bump to 4.5.8

Signed-off-by: Simo Sorce <simo@redhat.com>

0001-Use-OpenSSL-accessor-functions-for-ASN1_STRING.patch

@@ -0,0 +1,235 @@
+From 05a1e87e77226c8dd7e2228d26e3aa462e968dc7 Mon Sep 17 00:00:00 2001
+From: rpm-build <rpm-build>
+Date: Thu, 23 Apr 2026 17:55:01 -0400
+Subject: [PATCH] Use OpenSSL accessor functions for ASN1_STRING
+
+Directly accessing the `data` and `length` fields of `ASN1_STRING` structures
+is incompatible with newer versions of OpenSSL, where these structures are
+opaque. This change replaces direct field access with the standard
+`ASN1_STRING_get0_data` and `ASN1_STRING_length` accessor functions to ensure
+compatibility. Additionally, an `X509_NAME_ENTRY` pointer is made `const` to
+align with modern OpenSSL API signatures.
+
+Co-authored-by: Gemini <gemini@google.com>
+Signed-off-by: rpm-build <rpm-build>
+---
+ .../pe/authenticode-parser/authenticode.c     | 32 +++++++++----------
+ .../pe/authenticode-parser/certificate.c      |  4 +--
+ .../pe/authenticode-parser/countersignature.c | 28 ++++++++--------
+ 3 files changed, 32 insertions(+), 32 deletions(-)
+
+diff --git a/libyara/modules/pe/authenticode-parser/authenticode.c b/libyara/modules/pe/authenticode-parser/authenticode.c
+index f385860..a2f7f74 100644
+--- a/libyara/modules/pe/authenticode-parser/authenticode.c
++++ b/libyara/modules/pe/authenticode-parser/authenticode.c
+@@ -78,8 +78,8 @@ static SpcIndirectDataContent* get_content(PKCS7* content)
+     if (!spcContent)
+         return NULL;
+ 
+-    int len = content->d.other->value.sequence->length;
+-    const uint8_t* data = content->d.other->value.sequence->data;
++    int len = ASN1_STRING_length(content->d.other->value.sequence);
++    const uint8_t* data = ASN1_STRING_get0_data(content->d.other->value.sequence);
+ 
+     d2i_SpcIndirectDataContent(&spcContent, &data, len);
+ 
+@@ -88,8 +88,8 @@ static SpcIndirectDataContent* get_content(PKCS7* content)
+ 
+ static char* parse_program_name(ASN1_TYPE* spcAttr)
+ {
+-    const uint8_t* spcData = spcAttr->value.sequence->data;
+-    int spcLen = spcAttr->value.sequence->length;
++    const uint8_t* spcData = ASN1_STRING_get0_data(spcAttr->value.sequence);
++    int spcLen = ASN1_STRING_length(spcAttr->value.sequence);
+     SpcSpOpusInfo* spcInfo = d2i_SpcSpOpusInfo(NULL, &spcData, spcLen);
+     if (!spcInfo)
+         return NULL;
+@@ -131,8 +131,8 @@ static void parse_nested_authenticode(PKCS7_SIGNER_INFO* si, AuthenticodeArray*
+         ASN1_TYPE* nested = X509_ATTRIBUTE_get0_type(attr, i);
+         if (nested == NULL)
+             break;
+-        int len = nested->value.sequence->length;
+-        const uint8_t* data = nested->value.sequence->data;
++        int len = ASN1_STRING_length(nested->value.sequence);
++        const uint8_t* data = ASN1_STRING_get0_data(nested->value.sequence);
+         AuthenticodeArray* auth = authenticode_new(data, len);
+         if (!auth)
+             continue;
+@@ -162,8 +162,8 @@ static void parse_pkcs9_countersig(PKCS7* p7, Authenticode* auth)
+         ASN1_TYPE* nested = X509_ATTRIBUTE_get0_type(attr, i);
+         if (nested == NULL)
+             break;
+-        int len = nested->value.sequence->length;
+-        const uint8_t* data = nested->value.sequence->data;
++        int len = ASN1_STRING_length(nested->value.sequence);
++        const uint8_t* data = ASN1_STRING_get0_data(nested->value.sequence);
+ 
+         Countersignature* sig = pkcs9_countersig_new(data, len, p7->d.sign->cert, si->enc_digest);
+         if (!sig)
+@@ -193,8 +193,8 @@ static void parse_ms_countersig(PKCS7* p7, Authenticode* auth)
+         ASN1_TYPE* nested = X509_ATTRIBUTE_get0_type(attr, i);
+         if (nested == NULL)
+             break;
+-        int len = nested->value.sequence->length;
+-        const uint8_t* data = nested->value.sequence->data;
++        int len = ASN1_STRING_length(nested->value.sequence);
++        const uint8_t* data = ASN1_STRING_get0_data(nested->value.sequence);
+ 
+         Countersignature* csig = ms_countersig_new(data, len, si->enc_digest);
+         if (!csig)
+@@ -209,8 +209,8 @@ static void parse_ms_countersig(PKCS7* p7, Authenticode* auth)
+ 
+ static bool authenticode_verify(PKCS7* p7, PKCS7_SIGNER_INFO* si, X509* signCert)
+ {
+-    const uint8_t* contentData = p7->d.sign->contents->d.other->value.sequence->data;
+-    long contentLen = p7->d.sign->contents->d.other->value.sequence->length;
++    const uint8_t* contentData = ASN1_STRING_get0_data(p7->d.sign->contents->d.other->value.sequence);
++    long contentLen = ASN1_STRING_length(p7->d.sign->contents->d.other->value.sequence);
+ 
+     uint64_t version = 0;
+     ASN1_INTEGER_get_uint64(&version, p7->d.sign->version);
+@@ -315,8 +315,8 @@ AuthenticodeArray* authenticode_new(const uint8_t* data, int32_t len)
+     int digestnid = OBJ_obj2nid(messageDigest->digestAlgorithm->algorithm);
+     auth->digest_alg = strdup(OBJ_nid2ln(digestnid));
+ 
+-    int digestLen = messageDigest->digest->length;
+-    const uint8_t* digestData = messageDigest->digest->data;
++    int digestLen = ASN1_STRING_length(messageDigest->digest);
++    const uint8_t* digestData = ASN1_STRING_get0_data(messageDigest->digest);
+     byte_array_init(&auth->digest, digestData, digestLen);
+ 
+     SpcIndirectDataContent_free(dataContent);
+@@ -372,8 +372,8 @@ AuthenticodeArray* authenticode_new(const uint8_t* data, int32_t len)
+     digestnid = OBJ_obj2nid(si->digest_alg->algorithm);
+     signer->digest_alg = strdup(OBJ_nid2ln(digestnid));
+ 
+-    digestLen = digest->value.asn1_string->length;
+-    digestData = digest->value.asn1_string->data;
++    digestLen = ASN1_STRING_length(digest->value.asn1_string);
++    digestData = ASN1_STRING_get0_data(digest->value.asn1_string);
+     byte_array_init(&signer->digest, digestData, digestLen);
+ 
+     /* Authenticode stores optional programName in non-optional SpcSpOpusInfo attribute */
+diff --git a/libyara/modules/pe/authenticode-parser/certificate.c b/libyara/modules/pe/authenticode-parser/certificate.c
+index fc754e4..97c7e3e 100644
+--- a/libyara/modules/pe/authenticode-parser/certificate.c
++++ b/libyara/modules/pe/authenticode-parser/certificate.c
+@@ -59,13 +59,13 @@ static void parse_name_attributes(X509_NAME* raw, Attributes* attr)
+ 
+     int entryCount = X509_NAME_entry_count(raw);
+     for (int i = entryCount - 1; i >= 0; --i) {
+-        X509_NAME_ENTRY* entryName = X509_NAME_get_entry(raw, i);
++        const X509_NAME_ENTRY* entryName = X509_NAME_get_entry(raw, i);
+         ASN1_STRING* asn1String = X509_NAME_ENTRY_get_data(entryName);
+ 
+         const char* key = OBJ_nid2sn(OBJ_obj2nid(X509_NAME_ENTRY_get_object(entryName)));
+ 
+         ByteArray array = {0};
+-        if (byte_array_init(&array, asn1String->data, asn1String->length) == -1)
++        if (byte_array_init(&array, ASN1_STRING_get0_data(asn1String), ASN1_STRING_length(asn1String)) == -1)
+             break;
+ 
+         if (strcmp(key, "C") == 0 && !attr->country.data)
+diff --git a/libyara/modules/pe/authenticode-parser/countersignature.c b/libyara/modules/pe/authenticode-parser/countersignature.c
+index 0fb4576..6cb5eed 100644
+--- a/libyara/modules/pe/authenticode-parser/countersignature.c
++++ b/libyara/modules/pe/authenticode-parser/countersignature.c
+@@ -141,13 +141,13 @@ Countersignature* pkcs9_countersig_new(
+     result->chain = parse_signer_chain(signCert, certs);
+ 
+     /* Get digest that corresponds to decrypted encrypted digest in signature */
+-    ASN1_TYPE* messageDigest = PKCS7_get_signed_attribute(si, NID_pkcs9_messageDigest);
++    const ASN1_TYPE* messageDigest = PKCS7_get_signed_attribute(si, NID_pkcs9_messageDigest);
+     if (!messageDigest) {
+         result->verify_flags = COUNTERSIGNATURE_VFY_DIGEST_MISSING;
+         goto end;
+     }
+ 
+-    size_t digestLen = messageDigest->value.octet_string->length;
++    size_t digestLen = ASN1_STRING_length(messageDigest->value.octet_string);
+ 
+     if (!digestLen) {
+         result->verify_flags = COUNTERSIGNATURE_VFY_DIGEST_MISSING;
+@@ -160,7 +160,7 @@ Countersignature* pkcs9_countersig_new(
+         goto end;
+     }
+ 
+-    const uint8_t* digestData = messageDigest->value.octet_string->data;
++    const uint8_t* digestData = ASN1_STRING_get0_data(messageDigest->value.octet_string);
+     byte_array_init(&result->digest, digestData, digestLen);
+ 
+     /* By this point we all necessary things for verification
+@@ -187,8 +187,8 @@ Countersignature* pkcs9_countersig_new(
+         goto end;
+     }
+ 
+-    uint8_t* encData = si->enc_digest->data;
+-    size_t encLen = si->enc_digest->length;
++    const uint8_t* encData = ASN1_STRING_get0_data(si->enc_digest);
++    size_t encLen = ASN1_STRING_length(si->enc_digest);
+ 
+     /* Decrypt the encrypted digest */
+     EVP_PKEY_verify_recover_init(ctx);
+@@ -220,7 +220,7 @@ Countersignature* pkcs9_countersig_new(
+         const uint8_t* data_ptr = decData;
+         DigestInfo* digest_info = d2i_DigestInfo(NULL, &data_ptr, decLen);
+         if (digest_info) {
+-            isValid = !memcmp(digest_info->digest->data, calc_digest, mdLen);
++            isValid = !memcmp(ASN1_STRING_get0_data(digest_info->digest), calc_digest, mdLen);
+             DigestInfo_free(digest_info);
+         } else {
+             isValid = false;
+@@ -235,7 +235,7 @@ Countersignature* pkcs9_countersig_new(
+ 
+     /* Now check the countersignature message-digest that should correspond
+      * to Signatures encrypted digest it countersigns */
+-    calculate_digest(md, enc_digest->data, enc_digest->length, calc_digest);
++    calculate_digest(md, ASN1_STRING_get0_data(enc_digest), ASN1_STRING_length(enc_digest), calc_digest);
+ 
+     /* Check if calculated one matches the stored one */
+     if (digestLen != mdLen || memcmp(calc_digest, digestData, mdLen) != 0) {
+@@ -269,8 +269,8 @@ TS_TST_INFO* IMPL_FUNC_NAME(get_ts_tst_info, cms)(CountersignatureImpl* impl)
+         return NULL;
+     }
+ 
+-    const uint8_t* data = (*content)->data;
+-    TS_TST_INFO* ts_tst_info = d2i_TS_TST_INFO(NULL, &data, (*content)->length);
++    const uint8_t* data = ASN1_STRING_get0_data(*content);
++    TS_TST_INFO* ts_tst_info = d2i_TS_TST_INFO(NULL, &data, ASN1_STRING_length(*content));
+     if (!ts_tst_info) {
+         return NULL;
+     }
+@@ -400,8 +400,8 @@ int IMPL_FUNC_NAME(verify_digest, cms)(
+         return 0;
+     }
+ 
+-    if (ts_imprint_digest->length != (int)digest_size ||
+-        memcmp(ts_imprint_digest->data, digest, digest_size) != 0) {
++    if (ASN1_STRING_length(ts_imprint_digest) != (int)digest_size ||
++        memcmp(ASN1_STRING_get0_data(ts_imprint_digest), digest, digest_size) != 0) {
+         TS_TST_INFO_free(ts_tst_info);
+         return 0;
+     }
+@@ -554,8 +554,8 @@ Countersignature* ms_countersig_new(const uint8_t* data, long size, ASN1_STRING*
+ 
+     ASN1_STRING* rawDigest = TS_MSG_IMPRINT_get_msg(imprint);
+ 
+-    int digestLen = rawDigest->length;
+-    uint8_t* digestData = rawDigest->data;
++    int digestLen = ASN1_STRING_length(rawDigest);
++    const uint8_t* digestData = ASN1_STRING_get0_data(rawDigest);
+ 
+     byte_array_init(&result->digest, digestData, digestLen);
+ 
+@@ -571,7 +571,7 @@ Countersignature* ms_countersig_new(const uint8_t* data, long size, ASN1_STRING*
+     }
+ 
+     uint8_t calc_digest[EVP_MAX_MD_SIZE];
+-    calculate_digest(md, enc_digest->data, enc_digest->length, calc_digest);
++    calculate_digest(md, ASN1_STRING_get0_data(enc_digest), ASN1_STRING_length(enc_digest), calc_digest);
+ 
+ #if OPENSSL_VERSION_NUMBER >= 0x3000000fL
+     int mdLen = EVP_MD_get_size(md);
+-- 
+2.53.0
+

changelog

@@ -0,0 +1,231 @@
+* Mon Sep 16 2024 Michal Ambroz <rebus _AT seznam.cz> - 4.5.2-1
+- bump to 4.5.2
+
+* Sat Jul 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 4.5.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
+
+* Mon May 27 2024 Michal Ambroz <rebus _AT seznam.cz> - 4.5.1-1
+- bump to 4.5.1
+
+* Wed Feb 14 2024 Michal Ambroz <rebus _AT seznam.cz> - 4.5.0-1
+- bump to 4.5.0
+
+* Fri Jan 26 2024 Fedora Release Engineering <releng@fedoraproject.org> - 4.4.0-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
+ 
+* Mon Jan 22 2024 Fedora Release Engineering <releng@fedoraproject.org> - 4.4.0-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
+
+* Sun Sep 17 2023 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 4.4.0-1
+- bump to 4.4.0
+
+* Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 4.3.2-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
+
+* Wed Jun 14 2023 Michal Ambroz <rebus _AT seznam.cz> - 4.3.2-1
+- bump to 4.3.2
+
+* Wed Apr 26 2023 Michal Ambroz <rebus _AT seznam.cz> - 4.3.1-1
+- bump to 4.3.1
+
+* Thu Mar 30 2023 Michal Ambroz <rebus _AT seznam.cz> - 4.3.0-1
+- bump to 4.3.0
+
+* Tue Jan 24 2023 Michal Ambroz <rebus _AT seznam.cz> - 4.3.0-0.rc1.3
+- fix EPEL9 build = reenable the SHA1 certificate validation in OpenSSL for make check
+
+* Sat Jan 21 2023 Michal Ambroz <rebus _AT seznam.cz> - 4.3.0-0.rc1.2
+- fix EPEL7 build
+
+* Sat Jan 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 4.3.0-0.rc1.1.1
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
+
+* Tue Jan 03 2023 Michal Ambroz <rebus _AT seznam.cz> - 4.3.0-0.rc1.1
+- bump to 4.3.0 rc1
+- remove the androguard module which is no longer available from github
+
+* Tue Aug 09 2022 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 4.2.3-1
+- Update to 4.2.3 (#2116594)
+
+* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 4.2.2-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
+
+* Mon Jul 18 2022 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 4.2.2-1
+- Update to 4.2.2 (#2103444)
+- BUGFIX: Fix buffer overrun in "dex" module (#1728).
+- BUGFIX: Wrong offset used when checking Version string of .net metadata (#1708).
+- BUGFIX: YARA doesn't compile if --with-debug-verbose flag is enabled (#1719).
+- BUGFIX: Null-pointer dereferences while loading corrupted compiled rules (#1727).
+
+* Mon May 23 2022 Michal Ambroz <rebus _AT seznam.cz> - 4.2.1-1
+- bump to 4.2.1
+- adding changes based on proposal of Mikel Olasagasti Uranga:
+- change to BSD license as yara was relicensed in 2016
+- minor changes to spec, like using https for URL
+- remove old patches
+- enable checks
+
+* Sat Mar 12 2022 Michal Ambroz <rebus _AT seznam.cz> - 4.2.0-1
+- bump to 4.2.0
+
+* Thu Feb 17 2022 Michal Ambroz <rebus _AT seznam.cz> - 4.2.0-0.rc1.1
+- bump to 4.2.0-rc1
+
+* Sat Jan 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.3-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
+
+* Wed Nov 10 2021 Michal Ambroz <rebus _AT seznam.cz> - 4.1.3-1
+- bump to 4.1.3
+
+* Sat Nov 06 2021 Adrian Reber <adrian@lisas.de> - 4.1.1-5
+- Rebuilt for protobuf 3.19.0
+
+* Mon Oct 25 2021 Adrian Reber <adrian@lisas.de> - 4.1.1-4
+- Rebuilt for protobuf 3.18.1
+
+* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 4.1.1-3
+- Rebuilt with OpenSSL 3.0.0
+
+* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
+
+* Mon May 24 2021 Michal Ambroz <rebus _AT seznam.cz> - 4.1.1-1
+- bump to 4.1.1
+
+* Mon Apr 26 2021 Michal Ambroz <rebus _AT seznam.cz> - 4.1.0-1
+- bump to 4.1.0
+
+* Sun Apr 25 2021 Michal Ambroz <rebus _AT seznam.cz> - 4.0.5-2
+- rebuild for epel
+
+* Fri Feb 5 2021 Michal Ambroz <rebus _AT seznam.cz> - 4.0.5-1
+- bump to yara bugfix 4.0.5 release
+
+* Wed Feb 3 2021 Michal Ambroz <rebus _AT seznam.cz> - 4.0.4-1
+- bump to yara bugfix 4.0.4 release
+
+* Thu Jul 16 2020 Michal Ambroz <rebus _AT seznam.cz> - 4.0.2-1
+- bump to yara bugfix 4.0.2 release
+- fix build on epel7
+
+* Sun Jun 14 2020 Adrian Reber <adrian@lisas.de> - 4.0.1-2
+- Rebuilt for protobuf 3.12
+
+* Tue Jun 2 2020 Michal Ambroz <rebus _AT seznam.cz> - 4.0.1-1
+- bump to yara bugfix 4.0.1 release
+
+* Tue Apr 28 2020 Michal Ambroz <rebus _AT seznam.cz> - 4.0.0-1
+- bump to yara 4.0.0 release
+
+* Fri Jan 31 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.11.0-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
+
+* Fri Oct 11 2019 Michal Ambroz <rebus _AT seznam.cz> - 3.11.0-1
+- bump to 3.11.0 release (#1760678)
+- BUGFIX: Some regexp character classes not matching correctly when used with “nocase” modifier (upstream #1117)
+- BUGFIX: Reduce the number of ERROR_TOO_MANY_RE_FIBERS errors for certain hex pattern containing large jumps (upstream #1107)
+- BUGFIX: Buffer overrun in “dotnet” module (upstream #1108)
+- BUGFIX: Memory leak while attaching to a process fails (upstream #1070)
+
+* Sat Sep 28 2019 Michal Ambroz <rebus _AT seznam.cz> - 3.10.0-3
+- change the sphinx build dependency
+
+* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.10.0-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
+
+* Fri May 03 2019 Michal Ambroz <rebus _AT seznam.cz> - 3.10.0-1
+- bump to 3.10.0 release (#1680204)
+- Harden virtual machine against malicious code.
+- BUGFIX: Regression bug in hex strings containing wildcards (upstream #1025).
+- BUGFIX: Buffer overrun in “elf” module.
+- BUGFIX: Buffer overrun in “dotnet” module.
+
+* Sat Mar 16 2019 Michal Ambroz <rebus _AT seznam.cz> - 3.9.0-1
+- bump to 3.9.0 release (#1680203)
+- switch from python-sphinx to python3-sphinx for generating the documentation for fc31+
+- should fix also #1660398 (CVE-2018-19974 CVE-2018-19975 CVE-2018-19976),
+  but by design it might be always dangerous to run yara signatures compiled by 3rd party,
+  so it is advised to re-compile yara rules instead
+- BUGFIX: Denial of service when using "dex" module. Found by the Cisco Talos team. (upstream #1023, CVE-2019-5020)
+- BUGFIX: Buffer overflow in "dotnet" module.
+- BUGFIX: Regexp regression when using nested quantifiers {x,y} for certain values of x and y. (#1018)
+
+* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.8.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
+
+* Mon Aug 27 2018 Michal Ambroz <rebus _AT seznam.cz> - 3.8.1-1
+- bump to 3.8.1 release (#1613093)
+
+* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.7.1-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
+
+* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.7.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
+
+* Mon Feb 05 2018 Michal Ambroz <rebus _AT seznam.cz> - 3.7.1-1
+- bump to 3.7.1 release (#1534993)
+
+* Wed Nov 15 2017 Michal Ambroz <rebus _AT seznam.cz> - 3.7.0-1
+- bump to 3.7.0 release (#1511921)
+
+* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.3-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
+
+* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.3-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
+
+* Sun Jul 16 2017 Michal Ambroz <rebus _AT seznam.cz> - 3.6.3-1
+- bump to 3.6.3 release - bugfix CVE-2017-11328
+
+* Mon Jul 03 2017 Michal Ambroz <rebus _AT seznam.cz> - 3.6.2-1
+- bump to 3.6.2 release - bugfix CVE-2017-9304, CVE-2017-9465
+
+* Wed May 24 2017 Michal Ambroz <rebus _AT seznam.cz> - 3.6.0-1
+- bump to 3.6.0 release
+- update the androguard-yara with bugfixes
+
+* Thu Apr 13 2017 Michal Ambroz <rebus _AT seznam.cz> - 3.5.0-7
+- Adding patch from pull request 627 until 3.5.1 is released
+- https://patch-diff.githubusercontent.com/raw/VirusTotal/yara/pull/627.patch
+- Fixes CVE-2016-10210 CVE-2016-10211 CVE-2017-5923 CVE-2017-5924
+
+* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.5.0-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
+
+* Tue Aug 09 2016 Michal Ambroz <rebus _AT seznam.cz> - 3.5.0-5
+- import package to Fedora
+- remove unnecessary .buildinfo tag from doc package
+
+* Fri Aug 05 2016 Michal Ambroz <rebus _AT seznam.cz> - 3.5.0-4
+- package review - bugzilla #1362265
+- cosmetics of the changelog
+- using default spinx theme to remove the static fonts
+
+* Fri Aug 05 2016 Michal Ambroz <rebus _AT seznam.cz> - 3.5.0-3
+- package review - bugzilla #1362265
+- dropped Buildroot, pkgconfig, zlib-devel, defattr
+- added buildrequires gcc
+- change license back to ASL 2.0 only
+
+* Thu Aug 04 2016 Michal Ambroz <rebus _AT seznam.cz> - 3.5.0-2
+- package review - bugzilla #1362265
+- changed packaging of doc sub-package
+
+* Thu Aug 04 2016 Michal Ambroz <rebus _AT seznam.cz> - 3.5.0-1
+- bump to new 3.5.0
+
+* Wed Aug 03 2016 Michal Ambroz <rebus _AT seznam.cz> - 3.4.0-6
+- package review - bugzilla #1362265
+- dropped dependency of python-tools
+
+* Mon Aug 01 2016 Michal Ambroz <rebus _AT seznam.cz> - 3.4.0-4
+- compile with the androguard module
+
+* Wed Jun 08 2016 Michal Ambroz <rebus _AT seznam.cz> - 3.4.0-2
+- jansson dependency >= 2.5
+
+* Wed Jun 08 2016 Michal Ambroz <rebus _AT seznam.cz> - 3.4.0-1
+- python3 stuff
+
+* Mon Jun 22 2015 Michal Ambroz <rebus _AT seznam.cz> - 3.4.0-0.git20150618
+- initial build for Fedora Project

sources

@@ -1 +1 @@
-SHA512 (yara-4.3.2.tar.gz) = dc77ec46a30ca2fff33b639166fc554c9c6d9e955642774e23da3ea7dbb25fe154cfd4ef83c9808920193028b9099258a63b3f1b9a66864a1f3905f0a8e8053f
+SHA512 (yara-4.5.8.tar.gz) = 12bbe1bebb6d51f7ae90ad6a725bdb096f3e884b757913e9ba37bfa1557bced32ef56895eb358af5f3165890336be57dc51e9fe2ad672c1e523cb30e00483c86

yara.spec

@@ -1,9 +1,8 @@
 Name:           yara
-Version:        4.3.2
-%global         baserelease 2
+Version:        4.5.8
 Summary:        Pattern matching Swiss knife for malware researchers
 URL:            https://VirusTotal.github.io/yara/
-VCS:            https://github.com/VirusTotal/yara/
+VCS:            git:https://github.com/VirusTotal/yara/
 #               https://github.com/VirusTotal/yara/releases
 
 # yara package itself is licensed with BSD 3 clause license
@@ -21,9 +20,9 @@ and a Boolean expression which determine its logic.}
 
 %global         gituser         VirusTotal
 %global         gitname         yara
-%global         gitdate         20230420
-# Commit of version 4.3.1
-%global         commit          a6f6ce1d6d74a03c396660db25765f2a794d9e30
+# Commit of version 4.5.8
+%global         gitdate         20260728
+%global         commit          84b0e3cc0e42f8f8e6b84d19c97ec3ac6ff8aee8
 %global         shortcommit     %(c=%{commit}; echo ${c:0:7})
 
 %bcond_without  release
@@ -31,19 +30,20 @@ and a Boolean expression which determine its logic.}
 
 # Build from git release version
 %if %{with release}
-Release:       %{baserelease}%{?dist}
+Release:       %autorelease
 # Source0:     https://github.com/%%{gituser}/%%{gitname}/archive/v%%{upversion}.tar.gz#/%%{name}-%%{upversion}.tar.gz
 Source0:       https://github.com/%{gituser}/%{gitname}/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
 %else
 # Build from git commit baseline
-Release:       %{baserelease}.%{gitdate}git%{shortcommit}%{?dist}
+Release:       %autorelease -s %{gitdate}git%{shortcommit}
 Source0:       https://github.com/%{gituser}/%{gitname}/archive/%{commit}/%{name}-%{version}-git%{gitdate}-%{shortcommit}.tar.gz
 %endif
 
 # Use default sphix theme to generate documentation rather than sphinx_rtd_theme
 # to avoid static installation of font files on fedora >= 24
 Patch1:         yara-docs-theme.patch
-
+# OpenSSL 4 build fixes
+Patch2:         0001-Use-OpenSSL-accessor-functions-for-ASN1_STRING.patch
 
 BuildRequires:  git
 BuildRequires:  gcc
@@ -58,7 +58,6 @@ BuildRequires:  sed
 BuildRequires:  gawk
 BuildRequires:  gzip
 BuildRequires:  xz
-BuildRequires:  pcre
 BuildRequires:  bison
 BuildRequires:  flex
 BuildRequires:  libtool
@@ -189,213 +188,4 @@ make check || (
 
 
 %changelog
-* Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 4.3.2-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
-
-* Wed Jun 14 2023 Michal Ambroz <rebus at, seznam.cz> - 4.3.2-1
-- bump to 4.3.2
-
-* Wed Apr 26 2023 Michal Ambroz <rebus at, seznam.cz> - 4.3.1-1
-- bump to 4.3.1
-
-* Thu Mar 30 2023 Michal Ambroz <rebus at, seznam.cz> - 4.3.0-1
-- bump to 4.3.0
-
-* Tue Jan 24 2023 Michal Ambroz <rebus at, seznam.cz> - 4.3.0-0.rc1.3
-- fix EPEL9 build = reenable the SHA1 certificate validation in OpenSSL for make check
-
-* Sat Jan 21 2023 Michal Ambroz <rebus at, seznam.cz> - 4.3.0-0.rc1.2
-- fix EPEL7 build
-
-* Sat Jan 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 4.3.0-0.rc1.1.1
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
-
-* Tue Jan 03 2023 Michal Ambroz <rebus at, seznam.cz> - 4.3.0-0.rc1.1
-- bump to 4.3.0 rc1
-- remove the androguard module which is no longer available from github
-
-* Tue Aug 09 2022 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 4.2.3-1
-- Update to 4.2.3 (#2116594)
-
-* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 4.2.2-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
-
-* Mon Jul 18 2022 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 4.2.2-1
-- Update to 4.2.2 (#2103444)
-- BUGFIX: Fix buffer overrun in "dex" module (#1728).
-- BUGFIX: Wrong offset used when checking Version string of .net metadata (#1708).
-- BUGFIX: YARA doesn't compile if --with-debug-verbose flag is enabled (#1719).
-- BUGFIX: Null-pointer dereferences while loading corrupted compiled rules (#1727).
-
-* Mon May 23 2022 Michal Ambroz <rebus at, seznam.cz> - 4.2.1-1
-- bump to 4.2.1
-- adding changes based on proposal of Mikel Olasagasti Uranga:
-- change to BSD license as yara was relicensed in 2016
-- minor changes to spec, like using https for URL
-- remove old patches
-- enable checks
-
-* Sat Mar 12 2022 Michal Ambroz <rebus at, seznam.cz> - 4.2.0-1
-- bump to 4.2.0
-
-* Thu Feb 17 2022 Michal Ambroz <rebus at, seznam.cz> - 4.2.0-0.rc1.1
-- bump to 4.2.0-rc1
-
-* Sat Jan 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.3-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
-
-* Wed Nov 10 2021 Michal Ambroz <rebus at, seznam.cz> - 4.1.3-1
-- bump to 4.1.3
-
-* Sat Nov 06 2021 Adrian Reber <adrian@lisas.de> - 4.1.1-5
-- Rebuilt for protobuf 3.19.0
-
-* Mon Oct 25 2021 Adrian Reber <adrian@lisas.de> - 4.1.1-4
-- Rebuilt for protobuf 3.18.1
-
-* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 4.1.1-3
-- Rebuilt with OpenSSL 3.0.0
-
-* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.1-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
-
-* Mon May 24 2021 Michal Ambroz <rebus at, seznam.cz> - 4.1.1-1
-- bump to 4.1.1
-
-* Mon Apr 26 2021 Michal Ambroz <rebus at, seznam.cz> - 4.1.0-1
-- bump to 4.1.0
-
-* Sun Apr 25 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.5-2
-- rebuild for epel
-
-* Fri Feb 5 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.5-1
-- bump to yara bugfix 4.0.5 release
-
-* Wed Feb 3 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.4-1
-- bump to yara bugfix 4.0.4 release
-
-* Thu Jul 16 2020 Michal Ambroz <rebus at, seznam.cz> - 4.0.2-1
-- bump to yara bugfix 4.0.2 release
-- fix build on epel7
-
-* Sun Jun 14 2020 Adrian Reber <adrian@lisas.de> - 4.0.1-2
-- Rebuilt for protobuf 3.12
-
-* Tue Jun 2 2020 Michal Ambroz <rebus at, seznam.cz> - 4.0.1-1
-- bump to yara bugfix 4.0.1 release
-
-* Tue Apr 28 2020 Michal Ambroz <rebus at, seznam.cz> - 4.0.0-1
-- bump to yara 4.0.0 release
-
-* Fri Jan 31 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.11.0-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
-
-* Fri Oct 11 2019 Michal Ambroz <rebus at, seznam.cz> - 3.11.0-1
-- bump to 3.11.0 release (#1760678)
-- BUGFIX: Some regexp character classes not matching correctly when used with “nocase” modifier (upstream #1117)
-- BUGFIX: Reduce the number of ERROR_TOO_MANY_RE_FIBERS errors for certain hex pattern containing large jumps (upstream #1107)
-- BUGFIX: Buffer overrun in “dotnet” module (upstream #1108)
-- BUGFIX: Memory leak while attaching to a process fails (upstream #1070)
-
-* Sat Sep 28 2019 Michal Ambroz <rebus at, seznam.cz> - 3.10.0-3
-- change the sphinx build dependency
-
-* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.10.0-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
-
-* Fri May 03 2019 Michal Ambroz <rebus at, seznam.cz> - 3.10.0-1
-- bump to 3.10.0 release (#1680204)
-- Harden virtual machine against malicious code.
-- BUGFIX: Regression bug in hex strings containing wildcards (upstream #1025).
-- BUGFIX: Buffer overrun in “elf” module.
-- BUGFIX: Buffer overrun in “dotnet” module.
-
-* Sat Mar 16 2019 Michal Ambroz <rebus at, seznam.cz> - 3.9.0-1
-- bump to 3.9.0 release (#1680203)
-- switch from python-sphinx to python3-sphinx for generating the documentation for fc31+
-- should fix also #1660398 (CVE-2018-19974 CVE-2018-19975 CVE-2018-19976),
-  but by design it might be always dangerous to run yara signatures compiled by 3rd party,
-  so it is advised to re-compile yara rules instead
-- BUGFIX: Denial of service when using "dex" module. Found by the Cisco Talos team. (upstream #1023, CVE-2019-5020)
-- BUGFIX: Buffer overflow in "dotnet" module.
-- BUGFIX: Regexp regression when using nested quantifiers {x,y} for certain values of x and y. (#1018)
-
-* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.8.1-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
-
-* Mon Aug 27 2018 Michal Ambroz <rebus at, seznam.cz> - 3.8.1-1
-- bump to 3.8.1 release (#1613093)
-
-* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.7.1-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
-
-* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.7.1-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
-
-* Mon Feb 05 2018 Michal Ambroz <rebus at, seznam.cz> - 3.7.1-1
-- bump to 3.7.1 release (#1534993)
-
-* Wed Nov 15 2017 Michal Ambroz <rebus at, seznam.cz> - 3.7.0-1
-- bump to 3.7.0 release (#1511921)
-
-* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.3-3
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
-
-* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.3-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
-
-* Sun Jul 16 2017 Michal Ambroz <rebus at, seznam.cz> - 3.6.3-1
-- bump to 3.6.3 release - bugfix CVE-2017-11328
-
-* Mon Jul 03 2017 Michal Ambroz <rebus at, seznam.cz> - 3.6.2-1
-- bump to 3.6.2 release - bugfix CVE-2017-9304, CVE-2017-9465
-
-* Wed May 24 2017 Michal Ambroz <rebus at, seznam.cz> - 3.6.0-1
-- bump to 3.6.0 release
-- update the androguard-yara with bugfixes
-
-* Thu Apr 13 2017 Michal Ambroz <rebus at, seznam.cz> - 3.5.0-7
-- Adding patch from pull request 627 until 3.5.1 is released
-- https://patch-diff.githubusercontent.com/raw/VirusTotal/yara/pull/627.patch
-- Fixes CVE-2016-10210 CVE-2016-10211 CVE-2017-5923 CVE-2017-5924
-
-* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.5.0-6
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
-
-* Tue Aug 09 2016 Michal Ambroz <rebus at, seznam.cz> - 3.5.0-5
-- import package to Fedora
-- remove unnecessary .buildinfo tag from doc package
-
-* Fri Aug 05 2016 Michal Ambroz <rebus at, seznam.cz> - 3.5.0-4
-- package review - bugzilla #1362265
-- cosmetics of the changelog
-- using default spinx theme to remove the static fonts
-
-* Fri Aug 05 2016 Michal Ambroz <rebus at, seznam.cz> - 3.5.0-3
-- package review - bugzilla #1362265
-- dropped Buildroot, pkgconfig, zlib-devel, defattr
-- added buildrequires gcc
-- change license back to ASL 2.0 only
-
-* Thu Aug 04 2016 Michal Ambroz <rebus at, seznam.cz> - 3.5.0-2
-- package review - bugzilla #1362265
-- changed packaging of doc sub-package
-
-* Thu Aug 04 2016 Michal Ambroz <rebus at, seznam.cz> - 3.5.0-1
-- bump to new 3.5.0
-
-* Wed Aug 03 2016 Michal Ambroz <rebus at, seznam.cz> - 3.4.0-6
-- package review - bugzilla #1362265
-- dropped dependency of python-tools
-
-* Mon Aug 01 2016 Michal Ambroz <rebus at, seznam.cz> - 3.4.0-4
-- compile with the androguard module
-
-* Wed Jun 08 2016 Michal Ambroz <rebus at, seznam.cz> - 3.4.0-2
-- jansson dependency >= 2.5
-
-* Wed Jun 08 2016 Michal Ambroz <rebus at, seznam.cz> - 3.4.0-1
-- python3 stuff
-
-* Mon Jun 22 2015 Michal Ambroz <rebus at, seznam.cz> - 3.4.0-0.git20150618
-- initial build for Fedora Project
+%autochangelog