File sleuthkit.changes of Package sleuthkit

Overview Repositories Revisions Requests Users Attributes Meta

File sleuthkit.changes of Package sleuthkit (Revision 609fff6b9941c5ebf6e250a936577b41)

Currently displaying revision 609fff6b9941c5ebf6e250a936577b41 , Show latest

-------------------------------------------------------------------
Sun Mar  3 18:10:35 UTC 2013 - Greg.Freemyer@gmail.com

- Add obsoletes statement for fiwalk
- add patch to support "fiwalk -m"

-------------------------------------------------------------------
Wed Feb 13 14:58:21 UTC 2013 - hpj@urpla.net

- Version 4.0.2

New Features in Core:

fiwalk is now included.

Bug Fixes in Core:

Fixed fcat to work on NTFS files (still doesn't support ADS though).
    Fixed HFS+ support in tsk_loaddb / SQLite -- root directory was not added.
    NTFS code now looks at all MFT entries when listing directory contents. It used to only look at unallocated entries for orphan files. This fixes an image that had allocated files missing from the directory b-tree.
    NTFS code uses sequence number when searching MFT entries for all files.
    Libewf detection code change to support v2 API more reliably (ID: 3596212).
    NTFS $SII code could crash in rare cases if $SDS was multiple of block size.

Framework:

Added new API to TskImgDB that returns the base name of an image.
    Numerous performance improvements to framework.
    Removed requirement in framework to specify module extension in pipeline configuration file.
    Added blackboard artifacts to represent both operating system and network service user accounts.

Java Bindings

More methods to query files
    Methods to get current directory when being added to DB.
    Modified class structure a bit
    More lazy loading for children / parents.
    Better exception throwing from C++

- Version 4.0.1

New Features:

More DOS partition types are displayed.
    Added fcat tool that takes in file name and exports content (equivalent to using ifind and icat together).
    performance improvements with FAT code (maps and dir_add)
    performance improvements with NTFS code (maps)
    added AONLY flag to block_walk
    Updated blkls and blkcalc to use AONLY flag -- MUCH faster.

Bug Fixes:

Fixed mactime issue where it could choose the wrong timezone that did not follow daylight savings times.
    Fixed file size of alternate data streams in framework.
    Incorporated memory leak fixes and raw device fixes from ADF Solutions.

-------------------------------------------------------------------
Tue Oct  2 17:04:51 UTC 2012 - Greg.Freemyer@gmail.com

- Version 4.0.0
	- general release of the 4.0.0b1 beta release
	- only tested by upstream in windows

-------------------------------------------------------------------
Thu Sep  6 21:30:48 UTC 2012 - Greg.Freemyer@gmail.com

- Version 4.0.0b1
	- Builds with libewf-20120813 (libewf v2)
	- drop sleuthkit-gcc47.patch: upstreamed

4.0.0b1 has a lot of new features, including:
	. Framework with first set of basic modules (hash calculation, hash lookup, entropy calculation, RegRipper, ZIP file extraction, extraction via name signatures, etc.) -- Windows-only
	. Multithreaded support
	. C++ wrapper classes
	. JNI bindings and data model classes
	. All non-set times are displayed as 0 instead of 1970.
	. Only first file in split or E01 needs to be specified.
	. EnCase Hashset support in hash tools.
	. New table schema for loaddb database that supports more data types (carved, local files, etc.).

-------------------------------------------------------------------
Wed Apr 11 12:08:24 UTC 2012 - dimstar@opensuse.org

- Add sleuthkit-gcc47.patch: Fix buffer overflow.

-------------------------------------------------------------------
Fri Oct 21 12:56:42 UTC 2011 - Greg.Freemyer@gmail.com

- Add EnCase image support for reading
	- Source code support was already present, this just involved linking libewf into the build

-------------------------------------------------------------------
Fri Oct  7 22:53:03 UTC 2011 - Greg.Freemyer@gmail.com

- VERSION 3.2.3 
	New Features:
	- new TskAuto method (handleNotification()) that gets verbose messages that allow for debugging when the class makes decisions.
	- DOS partitions are loaded even if an extended partition fails to load
	- new TskAuto::findFilesInFs(TSK_FS_INFO *) method
	- Need to only specify first E01 file and the rest are found
	- Changed docs license to opensuse accepted one (by upstream)
	- Unicode conversion routines fix invalid UTF-16 text during conversion
	- Added '-d' to tsk_recover to specify directory to recover

Bug Fixes:
	- Added check to fatfs_open to compare first sectors of FAT if we used backup boot sector and verify it is FAT32.
	- More checks to make sure that FAT short names are valid ASCII
	- 3406523: Mactime size sanity check
	- 3393960: hfind reading of Windows input file
	- 3316603: Error reading last blocks of RAW CD images
	- Fixed bugs in how directories and files were detected in TskAuto

-------------------------------------------------------------------
Thu Aug  4 02:44:10 UTC 2011 - toganm@opensuse.org

- Update sleuthkit-3.2.2.tar.gz 
  * cleaned spec

-------------------------------------------------------------------
Mon Sep 13 17:12:04 UTC 2010 - toganm@dinamizm.com
- Reworking the spec file

-------------------------------------------------------------------
Mon Sep 13 16:36:53 UTC 2010 - toganm@opensuse.org
-  Spec file corrections

-------------------------------------------------------------------
Mon Sep 13 2010 Togan Muftuoglu <toganm@opensuse.org> -3.1.3
- Adaptation of spec file from fedora project
- Update to 3.1.3

Thu Apr 29 2010 Nicolas Chauvet <kwizart@fedoraproject.org> - 3.1.1-1
- Update to 3.1.1

Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.0.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.0.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

Tue Feb 10 2009 kwizart < kwizart at gmail.com > - 3.0.1-1
- Update to 3.0.1 (final)

Tue Oct 28 2008 kwizart < kwizart at gmail.com > - 3.0.0-1
- Update to 3.0.0 (final)

Fri Oct  3 2008 kwizart < kwizart at gmail.com > - 3.0.0-0.1.b4
- Update to 3.0.0b4

Tue Jun 17 2008 kwizart < kwizart at gmail.com > - 2.52-1
- Update to 2.52
- Remove merged patches
- Remove clean unused-direct-shlib-dependencies 
- Fix rpath at source.
- Sort license within the spec
- Move configure.ac to pkg-config detection
- Remove Perl-Date-Manip installation

Tue Mar 18 2008 kwizart < kwizart at gmail.com > - 2.51-1
- Update to 2.51
- Add libewf/afflib BR
- Requires mac-robber external package.
- Remove internal perl-Date-Manip.

Fri Dec 28 2007 kwizart < kwizart at gmail.com > - 2.10-1
- Update to 2.10

Mon Oct 29 2007 kwizart < kwizart at gmail.com > - 2.09-1
- Initial package for Fedora 
  (inspired from Oden Eriksson mdk spec).

Places

File sleuthkit.changes of Package sleuthkit (Revision 609fff6b9941c5ebf6e250a936577b41)

Places