From 97a9ade6ec71c4dd41e199079643465af3ee6096 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20Trojnara?= Date: Tue, 10 Feb 2026 22:51:25 +0100 Subject: [PATCH] Release 2.13 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Michał Trojnara --- .github/workflows/ci.yml | 2 +- CMakeLists.txt | 2 +- NEWS.md | 15 ++++++++++++++- 3 files changed, 16 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0c2abe7..37eefe8 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -7,7 +7,7 @@ on: env: # Customize the CMake build type here (Release, Debug, RelWithDebInfo, etc.) BUILD_TYPE: Release - version: osslsigncode-2.13-dev + version: osslsigncode-2.13 jobs: build: diff --git a/CMakeLists.txt b/CMakeLists.txt index 3a8c226..5791003 100644 --- a/CMakeLists.txt +++ b/CMakeLists.txt @@ -16,7 +16,7 @@ project(osslsigncode LANGUAGES C) # force nonstandard version format for development packages -set(DEV "-dev") +set(DEV "") set(PROJECT_VERSION "${PROJECT_VERSION_MAJOR}.${PROJECT_VERSION_MINOR}${DEV}") # version and contact information diff --git a/NEWS.md b/NEWS.md index f684a88..1b284dc 100644 --- a/NEWS.md +++ b/NEWS.md @@ -1,6 +1,19 @@ # osslsigncode change log -### 2.13 (unreleased) +### 2.13 (2026.02.10) + +**MULTIPLE SECURITY VULNERABILITIES** + +This release includes important security fixes. Users are strongly encouraged +to upgrade, as the issues below may be exploitable when processing untrusted +files. + +- fixed integer overflows when processing APPX compressed data streams + (by Małgorzata Olszówka) +- fixed double-free vulnerabilities in APPX file processing + (by Małgorzata Olszówka) +- fixed multiple memory corruption issues in PE page hash computation + (by Antoni Klajn (Opera) and Małgorzata Olszówka) ### 2.12 (2026.02.02)