Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

yara-doc-4.1.3-1.5 RPM for armv7hl

From OpenSuSE Ports Tumbleweed for armv7hl

Name: yara-doc Distribution: openSUSE Tumbleweed
Version: 4.1.3 Vendor: openSUSE
Release: 1.5 Build date: Wed Jun 15 05:21:45 2022
Group: Development/Libraries/C and C++ Build host: obs-arm-11
Size: 228351 Source RPM: yara-4.1.3-1.5.src.rpm
Summary: Documentation files to support the YARA malware identification tool
Documentation and guideslines to support YARA.

YARA is a tool aimed at helping malware researchers to identify and classify
malware samples. With YARA you can create descriptions of malware families
based on textual or binary patterns contained on samples of those families.
Each description consists of a set of strings and a Boolean expression which
determines its logic.






* Fri Nov 05 2021 Arjen de Korte <>
  - update to 4.1.3:
    * BUGFIX: Fix issue where ERROR_TOO_MANY_MATCHES was incorrectly returned
    * BUGFIX: Fix potential buffer overrun due to incorrect macro
  - Change license to BSD-3-Clause (upstream changed to this license with
    version 3.5.0)
* Sat Oct 16 2021 Dirk Müller <>
  - update to 4.1.2:
    * BUGFIX: TOO_MANY_MATCHES warning was causing strings to be globally disabled
    * BUGFIX: fullworld modifier not working as expected in Mac OS due to locale issue
    * BUGFIX: Default value for pe.number_of_imported_function not set to 0
* Sat May 29 2021 Ferdinand Thiessen <>
  - Update to version 4.1.1
    * BUGFIX: Accept the "+" character as valid in DLL names
    * BUGFIX: Buffer overrun in "macho" module.
    * BUGFIX: Crash due to consecutive jumps in hex strings
* Thu May 06 2021 Ferdinand Thiessen <>
  - Update to version 4.1.0
    * New operators icontains, endswith, iendswith, startswith,
    * Accept \t escape sequence in text strings.
    * Add --no-follow-links command-line option to yara.
    * Prevent yara from following links to "."
    * Implemented non-blocking scanning API
    * When a string causes too many matches, YARA raises a warning
      instead of failing
    * BUGFIX: The use of --timeout could hang yara when scanning
      directories or lists of files
    * BUGFIX: Incorrect parsing of PE certificates
    * BUGFIX: Short-circuit evaluation not working fine with
      undefined expressions
  - Drop yara-fix-arm.patch, upstream merged
* Mon Feb 08 2021 Dirk Müller <>
  - update to 4.0.5:
    * Fix bug in "macho" module introduced in v4.0.4.
* Fri Jan 29 2021 Dirk Müller <>
  - update to 4.0.4:
    * Multiple out-of-bounds read in "dotnet" module.
    * Multiple out-of-bounds reads in "macho" module.
* Tue Sep 15 2020 Guillaume GARDET <>
  - Backport upstream patch to fix a segfault on ARM:
    * yara-fix-arm.patch
* Mon Aug 17 2020 Dirk Mueller <>
  - Update to 4.0.2:
    - BUGFIX: Use-after-free bug in PE module (#1287).
    - BUGFIX: Incorrect errors in rules when a single rule is badly
      formatted (#1294).
    - BUGFIX: Assertion failed with rules that have invalid syntax
    - BUGFIX: Integer overflow causing missed matches on files larger
      than 2GB (#1304).
    - BUGFIX: Crashes in Mac OS while scanning binaries with a
      signature that can't be verified (#1309).
  - Update to 4.0.1:
    - Update sandboxed API (#1276)
    - BUGFIX: Fix regression in exports parsing in PE module
    - BUGFIX: Fix unaligned accesses in ARM (e1654ae)
  - Update to 4.0.0:
    - New string modifiers base64 and base64wide (#1185).
    - New string modifier private (#1096)
    - Iterators for dictionaries and arrays (#1141).
    - Multiple API changes.
    - Memory footprint greatly reduced, specially when compiling
      large numbers of rules.
    - New commmand-line option --scan-list (#1261).
    - Added pdb_path field to "pe" module.
    - Added export_details array to "pe" module.
    - Added exports_index functions to "pe" module.
    - Improvements to "cuckoo" module.
    - BUGFIX: PE files with multiple signatures are parsed correctly
    - BUGFIX: Fix PE rich header parsing (#1164).
    - BUGFIX: Buffer overruns in "dotnet" module (#1167, #1173).
  - Bump .so version
  - Update to 3.11.0:
    - Duplicated string modifiers are now an error.
    - More flexible “xor” modifier.
    - Implement “private” strings (#1096)
    - Add “field_offsets” to “dotnet” module.
    - Implement “crc32” functions in “hash” module.
    - Improvements to “rich_signature” functions in “pe” module.
    - Implement sandboxed API using SAPI
    - BUGFIX: Some regexp character classes not matching correctly
      when used with “nocase” modifier (#1117)
    - BUGFIX: Reduce the number of ERROR_TOO_MANY_RE_FIBERS errors
      for certain hex pattern containing large jumps (#1107)
    - BUGFIX: Buffer overrun in “dotnet” module (#1108)
    - BUGFIX: Segfault in certain Windows versions (#1068)
    - BUGFIX: Memory leak while attaching to a process fails (#1070)
  - Update to 3.10.0:
    - Optimize integer range loops by exiting earlier when possible.
    - Cache the result of PE module’s imphash function in order to
      improve performance.
    - Harden virtual machine against malicious code.
    - BUGFIX: “xor” modifier not working as expected if not
      accompanied by “ascii” (#1053).
    - BUGFIX: \s and \S character classes in regular expressions now
      include vertical tab, new line, carriage return and form feed
    - BUGFIX: Regression bug in hex strings containing wildcards
    - BUGFIX: Buffer overrun in “elf” module.
    - BUGFIX: Buffer overrun in “dotnet” module.
  - Update to 3.9.0:
    - Improve scan performance for certain strings.
    - Reduce stack usage.
    - Prevent inadvertent use of compiled rules by forcing the use of
    - C when using yara command-line tool.
    - BUGFIX: Buffer overflow in "dotnet" module.
    - BUGFIX: Internal error when running multiple instances of YARA
      in Mac OS X. (#945)
    - BUGFIX: Regexp regression when using nested quantifiers {x,y}
      for certain values of x and y. (#1018)
    - BUGFIX: High RAM consumption in "pe" module while parsing
      certain files.(0c8b461)
    - BUGFIX: Denial of service when using "dex" module. Found by the
      Cisco Talos team. (#1023)
    - BUGFIX: Issues with comments inside hex strings.
  - Update to 3.8.1:
    - BUGFIX: Some combinations of boolean command-line flags were
      broken in version 3.8.0.
    - BUGFIX: While reporting errors that occur at the end of the
      file, the file name appeared as null.
    - BUGFIX: dex module now works in big-endian architectures.
    - BUGFIX: Keep ABI compatibility by keeping deprecated functions
  - Update to 3.8.0:
    - Scanner API
    - New “xor” modifier for strings
    - New fields and functions in PE module.
    - Add functions “min” and “max” to math module.
    - Make compiled.
    - yara and yaracsupport reading rules from stdin by using - as
      the file name.
    - Rule compilation is faster.
    - BUGFIX: Regression in regex engine. /ba{3}b/ was matching
    - BUGFIX: Function yr_compiler_add_fd() was reading only the
      first 1024 bytes of the file.
    - BUGFIX: Wrong calculation of sha256 hashes in Windows when
      using native crypto API.
    - Lots of more bug fixes.
* Tue May 22 2018
  - Update to 3.7.1:
    * Fix regression in include directive (issue #796)
    * Fix bug in PE checksum calculation causing wrong results in some cases.
    * time module (Wesley Shields)
    * yara command-line tool now accept multiple rule files
    * Allow a configurable limit for the number of strings per rule (option --max-strings-per-rule)
    * Implement integrity check for compiled rules
    * Implement API for customizingimport statement (@edhoedt)
    * Scan process memory in FreeBSD and OpenBDS (Hilko Bengen)
    * BUGFIX: Negated character classes not working with case-insensitive regexps (#765)
    * BUGFIX: Multiple bugs while parsing ELF files (Nate Rosenblum)
    * BUGFIX: Out-of-bounds access while parsing PE files.
    * BUGFIX: Memory leaks while parsing invalid rules.
    * BUGFIX: Heap overflow (4a342f0)
    * BUGFIX: Off-by-one NULL write in stack buffer (964d6c0)
    * BUGFIX: Multiple issues in "dotnet" module (f40c14c, fc35e5f)
    * Increase RE_MAX_AST_LEVELS from 2000 to 6000.
    * BUGFIX: Buffer overrun in regexp engine (issue #678)
    * BUGFIX: Null pointer dereference in regexp engine (issue #682).
  - Run testsuite
* Tue Jun 06 2017
  - update to v3.6.1
    * BUGFIX: Stack overflow caused by uncontrolled recursiveness (CVE-2017-9304)
    * BUGFIX: pe.overlay.size was undefined if the PE didn't have an overlay. Now it's set to 0 in those cases.
    * BUGFIX: Fix initalization issue that could cause a crash if rules compiled with a 32bit yarac is used with a 64bit yara.
  - update to v3.6.0
    * .NET module (Wesley Shields)
    * New features for ELF module (Jacob Baines)
    * Fix endianness issues (Hilko Bengen)
    * Function yr_compiler_add_fd added to libyara
    * MAX_THREADS limit can be arbitrarily increased (Emerson R. Wiley)
    * Added --fail-on-warnings command-line option
    * Multiple bug fixes:
    CVE-2016-10210, CVE-2016-10211, CVE-2017-5923, CVE-2017-5924,
    CVE-2017-8294, CVE-2017-8929, CVE-2017-9438



Generated by rpm2html 1.8.1

Fabrice Bellet, Tue Jul 19 23:34:35 2022