Skip to content

v2.7.1

Choose a tag to compare

View all tags
@tstromberg tstromberg released this 14 Aug 13:37
· 15 commits to main since this release
v2.7.1
b25f0b9

Faster

  • Pre-compiled YARA rules ship with the binary — no rule compilation on first scan.
  • Big-buffer literal scanning is chunked and parallelized; ASCII patterns skip Unicode compilation.
  • Composite rule lookups indexed instead of rebuilt three times per call.

Detects more

  • Win32 EXE, Win64 DLL, Mach-O, ELF executable now map to real file types. Those upstream rules never ran before.
  • Fixed a panic on multibyte characters in YARA rule comments.

Better diffs

  • Truncation is severity-ordered: a hostile finding in a late file can no longer be crowded out by baseline noise.
  • Version-stamped archive roots are paired, so a version bump shows real per-file changes instead of total churn.
  • Diff JSON gains conf and file_type.

Correctness

  • Caches are keyed by detected file type, and cached results no longer come back missing symbols.
  • jemalloc build fix for NetBSD, illumos, and Solaris — this was blocking the release.

Supply-chain integrity

  • Compiled rules carry a fingerprint; a mismatch against source is rejected, not silently scanned with.
  • Rule updates de-duplicate case-variant files, so a checkout is identical on every filesystem.
  • Full CI/release pipeline landed: 20+ platforms, signed and notarized macOS, SHA-pinned actions.

Full Changelog: v2.7.0...v2.7.1

Assets 19
Loading