependencies:
+  PackageDependencies:
+  - PackageIdentifier: Microsoft.VCRedist.2015+.x64
+ReleaseDate: 2026-02-02
+ArchiveBinariesDependOnPath: true
+Installers:
+- Architecture: x64
+  InstallerUrl: https://github.com/mtrojnar/osslsigncode/releases/download/2.12/osslsigncode-2.12-windows-x64-mingw.zip
+  InstallerSha256: 1AD189E915FF78974CD80A8734937691721EA4D87A91A26C2205F3D3CF7EF974
+ManifestType: installer
+ManifestVersion: 1.12.0

manifests/m/MichalTrojnara/osslsigncode/2.12/MichalTrojnara.osslsigncode.locale.en-US.yaml

@@ -0,0 +1,32 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.defaultLocale.1.12.0.schema.json
+
+PackageIdentifier: MichalTrojnara.osslsigncode
+PackageVersion: "2.12"
+PackageLocale: en-US
+Publisher: Michał Trojnara
+PublisherUrl: https://github.com/mtrojnar
+PublisherSupportUrl: https://github.com/mtrojnar/osslsigncode/issues
+Author: Michał Trojnara
+PackageName: osslsigncode
+PackageUrl: https://github.com/mtrojnar/osslsigncode
+License: GPL-3.0
+LicenseUrl: https://github.com/mtrojnar/osslsigncode/blob/master/LICENSE.txt
+Copyright: Copyright (C) 2005-2026 Per Allansson <pallansson@gmail.com>
+CopyrightUrl: https://github.com/mtrojnar/osslsigncode/blob/master/LICENSE.txt
+ShortDescription: OpenSSL based Authenticode signing for PE/MSI/Java CAB files.
+Description: |
+  osslsigncode is a small tool that implements part of the functionality of the Microsoft tool signtool.exe
+ReleaseNotes: |-
+  2.12 (2026.02.02)
+  CRITICAL SECURITY VULNERABILITY
+  This release fixes a critical memory corruption vulnerability. A malicious
+  attacker could create a signed file, which, when verified with osslsigncode,
+  triggers arbitrary code execution. Any previous version of osslsigncode should
+  be immediately upgraded if the tool is used for verification of untrusted
+  files.
+  - fixed a buffer overflow while extracting message digests
+    (reported and fixed by Antoni Klajn, Opera)
+ReleaseNotesUrl: https://github.com/mtrojnar/osslsigncode/releases/tag/2.12
+ManifestType: defaultLocale
+ManifestVersion: 1.12.0

manifests/m/MichalTrojnara/osslsigncode/2.12/MichalTrojnara.osslsigncode.yaml

@@ -0,0 +1,8 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.version.1.12.0.schema.json
+
+PackageIdentifier: MichalTrojnara.osslsigncode
+PackageVersion: "2.12"
+DefaultLocale: en-US
+ManifestType: version
+ManifestVersion: 1.12.0