Juho Kuisma

Async yara rule downloads

2

Hey, please consider the following two patches. Cheers, Juho

Avoid explicit calls to select.select()

2

Use higher level `selectors` module instead: https://docs.python.org/3/library/selectors.html. Selectors uses the most efficient implementation available on the current platform. On Linux, it defaults to using: ``` $ python3 -c "import selectors;...

Vulnerable dependencies

9

Hey, we're enabling Xray scans for all our RPMs and it doesn't seem to like some jhove dependencies:  https://nvd.nist.gov/vuln/detail/CVE-2023-2976 https://nvd.nist.gov/vuln/detail/CVE-2024-25710 https://nvd.nist.gov/vuln/detail/CVE-2024-26308 https://nvd.nist.gov/vuln/detail/CVE-2020-8908 I'm not super familiar with java packaging,...

Bright DPX images make MP3 identification regex extremely slow

3

## Summary Identification gets stuck for over a minute on bright production DPX images at: ```txt trying b'(?s)\\xff[\\xfa\\xfb\\xf2\\xf3][\\x10-\\xeb].{46,1439}\\xff[\\xfa\\xfb\\xf2\\xf3][\\x10-\\xeb].{46,1439}\\Z' ``` at: https://raw.githubusercontent.com/openpreserve/fido/refs/heads/main/fido/conf/formats-v116.xml ```xml $ curl -s https://raw.githubusercontent.com/openpreserve/fido/refs/heads/main/fido/conf/formats-v116.xml | grep -A 16...