32-bit
nullsoftmachine scopesourceforge.net · known platform- File name
- download
- SHA-256
- b63cdc1c5ac39240d5c320b636854901316cdbd1f5d4c9f557c8866ffad6cbfc
by The Scribus Team · GPL-2.0-or-later
Open Source Desktop Publishing
These URLs are the ones The Scribus Team declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what The Scribus Team published. Delete it.
Windows · PowerShell
Get-FileHash "download" -Algorithm SHA256macOS · Linux
shasum -a 256 "download"Expected output
4c7313da22b8daa025dab0a2d57e82e8b1827c8a46a02db1d4e78b6037b40264
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 4 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | GPL-2.0-or-laterA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions Scribus registers itself to handle.
The version history of Scribus, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
628141C2AA601F3CAFB3484BD8DDD09CD9570BA5D45F85D95F38EF6E49C10004
3456BDA1D8AEF11904E4F8A2E16C94BD0595CB7D71A7A72FCC974D5CA95E6748
A239AB8C2094DE46681122BD66E6F0715E7E5497CCE116543EE7258A10CADBF1
615DACE82119883CC6252DA0DD69A1E1637610FF4C5550E5254B7747845F28D1
83BA45CAFC478653CE9AD420446D7FD0B016EFA591BE622F24F9CBE11B3C7E81
CCA5C3E4D5769A6917C2ED99CA52D3B3B46404192D689EE30413FE9DEE796C7B
57065CFAC522F6FA3D08DE070DF8A0BF84BAA8EEC881F4098A31C2A08A9690D6
6D83526A6FF88208E52C474ECBC8B714EE51D8E5E1672CD6527B98D9C4977706
82E7BED899524F2084F698F90FBFC41269C1D3B7C9F22EE8434866F0A51F1CFA
7EAA92581A8262A2F339B7CC4CB8982FA52454D27E6738E23EC14A66DB2A8FED
FE1DB0E03DC0FAE6727879BBEB361A011EACB74957EF7E12F8985BDD790460DD
15E5561F2774D812C50E49024B242F04C2B9AEA5C89F11944972A8CB5AD6381F
1197587EBAF4622F348DA594F3D96442847024476F078B1C1B515A736A507181
EB8CDB9EA513393C5793D3A6B180B0B04BD9383385396E13DDC23487DAFDB0CA
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Scribus version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.