file.wiki

Software

Scribus

by The Scribus Team · GPL-2.0-or-later

95/100how this is calculated

Open Source Desktop Publishing

Record

Latest version
1.6.6
Release date
13 Apr 2026
Official page
https://www.scribus.net/
Package identifier
Scribus.Scribus

Official downloads

These URLs are the ones The Scribus Team declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.

More than one architecture below. Check which one your Windows is if you are not sure.

Verify the file you downloaded

Run this against the file on disk. If the output does not match the hash below, the file is not what The Scribus Team published. Delete it.

Windows · PowerShell

Get-FileHash "download" -Algorithm SHA256

macOS · Linux

shasum -a 256 "download"

Expected output

4c7313da22b8daa025dab0a2d57e82e8b1827c8a46a02db1d4e78b6037b40264

Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.

Download Scribus for Mac

The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.

Version on Homebrew
1.6.6
File name
scribus-1.6.6-arm64.dmg
Download URL
https://downloads.sourceforge.net/scribus/scribus/1.6.6/scribus-1.6.6-arm64.dmg
SHA-256
0666a15e843575dea51233f874f2a840c73dc1cc5cbdf676fcff2e8978a71815
Install with Homebrew
brew install --cask scribus

How we scored this 95 out of 100

SignalFindingPoints
SHA-256 hash published2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built.30 / 30
Binary provenance2 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for.29.8 / 35
Served over HTTPS2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit.15 / 15
Release recencylast release about 4 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities.15 / 15
Licence declaredGPL-2.0-or-laterA declared licence tells you what you are actually allowed to do with the software.5 / 5

Opens 1 file type

Extensions Scribus registers itself to handle.

Is Scribus safe to download?

The installer comes from a recognised distribution platform rather than The Scribus Team's own domain. That is normal for this kind of software and not a red flag by itself.

Every one of the 2 installers on this page comes with the SHA-256 The Scribus Team declared, so you do not have to take our word for it: hash the file you downloaded and compare.

What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.

If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.

How the 95/100 score is calculated · why the source matters more than the reputation

Install Scribus with winget

Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.

Install

winget install --id Scribus.Scribus --exact

Upgrade later

winget upgrade --id Scribus.Scribus

Why --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.

Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.

Old versions of Scribus7 with hashes

The version history of Scribus, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.

We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.

1.6.5

released 14 Dec 2025
  • download32-bitofficial URL

    628141C2AA601F3CAFB3484BD8DDD09CD9570BA5D45F85D95F38EF6E49C10004

  • download64-bitofficial URL

    3456BDA1D8AEF11904E4F8A2E16C94BD0595CB7D71A7A72FCC974D5CA95E6748

1.6.4

released 20 Apr 2025
  • download32-bitofficial URL

    A239AB8C2094DE46681122BD66E6F0715E7E5497CCE116543EE7258A10CADBF1

  • download64-bitofficial URL

    615DACE82119883CC6252DA0DD69A1E1637610FF4C5550E5254B7747845F28D1

1.6.3

released 08 Jan 2025
  • download32-bitofficial URL

    83BA45CAFC478653CE9AD420446D7FD0B016EFA591BE622F24F9CBE11B3C7E81

  • download64-bitofficial URL

    CCA5C3E4D5769A6917C2ED99CA52D3B3B46404192D689EE30413FE9DEE796C7B

1.6.2

released 15 Jun 2024
  • download32-bitofficial URL

    57065CFAC522F6FA3D08DE070DF8A0BF84BAA8EEC881F4098A31C2A08A9690D6

  • download64-bitofficial URL

    6D83526A6FF88208E52C474ECBC8B714EE51D8E5E1672CD6527B98D9C4977706

1.6.1

released 07 Jan 2024
  • download32-bitofficial URL

    82E7BED899524F2084F698F90FBFC41269C1D3B7C9F22EE8434866F0A51F1CFA

  • download64-bitofficial URL

    7EAA92581A8262A2F339B7CC4CB8982FA52454D27E6738E23EC14A66DB2A8FED

1.6.0

  • download64-bitofficial URL

    FE1DB0E03DC0FAE6727879BBEB361A011EACB74957EF7E12F8985BDD790460DD

  • download32-bitofficial URL

    15E5561F2774D812C50E49024B242F04C2B9AEA5C89F11944972A8CB5AD6381F

1.4.8

  • download64-bitofficial URL

    1197587EBAF4622F348DA594F3D96442847024476F078B1C1B515A736A507181

  • download32-bitofficial URL

    EB8CDB9EA513393C5793D3A6B180B0B04BD9383385396E13DDC23487DAFDB0CA

Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.

Every version on record8

Every Scribus version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.

  • 1.6.6
  • 1.6.5
  • 1.6.4
  • 1.6.3
  • 1.6.2
  • 1.6.1
  • 1.6.0
  • 1.4.8

More programs we index

Not related to Scribus — just other entries, each with its own official URL and published hash.

Where our data comes from

Windows manifest
github.com/microsoft/winget-pkgs/tree/master/manifests/s/Scribus/Scribus/1.6.6
macOS cask
formulae.brew.sh/cask/scribus