YARA‑X 1.22.1 Bug‑Fix Release Addresses Two Issues
What Happened — The open‑source YARA‑X pattern‑matching engine released version 1.22.1 on 31 Oct 2026. The update fixes two bugs that could cause rule‑parsing errors and occasional crashes under high‑throughput scanning. The vendor posted release notes on the SANS Internet Storm Center, noting no new features, only stability improvements.
Why It Matters for Trust & Control Assurance — Keeping detection tooling current preserves the integrity of audit‑ready evidence for malware‑detection controls.
Who Is Affected – Security operations teams, SOCs, and incident‑response groups across all sectors that rely on YARA‑X for file‑and‑memory scanning.
Recommended Actions – Upgrade to YARA‑X 1.22.1 promptly, run regression tests on existing rule sets, and record the version change in your control‑evidence repository.
Technical Notes – The two fixes address a rule‑parser null‑pointer and a memory‑leak in the streaming API; no CVE identifiers were assigned. Source: https://isc.sans.edu/diary/rss/33474
