db4a295540
Since version 3.11.0: YARA v4.1.0 * New operators icontains, endswith, iendswith, startswith, istartswith. * Accept \t escape sequence in text strings. * Add --no-follow-links command-line option to yara. * Prevent yara from following links to "." (@1D2D). * Implemented non-blocking scanning API (@simonhf). * When a string causes too many matches, YARA raises a warning instead of failing (@wxsBSD). * BUGFIX: The use of --timeout could hang yara when scanning directories or lists of files (#1481). * BUGFIX: Incorrect parsing of PE certificates (#1443). * BUGFIX: Short-circuit evaluation not working fine with undefined expressions. YARA v4.1.0-rc2 * Don't raise warnings for non-ASCII strings. YARA v4.1.0-rc1 * New operators icontains, endswith, iendswith, startswith, istartswith. * Raise warnings for non-ascii strings. * Accept \t escape sequence in text strings. * Add --no-follow-links command-line option to yara. * Prevent yara from following links to "." (@1D2D). * Implemented non-blocking scanning API (@simonhf). * When a string causes too many matches, YARA raises a warning instead of failing. YARA v4.0.5 * BUGFIX: Fix bug in "macho" module introduced in v4.0.4. YARA v4.0.4 * BUGFIX: Multiple out-of-bounds reads in "macho" module. Credits to Luis Merino from X41 D-SEC GmbH for reporting these issues. YARA v4.0.3 * BUGFIX: Multiple out-of-bounds read in "dotnet" module. YARA v4.0.2 * BUGFIX: Use-after-free bug in PE module (#1287). * BUGFIX: Incorrect errors in rules when a single rule is badly formatted (#1294). * BUGFIX: Assertion failed with rules that have invalid syntax (#1295). * BUGFIX: Integer overflow causing missed matches on files larger than 2GB (#1304). * BUGFIX: Crashes in Mac OS while scanning binaries with a signature that can't be verified (#1309). YARA v4.0.1 * Update sandboxed API (#1276). * BUGFIX: Fix regression in exports parsing in PE module (2bf67e6). * BUGFIX: Fix unaligned accesses in ARM (e1654ae). YARA v4.0.0 * New string modifiers base64 and base64wide (#1185). * New string modifier private (#1096). * Iterators for dictionaries and arrays (#1141). * Multiple API changes. * Memory footprint greatly reduced, specially when compiling large numbers of rules. * New commmand-line option --scan-list (#1261). * Added pdb_path field to "pe" module. * Added export_details array to "pe" module. * Added exports_index functions to "pe" module. * Improvements to "cuckoo" module. * BUGFIX: PE files with multiple signatures are parsed correctly (#940). * BUGFIX: Fix PE rich header parsing (#1164). * BUGFIX: Buffer overruns in "dotnet" module (#1167, #1173).
40 lines
878 B
Text
40 lines
878 B
Text
@comment $NetBSD: PLIST,v 1.7 2021/05/30 01:16:28 khorben Exp $
|
|
bin/yara
|
|
bin/yarac
|
|
include/yara.h
|
|
include/yara/ahocorasick.h
|
|
include/yara/arena.h
|
|
include/yara/atoms.h
|
|
include/yara/base64.h
|
|
include/yara/bitmask.h
|
|
include/yara/compiler.h
|
|
include/yara/error.h
|
|
include/yara/exec.h
|
|
include/yara/exefiles.h
|
|
include/yara/filemap.h
|
|
include/yara/hash.h
|
|
include/yara/integers.h
|
|
include/yara/libyara.h
|
|
include/yara/limits.h
|
|
include/yara/mem.h
|
|
include/yara/modules.h
|
|
include/yara/notebook.h
|
|
include/yara/object.h
|
|
include/yara/parser.h
|
|
include/yara/proc.h
|
|
include/yara/re.h
|
|
include/yara/rules.h
|
|
include/yara/scan.h
|
|
include/yara/scanner.h
|
|
include/yara/sizedstr.h
|
|
include/yara/stack.h
|
|
include/yara/stopwatch.h
|
|
include/yara/stream.h
|
|
include/yara/strutils.h
|
|
include/yara/threading.h
|
|
include/yara/types.h
|
|
include/yara/utils.h
|
|
lib/libyara.la
|
|
lib/pkgconfig/yara.pc
|
|
man/man1/yara.1
|
|
man/man1/yarac.1
|