YARA

v4.5.5 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 7mo SIEM & Threat Detection

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Summary

AI summary

Added Windows --no-follow-symlinks option; fixed infinite loop parsing corrupt PE resource directories; reverted YR_RE_SCAN_LIMIT to 4096; improved all-matches string detection; and patched a heap overflow vulnerability when loading hand-crafted compiled rules.

Breaking Changes

YR_RE_SCAN_LIMIT reverted to 4096 — any workflows or rules that relied on the previously increased limit may behave differently or fail to match as expected.