Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Newest Yara-Python pip package breaks Cuckoo-3 #74

Open
geeksailor opened this issue Nov 13, 2023 · 1 comment
Open

Newest Yara-Python pip package breaks Cuckoo-3 #74

geeksailor opened this issue Nov 13, 2023 · 1 comment
Labels
bug Something isn't working

Comments

@geeksailor
Copy link

Issue description
I have been trying to install Cuckoo3 following the instructions on this site since last week but keep hitting a wall with an error output having to do with the processing abstract importing Yara having an issue with yara.cpython-38-x86_64-linux-gnu.so. I have attached my log file with specific error outputs related to this issue.
yara-python_bug.txt

Troubleshooting methods
Tried various forms of troubleshooting by Googling for answers (and found nothing related to this issue). Went through the code of various packages and scripts related to Cuckoo3 and its dependencies to see how they operate, how it installs, and the files it drops. Tried uninstalling and reinstalling of various packages (mostly having to do with Yara).

Solution
On a whim, I decided to try a downgrade reinstall of yara-python in pip. After the downgrade I ran cuckoo -dv again to see if it would error out again but did not run into the error.
Temporary Solution: For those using Yara with Cuckoo3, run pip install yara-python==4.2.0. This should allow you to be able to start up Cuckoo3 with it.
Permanent Solution: An upgrade to Cuckoo3 will eventually need to be made to allow Cuckoo3 to read and use Yara and the .so it depends on.

Expected behavior
See log fill attached for expected behavior

** My System Specs**
Ubuntu 20.04 (VM on VMWare Workstation 17), 60GB HDD, 4GB Memory, 2 cores
Cuckoo 3.0.1
Python 3.8.10
Yara-Python 4.2.0 (downgraded from most current version 4.3.1 for issue)

@icepaule
Copy link

Can confirm that this bug also effects new installation on 22.04.3 as well.
Fortunatly I can also confirm that calling "pip install yara-python==4.2.0" prior the ./install.sh fixes the issue.

Thx @geeksailor for the hint.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants