# FLIRT Signature Bundle ## FLIRT Signature Bundle With FLIRT Signature Bundle, designed to be used with [IDA Feeds](/extensions/plugins/concepts/plugins-shipped-with-ida/ida-feeds.md) (aka FLIRT Signature Manager), you can analyze thousands of signatures and bulk apply them to your binary. The bundle contains signatures for modern languages like Golang and Rust, as well as updates for classic compilers. The latest version of the FLIRT Signature Bundle can be downloaded from [My Hex-Rays portal](https://my.hex-rays.com/dashboard/download-center/downloads) under **SDK and utilities**. FLIRT Signature Bundles will be regularly updated and released independently whenever there is a new compiler, language, or library release. The signature updates happen automatically whenever the upstream program changes. This means **your signatures stay up-to-date without manual intervention**, ensuring you’re always working with the latest, most accurate information. ## Released versions ### FLIRT Signature Bundle 9.3 The packages are updated with the latest language and library versions across all supported platforms. This release brings a massive expansion of Rust coverage, a significant expansion of Linux C/C++ coverage, new Golang versions, and updated Windows CRT packages. #### **What's new since 9.0** **Golang** Extended version range: * Versions `1.24.8` through `1.26.0` (including `1.26.0-rc1/rc2/rc3`) across all supported OS/architecture combinations. **Rust** Massively expanded version range: * Versions `1.8.0` through `1.93.1` across all supported OS/architecture combinations and compilers (GCC, LLVM, MSVC). **C/C++ — Windows (MSVC)** Updated CRT packages: `VS16` and `VS17` toolsets updated to `14.44.35222`, covering Desktop, Desktop-Spectre, and Store variants for `ARM64`, `arm`, `x64`, and `x86`. Windows SDK updated to `10.0.26100.15`. **C/C++ — Linux (Ubuntu & Debian)** Updated and expanded library versions: The table below shows the library groups updated in this release. Each entry reflects new package versions added; the architectures covered remain `i386`, `amd64`, `arm64`, `armhf`, `armel`, `s390x`, `ppc64el` (and `mips`/`mipsel` where applicable). | Library | Notable new versions | | ----------------------------------- | ---------------------------------------------------------------------------- | | `libssl` | 3.0.19, 3.4.1, 3.5.5 (Ubuntu); 3.0.19, 3.5.5 (Debian) | | `libcurl4` (gnutls / openssl / nss) | 7.81.0, 8.5.0, 8.14.1, 8.18.0, 8.19.0\~rc (multiple backends) | | `libssh` / `libssh-gcrypt` | 0.9.6, 0.10.6, 0.11.1–0.11.3 | | `libgnutls28` | 3.7.3–3.8.12 across Ubuntu and Debian | | `libprotobuf` | 3.12.4, 3.21.12, 3.25.7 | | `libnghttp2` | 1.64.0, 1.68.0 | | `uuid` | 2.39–2.42 series | | `libzstd` | 1.5.7 | | `libtasn1-6` | 4.18–4.21 | | `libgmp` | 6.3.0 (Ubuntu build variants) | | `libldap` | 2.5.20, 2.6.10 | | `libpcre2` *(Ubuntu only)* | 10.45, 10.46 | | `libc6` *(Ubuntu only)* | 2.35–2.42 | | `zlib1g` *(Ubuntu only)* | 1.3.1 | | `musl` *(Ubuntu only)* | 1.2.5 | | `libidn2` *(Ubuntu only)* | 2.3.8 | | SDL1/SDL2 bundles | `libsdl2-image` 2.8.8, `libsdl2-ttf` 2.24.0, `libsdl2-mixer` 2.8.1, and more | ### FLIRT Signature Bundle 9.1 The packages are updated with the latest language versions. ### FLIRT Signature Bundle 9.0sp1 Since 9.0SP1, alongside standard bundles, we have released FLIRT Signature Bundles with metadata. The packages are updated with the latest language versions. ### 2024/09/12 FLIRT Signature Bundle 9.0 #### Packages **Golang** * Versions: stable versions from 1.10.0 to 1.23 * Operating Systems: Linux, Windows, MacOS * Architectures: arm64 (Windows, Linux, MacOS), arm (Windows, Linux, MacOS), x86 (Windows, Linux) , x86-64 (Windows, Linux) **C/C++** * Windows (MSVC): * Architectures: arm, arm64, i386, amd64 * Packages: ATL, CTL, MFC, Windows SDK 10, Windows SDK 11 * Linux: * Distribution: Ubuntu & Debian * Architectures: i386, amd64, arm64, armhf, armel, arm, s390x, mips64el, mipsel, mips, ppc64el * Packages: libc6, libselinux1, libpcre2, libidn2, libssl, zlib1g, lib32z1, libunistring, libcurl4-gnutls, libcurl4-nss, libcurl4-openssl, libnghttp2, libidn2, librtmp, libssh, libssh-gcrypt, libpsl, libldap, libzstd, libbrotli, libgnutls28, nettle, libgmp, comerr, libsasl2, libbrotli, libtasn1-6, libkeyutils, libffi, uuid, libprotobuf, heimdal-multidev, musl, libplib, libsdl1.2-bundle (libsdl-console, libsdl-sge, libsdl1.2, libsdl-ocaml, libsdl-image1.2, libsdl-kitchensink, libsdl-mixer1.2, libsdl-net1.2, libsdl-sound1.2, libsdl-ttf2.0, libsdl1.2-compat, libsdl-gfx1.2, libsdl-pango), libsdl2-bundle (libsdl2, libsdl2-gfx, libsdl2-image, libsdl2-mixer, libsdl2-net, libsdl2-ttf) **Rust** * Versions 1.77 to 1.81 * Architectures: arm64, arm, x86, x86-64 * Operating Systems: Linux, Windows, MacOS * Compilers: GCC, LLVM, MSVC --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.hex-rays.com/extensions/plugins/concepts/plugins-shipped-with-ida/ida-feeds/flirt-signature-bundle.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.