From 3a34bbb3d0b45a1e75e59f84761c0fc1a425a0ac Mon Sep 17 00:00:00 2001 From: ahpnils Date: Fri, 28 Aug 2015 14:06:14 +0200 Subject: Add whitelist for Dotclear 2.8.0 --- whitelist.yara | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/whitelist.yara b/whitelist.yara index cadb7ab..858860d 100644 --- a/whitelist.yara +++ b/whitelist.yara @@ -84,6 +84,10 @@ private rule Concrete5 private rule Dotclear : Blog { condition: + /* dotclear 2.8.0 */ + hash.sha1(0, filesize) == "c732d2d54a80250fb8b51d4dddb74d05a59cee2e" or // inc/public/class.dc.template.php + hash.sha1(0, filesize) == "cc494f7f4044b5a3361281e27f2f7bb8952b8964" or // inc/core/class.dc.modules.php + /* dotclear 2.7.5 */ hash.sha1(0, filesize) == "192126b08c40c5ca086b5e4d7433e982f708baf3" or // inc/public/class.dc.template.php hash.sha1(0, filesize) == "51e6810ccd3773e2bd453e97ccf16059551bae08" or // inc/libs/clearbricks/common/lib.date.php -- cgit v1.3