I have a handful of applications I’ll need to update that are in Unity version 2018, so I will opt for the patcher. What I’m wondering is, will the MacOS builds need to be code signed through Xcode again after applying the patch? I unfortunately don’t have the technical know-how about how code signing works and am unsure if the patch will be significant enough of a change to invalidate the existing signatures.
Hi,
The tool handles local signing for MacOS, but you will need to redo your Developer ID signature.
So to reference the MacOS section of the remediation guide
“The patcher re‑signs your .app using an ad‑hoc signature so it can run locally. If your application was previously signed with a Developer ID certificate and notarized by Apple, the patch process will invalidate that notarization. Follow the Apple recommendations for distributing software to release your application.”
Thank you for the clarification! Disappointed to hear I’ll have to re-sign… The updating process would be a lot easier without Apple’s developer signature requirements.
If you’re distributing the game via Steam, you don’t necessarily have to resign. Unity Application Patcher leaves it in the same state that building from Unity would have given you.
However if you are submitting to Apple AppStore, you have to.
I don’t distribute through the App Store, I distribute through Steam, Itch.io and Game Jolt. I was under the impression that an Apple developer signature was required even outside the App Store. At the very least, when distributing executables through sites like Itch and Game Jolt which don’t require launchers. Is that correct?
Not necessarily, many older games are unsigned. But macOS gives you much more grief when you try to run them if you download them through the browser if they’re unsigned.
Hi,
We have a (pretty old) macOS app that we distribute through the App Store that’s affected by CVE-2025-59489. I don’t have access to the source code any more so I’m forced to use the patcher. After running the patcher on the .app file, am I able to re-upload to App Store Connect? Is it possible to generate an xcarchive file, or upload the .app file directly? If not, are there other remediation steps for macOS apps distributed through the App Store where rebuilding is not possible?
You should be able to submit it after patching an existing .app bundle. See Packaging Mac software for distribution | Apple Developer Documentation, packaging for distribution on macOS is quite an involved process.