Hello community, here is the log from the commit of package sleuthkit for openSUSE:Leap:15.2 checked in at 2020-02-23 16:48:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/sleuthkit (Old) and /work/SRC/openSUSE:Leap:15.2/.sleuthkit.new.26092 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sleuthkit" Sun Feb 23 16:48:01 2020 rev:11 rq:778216 version:4.8.0 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/sleuthkit/sleuthkit.changes 2020-01-15 16:02:56.967910484 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.sleuthkit.new.26092/sleuthkit.changes 2020-02-23 16:48:07.034395168 +0100 @@ -1,0 +2,114 @@ +Tue Jan 28 12:46:52 UTC 2020 - Greg Freemyer <[email protected]> + +- Update to 4.8.0: + * added APFS support which required significant changes + * added pool logic as required for APFS + * fixes to the logical imager support + * various other fixes +- Update to 4.7.0 + * improvements to the logical imager + * feature enhancements in support of autopsy release +- added pstat tool + +------------------------------------------------------------------- +Tue Jan 28 11:31:43 UTC 2020 - Greg Freemyer <[email protected]> + +- update libewf buildrequires from 20140608 to 20140808 + * libewf 20140608 is from the stable branch + * libewf 20140808 is the latest stable branch release + +------------------------------------------------------------------- +Mon Aug 19 02:22:48 UTC 2019 - Greg Freemyer <[email protected]> + +-Update to 4.6.7: + * First release of new logical imager tool + * VHD image writer fixes for out of space scenarios +-Update to 4.6.6: + * Acquisition details are set in DB for E01 files + * Fix NTFS decompression issue (from Joe Sylve) + * Image reading fix when cache fails (Joe Sylve) + * Fix HFS+ issue with large catalog files (Joe Sylve) + * Fix free memory issue in srch_strings (Derrick Karpo) + +------------------------------------------------------------------- +Fri Jan 18 06:43:11 UTC 2019 - [email protected] + +-Update to 4.6.5: + * HFX boundary check fix + * New fields for hash value and acquisitions details + * Store "created schema version" in case database + * New Java artifacts and attributes defined + * Fixed bug in SleuthkitCase.getContentById() + * Fixed bug in LayoutFile.read() that could allow oob reading + +------------------------------------------------------------------- +Fri Jan 4 13:50:54 UTC 2019 - Jan Engelhardt <[email protected]> + +- Avoid name repetition in summaries. + +------------------------------------------------------------------- +Fri Dec 21 09:54:58 UTC 2018 - [email protected] + +-Update to 4.6.4: + *Java Code: + - Increase max statements in database to prevent errors under load + - Have a max timeout for SQLite retries + +-Update to 4.6.3: + *C/C++ Code: + - Hashdb bug fixes for corrupt indexes and 0 hashes + - New code for testing power of number in ExtX code + *Java Code: + - New class that allows generic database access + - New methods that check for duplicate artifacts + - Added caches for frequently used content + *Database Schema: + - Added Examiner table + - Tags are now associated with Examiners + - Changed parent_path for logical files to be consistent with FS files. + +-Update to 4.6.2: + *C/C++ Code: + - Various compiler warning fixes + - Added small delay into image writer to not starve other threads + *Java Code: + - Added more locking to ensure that handles were not closed while other threads were using them. + - Added APIs to support more queries by data source + - Added memory-based caching when detecting if an object has children or not. + +-Update to 4.6.1: + *C/C++ Code: + - Lots of bounds checking fixes from Google's fuzzing tests. Thanks Google. + - Cleanup and fixes from uckelman-sf and others + - PostgreSQL, libvhdi, & libvmdk are supported + - Fixed display of NTFS GUID in istat - report from Eric Zimmerman. + - NTFS istat shows details about all FILE_NAME attributes, not just the first. report from Eric Zimmerman. + *Java Code: + - Reports can be URLs + - Reports are Content + - Added APIs for graph view of communications + - JNI library is extracted to name with user name in it to avoid conflicts + *Database: + - Version upgraded from to 8.0 because Reports are now Content + +-Update to 4.6.0: + *New Features + - New Communications related Java classes and database tables. + - Java build updates for Autopsy Linux build + - Blackboard artifacts are now Content objects in Java and part of tsk_objects table in database. + - Increased cache sizes. + - Lots of bounds checking fixes from Google's fuzzing tests. Thanks Google. + - HFS fix from uckelman-sf. + +-Update to 4.5.0: + *New Features: + - Support for LZVN compressed HFS files (from Joel Uckelman) + - Use sector size from E01 (helps with 4k sector sizes) + - More specific version number of DB schema + - New Local Directory type in DB to differentiate with Virtual Directories + - All blackboard artifacts in DB are now 'content'. Attachments can now be children of their parent message. + - Added extension as a column in tsk_files table. + *Bug Fixes: + - Faster resolving of HFS hard links + - Lots of fixes from Google Fuzzing efforts. +------------------------------------------------------------------- Old: ---- sleuthkit-4.4.2.tar.gz New: ---- sleuthkit-4.8.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sleuthkit.spec ++++++ --- /var/tmp/diff_new_pack.BRV9C0/_old 2020-02-23 16:48:07.646396345 +0100 +++ /var/tmp/diff_new_pack.BRV9C0/_new 2020-02-23 16:48:07.650396353 +0100 @@ -1,7 +1,7 @@ # # spec file for package sleuthkit # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,17 +12,17 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # -%define sosuffix 13 +%define sosuffix 19 Name: sleuthkit -Version: 4.4.2 +Version: 4.8.0 Release: 0 -Summary: The Sleuth Kit (TSK): tools for file system and volume forensic analysis -License: CPL-1.0 and IPL-1.0 and GPL-2.0+ +Summary: Tools for file system and volume forensic analysis +License: CPL-1.0 AND IPL-1.0 AND GPL-2.0-or-later Group: System/Monitoring Url: http://www.sleuthkit.org/ Source0: https://github.com/%{name}/%{name}/releases/download/%{name}-%{version}/%{name}-%{version}.tar.gz @@ -33,7 +33,7 @@ #BuildRequires: libtool # libewf - Newer versions are plain BSD (older are BSD with advertising) -BuildRequires: libewf-devel = 0~20140608 +BuildRequires: libewf-devel = 0~20140808 Requires: file Requires: libtsk%sosuffix = %{version} @@ -49,7 +49,7 @@ and ISO 9660 file systems %package -n libtsk%sosuffix -Summary: Library for %{name} +Summary: Library for file system and volume forensic analysis Group: System/Libraries %description -n libtsk%sosuffix @@ -93,7 +93,7 @@ %else %make_install INSTALL="install -p" %endif -find %{buildroot} -name '*.la' -exec rm -f {} ';' +find %{buildroot} -name '*.la' -delete mkdir -p %{buildroot}/%{_datadir}/sleuthkit cp --archive bindings %{buildroot}/%{_datadir}/sleuthkit/bindings @@ -133,6 +133,7 @@ %{_bindir}/mmcat %{_bindir}/mmls %{_bindir}/mmstat +%{_bindir}/pstat %{_bindir}/sigfind %{_bindir}/sorter %{_bindir}/usnjls ++++++ sleuthkit-4.4.2.tar.gz -> sleuthkit-4.8.0.tar.gz ++++++ /work/SRC/openSUSE:Leap:15.2/sleuthkit/sleuthkit-4.4.2.tar.gz /work/SRC/openSUSE:Leap:15.2/.sleuthkit.new.26092/sleuthkit-4.8.0.tar.gz differ: char 5, line 1
