YARA-X 1.22.1 bugfix release and YARA 4.6.0 released
RESEARCHSANS Internet Storm Centerredteam/daily · 1 source
- Severity
- Info
- Sources
- 1
What happened
YARA-X 1.22.1 is a bugfix release that addresses two bugs; the article does not specify them. YARA 4.6.0 was released alongside it but does not include the YARA-X built-in functions int64, int64be, uint64 and uint64be for reading 64-bit integers. Didier Stevens states that YARA-X has replaced YARA, which is his view rather than a stated project decision. Rule authors relying on the 64-bit read functions should use YARA-X, and teams running YARA-X should move to 1.22.1.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Users of YARA-X should update to version 1.22.1, which contains two bugfixes.
- Teams that need the 64-bit integer read functions should use YARA-X rather than YARA 4.6.0.
Written by AI from the sources, checked against them
Full story timeline · 2 updates
Who reported · 1 outlet
SANS Internet Storm Center
Who and what is in it
Companies