CVS commit: pkgsrc/security/yara

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Sep  7 10:55:39 UTC 2026

Modified Files:
        pkgsrc/security/yara: Makefile Makefile.common distinfo

Log Message:
yara: updated to 4.5.8

4.5.8

Document the YR_RE_SCAN_LIMIT regular expression scan limit
BUGFIX: Bound rule table index in OP_PUSH_RULE and OP_INIT_RULE
BUGFIX: Bound tilde stream row-count read in dotnet module
BUGFIX: Bound repeat stack depth in _yr_re_fiber_sync
BUGFIX: Fix memory leak in yr_rules_load_stream (e13acd3).
BUGFIX: Add missing yr_le16toh byte-swapping in pe module (a2ff0db).
BUGFIX: Validate summary counts in yr_rules_from_arena
BUGFIX: Cast e_lfanew to int32_t before sign check in pe_get_header
BUGFIX: Bound export name count against 32-bit overflow in pe_parse_exports
BUGFIX: Null-terminate authenticode digest/thumbprint hex buffers in pe module
BUGFIX: Fix string memory leak in CLI args_free
BUGFIX: Honor -w/--no-warnings for the file-too-large skip message in CLI
BUGFIX: Avoid pointer wrap for large index in str_table_entry
BUGFIX: Bound iterator item count against value stack depth in yr_execute_code
BUGFIX: Byte-swap sh_entry_count in ELF symtab/dynsym link check
BUGFIX: Validate relocation target reference buffer ID and offset in yr_arena_load_stream
BUGFIX: Fix INT64_MIN undefined behavior in grammar constant folding (*, \, unary -)
BUGFIX: Fix HWASan trap due to unaligned access in arena relocation
BUGFIX: Bound relocation read by reference size in yr_arena_load_stream
BUGFIX: Harden PE delayed import parser and dotnet blob stream parsing
BUGFIX: Enable split ID bounds check in _yr_re_fiber_sync
BUGFIX: Bound fat architecture count against integer overflow in macho module
BUGFIX: Read dotnet and pe file fields through unaligned access helpers
BUGFIX: Remove double byte-swap of NumberOfNames in pe_parse_exports
BUGFIX: Check relocation buffer_id before dereference in yr_arena_load_stream
BUGFIX: Cast character inputs to unsigned char before ctype calls in pe and elf parsers
BUGFIX: Avoid unaligned pointer casts in arena operations to prevent HWASan traps
BUGFIX: Bound DEX ID table reads against file size in dex module
BUGFIX: Fix build issues with OpenSSL 4.0


To generate a diff of this commit:
cvs rdiff -u -r1.17 -r1.18 pkgsrc/security/yara/Makefile \
    pkgsrc/security/yara/Makefile.common
cvs rdiff -u -r1.23 -r1.24 pkgsrc/security/yara/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/yara/Makefile
diff -u pkgsrc/security/yara/Makefile:1.17 pkgsrc/security/yara/Makefile:1.18
--- pkgsrc/security/yara/Makefile:1.17  Thu Jun 18 14:43:14 2026
+++ pkgsrc/security/yara/Makefile       Mon Sep  7 10:55:39 2026
@@ -1,10 +1,9 @@
-# $NetBSD: Makefile,v 1.17 2026/06/18 14:43:14 nia Exp $
+# $NetBSD: Makefile,v 1.18 2026/09/07 10:55:39 adam Exp $
 
 .include "../../security/yara/Makefile.common"
 
 DISTNAME=      yara-${YARA_VERSION}
 CATEGORIES=    security
-GITHUB_TAG=    v${YARA_VERSION}
 
 COMMENT=       Pattern matching swiss knife for malware researchers
 LICENSE=       modified-bsd
Index: pkgsrc/security/yara/Makefile.common
diff -u pkgsrc/security/yara/Makefile.common:1.17 pkgsrc/security/yara/Makefile.common:1.18
--- pkgsrc/security/yara/Makefile.common:1.17   Sun Dec 28 08:15:02 2025
+++ pkgsrc/security/yara/Makefile.common        Mon Sep  7 10:55:39 2026
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.17 2025/12/28 08:15:02 adam Exp $
+# $NetBSD: Makefile.common,v 1.18 2026/09/07 10:55:39 adam Exp $
 #
 # used by security/yara/Makefile
 # used by security/py-yara/Makefile
 
-YARA_VERSION=  4.5.5
+YARA_VERSION=  4.5.8
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=VirusTotal/}
 GITHUB_TAG=    v${YARA_VERSION}
 

Index: pkgsrc/security/yara/distinfo
diff -u pkgsrc/security/yara/distinfo:1.23 pkgsrc/security/yara/distinfo:1.24
--- pkgsrc/security/yara/distinfo:1.23  Sun Dec 28 08:15:02 2025
+++ pkgsrc/security/yara/distinfo       Mon Sep  7 10:55:39 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.23 2025/12/28 08:15:02 adam Exp $
+$NetBSD: distinfo,v 1.24 2026/09/07 10:55:39 adam Exp $
 
-BLAKE2s (yara-4.5.5.tar.gz) = a46ea77840c57d2f1252180af03258df74696eed6015d77ebb3424a8b9a1409f
-SHA512 (yara-4.5.5.tar.gz) = e71d6e435cb2ad7b5875ccabcfe3abe42e2f37187a22e778867c5c5762134961369c2cbd4bea8da9193d5381af4569e39a50156d4077dc3a23b9a2240b741b60
-Size (yara-4.5.5.tar.gz) = 2202497 bytes
+BLAKE2s (yara-4.5.8.tar.gz) = a2390e64de949a95edcc41d2a70120f07a7426ac58d9fed9d0b379b3a7ddf259
+SHA512 (yara-4.5.8.tar.gz) = 12bbe1bebb6d51f7ae90ad6a725bdb096f3e884b757913e9ba37bfa1557bced32ef56895eb358af5f3165890336be57dc51e9fe2ad672c1e523cb30e00483c86
+Size (yara-4.5.8.tar.gz) = 2212218 bytes
 SHA1 (patch-configure.ac) = 4451fd7843ef57054f22a7144f93bc7f388daea5
 SHA1 (patch-libyara_modules_pe_authenticode-parser_helper.c) = 3b3746a353cd465fbd5cec712f6957170c6b98ee
 SHA1 (patch-libyara_modules_pe_authenticode-parser_helper.h) = af6741fa0e1ced2109cfa7e8ede8f6b264a8e850