|
 |
2b9767 |
Name: yara
|
|
|
2b9767 |
Version: 4.2.3
|
|
|
2b9767 |
Release: 1%{?dist}
|
|
|
2b9767 |
Summary: Pattern matching Swiss knife for malware researchers
|
|
|
2b9767 |
|
|
|
2b9767 |
License: BSD-3-Clause
|
|
|
2b9767 |
VCS: http://github.com/VirusTotal/yara/
|
|
|
2b9767 |
# http://github.com/VirusTotal/yara/releases
|
|
|
2b9767 |
URL: http://VirusTotal.github.io/yara/
|
|
|
2b9767 |
|
|
|
2b9767 |
|
|
|
2b9767 |
%global gituser VirusTotal
|
|
|
2b9767 |
%global gitname yara
|
|
|
2b9767 |
|
|
|
2b9767 |
# Build from git release version
|
|
|
2b9767 |
Source0: https://github.com/%{gituser}/%{gitname}/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
|
|
|
2b9767 |
|
|
|
2b9767 |
|
|
|
2b9767 |
BuildRequires: git
|
|
|
2b9767 |
BuildRequires: gcc
|
|
|
2b9767 |
BuildRequires: autoconf
|
|
|
2b9767 |
BuildRequires: automake
|
|
|
2b9767 |
BuildRequires: m4
|
|
|
2b9767 |
BuildRequires: binutils
|
|
|
2b9767 |
BuildRequires: coreutils
|
|
|
2b9767 |
BuildRequires: sharutils
|
|
|
2b9767 |
BuildRequires: file
|
|
|
2b9767 |
BuildRequires: gawk
|
|
|
2b9767 |
BuildRequires: gzip
|
|
|
2b9767 |
BuildRequires: xz
|
|
|
2b9767 |
BuildRequires: pcre
|
|
|
2b9767 |
BuildRequires: bison
|
|
|
2b9767 |
BuildRequires: flex
|
|
|
2b9767 |
BuildRequires: libtool
|
|
|
2b9767 |
BuildRequires: file-devel
|
|
|
2b9767 |
BuildRequires: jansson-devel >= 2.5
|
|
|
2b9767 |
BuildRequires: openssl-devel
|
|
|
2b9767 |
BuildRequires: protobuf-c-devel
|
|
|
2b9767 |
BuildRequires: protobuf-compiler
|
|
|
2b9767 |
|
|
|
2b9767 |
# html doc generation
|
|
|
2b9767 |
BuildRequires: /usr/bin/sphinx-build
|
|
|
2b9767 |
|
|
|
2b9767 |
%description
|
|
|
2b9767 |
YARA is a tool aimed at (but not limited to) helping malware researchers to
|
|
|
2b9767 |
identify and classify malware samples. With YARA you can create descriptions
|
|
|
2b9767 |
of malware families (or whatever you want to describe) based on textual or
|
|
|
2b9767 |
binary patterns. Each description, a.k.a rule, consists of a set of strings
|
|
|
2b9767 |
and a Boolean expression which determine its logic.
|
|
|
2b9767 |
|
|
|
2b9767 |
|
|
|
2b9767 |
%package doc
|
|
|
2b9767 |
Summary: Documentation for %{name}
|
|
|
2b9767 |
BuildArch: noarch
|
|
|
2b9767 |
|
|
|
2b9767 |
%description doc
|
|
|
2b9767 |
This package contains documentation for %{name}.
|
|
|
2b9767 |
|
|
|
2b9767 |
|
|
|
2b9767 |
%package devel
|
|
|
2b9767 |
Summary: Development files for %{name}
|
|
|
2b9767 |
Requires: %{name}%{?_isa} = %{version}-%{release}
|
|
|
2b9767 |
|
|
|
2b9767 |
|
|
|
2b9767 |
%description devel
|
|
|
2b9767 |
The %{name}-devel package contains libraries and header files for
|
|
|
2b9767 |
developing applications that use %{name}.
|
|
|
2b9767 |
|
|
|
2b9767 |
|
|
|
2b9767 |
%prep
|
|
|
2b9767 |
%autosetup -p 1 -S git
|
|
|
2b9767 |
%setup -q
|
|
|
2b9767 |
autoreconf --force --install
|
|
|
2b9767 |
|
|
|
2b9767 |
|
|
|
2b9767 |
%build
|
|
|
2b9767 |
|
|
|
2b9767 |
# Add missing definition on RHEL7
|
|
|
2b9767 |
%if 0%{?rhel} && 0%{?rhel} == 7
|
|
|
2b9767 |
export CFLAGS="$CFLAGS -D PROTOBUF_C_FIELD_FLAG_ONEOF=4"
|
|
|
2b9767 |
%endif
|
|
|
2b9767 |
|
|
|
2b9767 |
# macro %%configure already does use CFLAGS="\{optflags}" and yara build
|
|
|
2b9767 |
# scripts configure/make already honors that CFLAGS
|
|
|
2b9767 |
%configure --enable-magic --enable-cuckoo --enable-debug --enable-dotnet \
|
|
|
2b9767 |
--enable-macho --enable-dex --enable-pb-tests \
|
|
|
2b9767 |
--with-crypto \
|
|
|
2b9767 |
--htmldir=%{_datadir}/doc/%{name}/html
|
|
|
2b9767 |
%make_build
|
|
|
2b9767 |
|
|
|
2b9767 |
# build the HTML documentation
|
|
|
2b9767 |
pushd docs
|
|
|
2b9767 |
make html
|
|
|
2b9767 |
popd
|
|
|
2b9767 |
|
|
|
2b9767 |
|
|
|
2b9767 |
%install
|
|
|
2b9767 |
%make_install
|
|
|
2b9767 |
|
|
|
2b9767 |
# Remove static libraries
|
|
|
2b9767 |
rm %{buildroot}%{_libdir}/lib%{name}.la
|
|
|
2b9767 |
rm %{buildroot}%{_libdir}/lib%{name}.a
|
|
|
2b9767 |
|
|
|
2b9767 |
# Remove the rebuild-needed tag so it is not installed in doc pkg
|
|
|
2b9767 |
rm -f %{buildroot}%{_datadir}/doc/%{name}/html/.buildinfo
|
|
|
2b9767 |
|
|
|
2b9767 |
|
|
|
2b9767 |
%files
|
|
|
2b9767 |
%license COPYING
|
|
|
2b9767 |
%doc AUTHORS CONTRIBUTORS README.md
|
|
|
2b9767 |
%{_bindir}/%{name}
|
|
|
2b9767 |
%{_bindir}/%{name}c
|
|
|
2b9767 |
%{_libdir}/lib%{name}.so.*
|
|
|
2b9767 |
%{_mandir}/man1/%{name}.1*
|
|
|
2b9767 |
%{_mandir}/man1/%{name}c.1*
|
|
|
2b9767 |
|
|
|
2b9767 |
|
|
|
2b9767 |
%files devel
|
|
|
2b9767 |
%{_includedir}/%{name}.h
|
|
|
2b9767 |
%{_includedir}/%{name}/
|
|
|
2b9767 |
%{_libdir}/*.so
|
|
|
2b9767 |
%{_libdir}/pkgconfig/%{name}.pc
|
|
|
2b9767 |
|
|
|
2b9767 |
|
|
|
2b9767 |
%files doc
|
|
|
2b9767 |
%license COPYING
|
|
|
2b9767 |
%doc docs/_build/html
|
|
|
2b9767 |
|
|
|
2b9767 |
|
|
|
2b9767 |
%changelog
|
|
|
2b9767 |
* Tue Aug 16 2022 Mark Huth <mhuth@redhat.com> - 4.2.3-1
|
|
|
2b9767 |
- Bump to 4.2.3
|
|
|
2b9767 |
- Remove androguard module - github repo no longer exists
|
|
|
2b9767 |
|
|
|
2b9767 |
* Thu Jun 16 2022 Mark Huth <mhuth@redhat.com> - 4.2.1-4
|
|
|
2b9767 |
- Use licence identifier BSD-3-Clause
|
|
|
2b9767 |
|
|
|
2b9767 |
* Thu Jun 9 2022 Mark Huth <mhuth@redhat.com> - 4.2.1-2
|
|
|
2b9767 |
- Change spec file license to match COPYING file
|
|
|
2b9767 |
|
|
|
2b9767 |
* Mon May 9 2022 Mark Huth <mhuth@redhat.com> - 4.2.1-1
|
|
|
2b9767 |
- bump to 4.2.1
|
|
|
2b9767 |
|
|
|
2b9767 |
* Fri Mar 25 2022 Mark Huth <mhuth@redhat.com> - 4.2.0-1
|
|
|
2b9767 |
- bump to 4.2.0
|
|
|
2b9767 |
|
|
|
2b9767 |
* Wed Nov 10 2021 Michal Ambroz <rebus at, seznam.cz> - 4.1.3-1
|
|
|
2b9767 |
- bump to 4.1.3
|
|
|
2b9767 |
|
|
|
2b9767 |
* Sat Nov 06 2021 Adrian Reber <adrian@lisas.de> - 4.1.1-5
|
|
|
2b9767 |
- Rebuilt for protobuf 3.19.0
|
|
|
2b9767 |
|
|
|
2b9767 |
* Mon Oct 25 2021 Adrian Reber <adrian@lisas.de> - 4.1.1-4
|
|
|
2b9767 |
- Rebuilt for protobuf 3.18.1
|
|
|
2b9767 |
|
|
|
2b9767 |
* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 4.1.1-3
|
|
|
2b9767 |
- Rebuilt with OpenSSL 3.0.0
|
|
|
2b9767 |
|
|
|
2b9767 |
* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.1-2
|
|
|
2b9767 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
|
|
2b9767 |
|
|
|
2b9767 |
* Mon May 24 2021 Michal Ambroz <rebus at, seznam.cz> - 4.1.1-1
|
|
|
2b9767 |
- bump to 4.1.1
|
|
|
2b9767 |
|
|
|
2b9767 |
* Mon Apr 26 2021 Michal Ambroz <rebus at, seznam.cz> - 4.1.0-1
|
|
|
2b9767 |
- bump to 4.1.0
|
|
|
2b9767 |
|
|
|
2b9767 |
* Sun Apr 25 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.5-2
|
|
|
2b9767 |
- rebuild for epel
|
|
|
2b9767 |
|
|
|
2b9767 |
* Fri Feb 5 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.5-1
|
|
|
2b9767 |
- bump to yara bugfix 4.0.5 release
|
|
|
2b9767 |
|
|
|
2b9767 |
* Wed Feb 3 2021 Michal Ambroz <rebus at, seznam.cz> - 4.0.4-1
|
|
|
2b9767 |
- bump to yara bugfix 4.0.4 release
|
|
|
2b9767 |
|
|
|
2b9767 |
* Thu Jul 16 2020 Michal Ambroz <rebus at, seznam.cz> - 4.0.2-1
|
|
|
2b9767 |
- bump to yara bugfix 4.0.2 release
|
|
|
2b9767 |
- fix build on epel7
|
|
|
2b9767 |
|
|
|
2b9767 |
* Sun Jun 14 2020 Adrian Reber <adrian@lisas.de> - 4.0.1-2
|
|
|
2b9767 |
- Rebuilt for protobuf 3.12
|
|
|
2b9767 |
|
|
|
2b9767 |
* Tue Jun 2 2020 Michal Ambroz <rebus at, seznam.cz> - 4.0.1-1
|
|
|
2b9767 |
- bump to yara bugfix 4.0.1 release
|
|
|
2b9767 |
|
|
|
2b9767 |
* Tue Apr 28 2020 Michal Ambroz <rebus at, seznam.cz> - 4.0.0-1
|
|
|
2b9767 |
- bump to yara 4.0.0 release
|
|
|
2b9767 |
|
|
|
2b9767 |
* Fri Jan 31 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.11.0-2
|
|
|
2b9767 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
|
2b9767 |
|
|
|
2b9767 |
* Fri Oct 11 2019 Michal Ambroz <rebus at, seznam.cz> - 3.11.0-1
|
|
|
2b9767 |
- bump to 3.11.0 release (#1760678)
|
|
|
2b9767 |
- BUGFIX: Some regexp character classes not matching correctly when used with “nocase” modifier (upstream #1117)
|
|
|
2b9767 |
- BUGFIX: Reduce the number of ERROR_TOO_MANY_RE_FIBERS errors for certain hex pattern containing large jumps (upstream #1107)
|
|
|
2b9767 |
- BUGFIX: Buffer overrun in “dotnet” module (upstream #1108)
|
|
|
2b9767 |
- BUGFIX: Memory leak while attaching to a process fails (upstream #1070)
|
|
|
2b9767 |
|
|
|
2b9767 |
* Sat Sep 28 2019 Michal Ambroz <rebus at, seznam.cz> - 3.10.0-3
|
|
|
2b9767 |
- change the sphinx build dependency
|
|
|
2b9767 |
|
|
|
2b9767 |
* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.10.0-2
|
|
|
2b9767 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
|
|
2b9767 |
|
|
|
2b9767 |
* Fri May 03 2019 Michal Ambroz <rebus at, seznam.cz> - 3.10.0-1
|
|
|
2b9767 |
- bump to 3.10.0 release (#1680204)
|
|
|
2b9767 |
- Harden virtual machine against malicious code.
|
|
|
2b9767 |
- BUGFIX: Regression bug in hex strings containing wildcards (upstream #1025).
|
|
|
2b9767 |
- BUGFIX: Buffer overrun in “elf” module.
|
|
|
2b9767 |
- BUGFIX: Buffer overrun in “dotnet” module.
|
|
|
2b9767 |
|
|
|
2b9767 |
* Sat Mar 16 2019 Michal Ambroz <rebus at, seznam.cz> - 3.9.0-1
|
|
|
2b9767 |
- bump to 3.9.0 release (#1680203)
|
|
|
2b9767 |
- switch from python-sphinx to python3-sphinx for generating the documentation for fc31+
|
|
|
2b9767 |
- should fix also #1660398 (CVE-2018-19974 CVE-2018-19975 CVE-2018-19976),
|
|
|
2b9767 |
but by design it might be always dangerous to run yara signatures compiled by 3rd party,
|
|
|
2b9767 |
so it is advised to re-compile yara rules instead
|
|
|
2b9767 |
- BUGFIX: Denial of service when using "dex" module. Found by the Cisco Talos team. (upstream #1023, CVE-2019-5020)
|
|
|
2b9767 |
- BUGFIX: Buffer overflow in "dotnet" module.
|
|
|
2b9767 |
- BUGFIX: Regexp regression when using nested quantifiers {x,y} for certain values of x and y. (#1018)
|
|
|
2b9767 |
|
|
|
2b9767 |
* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.8.1-2
|
|
|
2b9767 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
|
|
2b9767 |
|
|
|
2b9767 |
* Mon Aug 27 2018 Michal Ambroz <rebus at, seznam.cz> - 3.8.1-1
|
|
|
2b9767 |
- bump to 3.8.1 release (#1613093)
|
|
|
2b9767 |
|
|
|
2b9767 |
* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.7.1-3
|
|
|
2b9767 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
2b9767 |
|
|
|
2b9767 |
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.7.1-2
|
|
|
2b9767 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
2b9767 |
|
|
|
2b9767 |
* Mon Feb 05 2018 Michal Ambroz <rebus at, seznam.cz> - 3.7.1-1
|
|
|
2b9767 |
- bump to 3.7.1 release (#1534993)
|
|
|
2b9767 |
|
|
|
2b9767 |
* Wed Nov 15 2017 Michal Ambroz <rebus at, seznam.cz> - 3.7.0-1
|
|
|
2b9767 |
- bump to 3.7.0 release (#1511921)
|
|
|
2b9767 |
|
|
|
2b9767 |
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.3-3
|
|
|
2b9767 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
2b9767 |
|
|
|
2b9767 |
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.6.3-2
|
|
|
2b9767 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
2b9767 |
|
|
|
2b9767 |
* Sun Jul 16 2017 Michal Ambroz <rebus at, seznam.cz> - 3.6.3-1
|
|
|
2b9767 |
- bump to 3.6.3 release - bugfix CVE-2017-11328
|
|
|
2b9767 |
|
|
|
2b9767 |
* Mon Jul 03 2017 Michal Ambroz <rebus at, seznam.cz> - 3.6.2-1
|
|
|
2b9767 |
- bump to 3.6.2 release - bugfix CVE-2017-9304, CVE-2017-9465
|
|
|
2b9767 |
|
|
|
2b9767 |
* Wed May 24 2017 Michal Ambroz <rebus at, seznam.cz> - 3.6.0-1
|
|
|
2b9767 |
- bump to 3.6.0 release
|
|
|
2b9767 |
- update the androguard-yara with bugfixes
|
|
|
2b9767 |
|
|
|
2b9767 |
* Thu Apr 13 2017 Michal Ambroz <rebus at, seznam.cz> - 3.5.0-7
|
|
|
2b9767 |
- Adding patch from pull request 627 until 3.5.1 is released
|
|
|
2b9767 |
- https://patch-diff.githubusercontent.com/raw/VirusTotal/yara/pull/627.patch
|
|
|
2b9767 |
- Fixes CVE-2016-10210 CVE-2016-10211 CVE-2017-5923 CVE-2017-5924
|
|
|
2b9767 |
|
|
|
2b9767 |
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.5.0-6
|
|
|
2b9767 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
2b9767 |
|
|
|
2b9767 |
* Tue Aug 09 2016 Michal Ambroz <rebus at, seznam.cz> - 3.5.0-5
|
|
|
2b9767 |
- import package to Fedora
|
|
|
2b9767 |
- remove unnecessary .buildinfo tag from doc package
|
|
|
2b9767 |
|
|
|
2b9767 |
* Fri Aug 05 2016 Michal Ambroz <rebus at, seznam.cz> - 3.5.0-4
|
|
|
2b9767 |
- package review - bugzilla #1362265
|
|
|
2b9767 |
- cosmetics of the changelog
|
|
|
2b9767 |
- using default spinx theme to remove the static fonts
|
|
|
2b9767 |
|
|
|
2b9767 |
* Fri Aug 05 2016 Michal Ambroz <rebus at, seznam.cz> - 3.5.0-3
|
|
|
2b9767 |
- package review - bugzilla #1362265
|
|
|
2b9767 |
- dropped Buildroot, pkgconfig, zlib-devel, defattr
|
|
|
2b9767 |
- added buildrequires gcc
|
|
|
2b9767 |
- change license back to ASL 2.0 only
|
|
|
2b9767 |
|
|
|
2b9767 |
* Thu Aug 04 2016 Michal Ambroz <rebus at, seznam.cz> - 3.5.0-2
|
|
|
2b9767 |
- package review - bugzilla #1362265
|
|
|
2b9767 |
- changed packaging of doc sub-package
|
|
|
2b9767 |
|
|
|
2b9767 |
* Thu Aug 04 2016 Michal Ambroz <rebus at, seznam.cz> - 3.5.0-1
|
|
|
2b9767 |
- bump to new 3.5.0
|
|
|
2b9767 |
|
|
|
2b9767 |
* Wed Aug 03 2016 Michal Ambroz <rebus at, seznam.cz> - 3.4.0-6
|
|
|
2b9767 |
- package review - bugzilla #1362265
|
|
|
2b9767 |
- dropped dependency of python-tools
|
|
|
2b9767 |
|
|
|
2b9767 |
* Mon Aug 01 2016 Michal Ambroz <rebus at, seznam.cz> - 3.4.0-4
|
|
|
2b9767 |
- compile with the androguard module
|
|
|
2b9767 |
|
|
|
2b9767 |
* Wed Jun 08 2016 Michal Ambroz <rebus at, seznam.cz> - 3.4.0-2
|
|
|
2b9767 |
- jansson dependency >= 2.5
|
|
|
2b9767 |
|
|
|
2b9767 |
* Wed Jun 08 2016 Michal Ambroz <rebus at, seznam.cz> - 3.4.0-1
|
|
|
2b9767 |
- python3 stuff
|
|
|
2b9767 |
|
|
|
2b9767 |
* Mon Jun 22 2015 Michal Ambroz <rebus at, seznam.cz> - 3.4.0-0.git20150618
|
|
|
2b9767 |
- initial build for Fedora Project
|