YARA-X 1.22.1 Ships Two Bug Fixes in Maintenance Update

YARA-X has released version 1.22.1, described as a bugfix update that brings two fixes. The update is positioned as a maintenance release to address issues in the prior build, with the release notes linked to the GitHub page for YARA-X. Didier Stevens, writing for the SANS ISC diary, notes that this release follows YARA-X’s replacement of YARA in the ecosystem. The post emphasises that the 1.22.1 release is a corrective iteration rather than introducing new features.

The diary also references a separate release of YARA 4.6.0, noting that this YARA release does not include the YARA-X improvement that added built-in functions to read 64-bit integers (int64, int64be, uint64, and uint64be). In effect, YARA-X has become the preferred path moving forward, with the implication that users seeking the 64-bit integer reading capability should be aware of the distinction between the two toolchains.

The entry, dated 31 October 2026, attributes these observations to Didier Stevens, SANS ISC’s senior handler, and links to the official release pages for both YARA-X 1.22.1 and YARA 4.6.0 for corroboration. No exploitation or active threats are claimed in the diary entry.