Rizin: download ældre versioner

Security fixes
• Fix CVE-2026-22780
• Fix heap-based OOB write in mach0_chained_fixups.c
• Remove unused LE fixups parsing
Miscellaneous
• Various small fixes for Haiku OS port

Security fixes
- Fix CVE-2026-22780
- Fix heap-based OOB write in mach0_chained_fixups.c
- Remove unused LE fixups parsing
Miscellaneous
- Various small fixes for Haiku OS port

- Fix tree-sitter's C grammar dependency building
- rz-find: do not print filenames without a match
- Forbid aav analysis step when the architecture is MIPS (fixes misalignment issues)
- Fix izx and iz commands help
- Fix pxf command to print function hexdump
- MIPS: set correct instruction alignment according to the CPU
- Split very large basic blocks
- Fix possible NULL derefence in the RzCrypto

In this release we completed migration of the code to the rzshell - YAML-based commands description language and corresponding APIs.
Another notable refactoring change - a beginning of merging RzAsm and RzAnalysis plugins into RzArch ones, currently incomplete and with compatibility layer. Move RzParse plugins into the RzArch as well. Huge refactoring happened in search commands, to better handle Unicode and regular expressions.
On the RzIL front, new architectures now support uplifting:
- MIPS
- PIC
- MSP430
- Xtensa
- Hexagon
- Tricore uplifting was improved to include all missing floating point instructions.
New architectures were added:
- DEC Alpha
- nanoMIPS (a part of MIPS ISA family)
- LoongArch.
As usual, these architectures were added into the Capstone as well.
ESIL is marked as deprecated and will be removed in the next release.
Analysis behavior slightly changed - now Rizin checks for jumps to function preludes by default.
Added support for parsing PE relocations. Added support for Python 3.11-3.13 bytecode versions.
New and refactored search commands (strings, bytes, cryptographic material) dispatch their work now into threads. Making them faster on large files. This drops support for search modifiers /f, /b etc.
And, as usual, droves of various fixes across the framework.
Show scrolling progress in percent in various interfaces, e.g. in Vv (lower right corner):
Screenshot 2025-04-22 at 8 51 07 PM
New command line options
- rz-find -E to execute a command on every match
- rz-ax - add MS-DOS and Win32 timestamp conversion
- Add linker version to rz-bin -I output
New commands
- dcco - continue until call
- aezsue - step until PC equals given address and output RzIL VM changes
- fdt command to print more information about the flag
- dbtt to print in a table mode
- aLc command to list features and CPUs of an RzArch plugin (and rz-asm -m to do the same)
- /cm to search for cryptographic materials
- /ce and /cef commands for entropy search
- /z command for searching strings (supports now Unicode 16, regex, and many encodings).
- izx data to list strings that are referenced from somewhere else
Removals
- Deprecated APIs
- RAP protocol
- NIOS-II architecture support
- fb command
- dta command
- /w - now handled by /z
- /!
- /b
- /f
- /+
- /cd
- /ca
- /cr
- obr
- rizin -Q flag
Renames:
- avg renamed into avgl, added table mode
- / command became /z
- /e command became either /z or /xr
Configuration variables changes
Removed options
- str.search.max_uni_blocks
Renamed options
- str.search.encoding -> str.encoding - Valid for all string interpretations.
- str.search.max_threads -> search.max_threads - This is a general setting for the search now.
- str.search.raw_alignment -> search.str.raw_alignment
- str.search.min_length -> search.str.min_length
- str.search.buffer_size -> search.str.max_length
- str.search.max_region_size -> search.str.max_region_size
- str.search.check_ascii_freq -> search.str.check_ascii_freq
Dependency
This release adds a dependency on SoftFloat3 library for RzFloat and RzIL floating point operations.
Sponsors
@stephen-fox

Security fixes
- Fix CVE-2022-1207
- Fix out of bound read in GNU CRIS analysis plugin
- Fix out of bound read in ObjC analysis
- Harden string limits check in coresymbolication
- Always check for NULL after allocating memory during the parsing of dyldcache
Miscellaneous
- Remove a call to m command that doesn't exist
- Fix NetBSD 10 build
- Improve OpenBSD debugger process state handling
- Forbid declaration of __ucrt_int_to_float from Win SDK 10.0.25182.0
- Various CI-specific fixes

- Roll back prepackaged XZ version to 5.2.9

Update to Capstone 5.0.1
Update to zlib 1.3
Fix syscall definitions preprocessing
Fix forgotten remnants of the old ? command (was changed and reworked to % command in previous releases)
Refactor pointer command (*) to use the API
Fix multiple Use-After-Frees in disassembly and PYC parsing code
Fix division by zero in s++ and s-- commands
Fix infinite loop condition in parsing some ELF files
Fix various memory leaks
Fix env command help message
Update rizin and rz-diff man pages