Hello community, here is the log from the commit of package sleuthkit for openSUSE:Factory checked in at 2013-02-14 21:13:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sleuthkit (Old) and /work/SRC/openSUSE:Factory/.sleuthkit.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "sleuthkit", Maintainer is "" Changes: -------- --- /work/SRC/openSUSE:Factory/sleuthkit/sleuthkit.changes 2012-10-08 20:36:24.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.sleuthkit.new/sleuthkit.changes 2013-02-14 21:14:01.000000000 +0100 @@ -1,0 +2,50 @@ +Wed Feb 13 14:58:21 UTC 2013 - hpj@urpla.net + +- Version 4.0.2 + +New Features in Core: + + fiwalk is now included. + +Bug Fixes in Core: + + Fixed fcat to work on NTFS files (still doesn't support ADS though). + Fixed HFS+ support in tsk_loaddb / SQLite -- root directory was not added. + NTFS code now looks at all MFT entries when listing directory contents. It used to only look at unallocated entries for orphan files. This fixes an image that had allocated files missing from the directory b-tree. + NTFS code uses sequence number when searching MFT entries for all files. + Libewf detection code change to support v2 API more reliably (ID: 3596212). + NTFS $SII code could crash in rare cases if $SDS was multiple of block size. + +Framework: + + Added new API to TskImgDB that returns the base name of an image. + Numerous performance improvements to framework. + Removed requirement in framework to specify module extension in pipeline configuration file. + Added blackboard artifacts to represent both operating system and network service user accounts. + +Java Bindings + + More methods to query files + Methods to get current directory when being added to DB. + Modified class structure a bit + More lazy loading for children / parents. + Better exception throwing from C++ + +- Version 4.0.1 + +New Features: + + More DOS partition types are displayed. + Added fcat tool that takes in file name and exports content (equivalent to using ifind and icat together). + performance improvements with FAT code (maps and dir_add) + performance improvements with NTFS code (maps) + added AONLY flag to block_walk + Updated blkls and blkcalc to use AONLY flag -- MUCH faster. + +Bug Fixes: + + Fixed mactime issue where it could choose the wrong timezone that did not follow daylight savings times. + Fixed file size of alternate data streams in framework. + Incorporated memory leak fixes and raw device fixes from ADF Solutions. + +------------------------------------------------------------------- Old: ---- sleuthkit-4.0.0.tar.gz New: ---- sleuthkit-4.0.2.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sleuthkit.spec ++++++ --- /var/tmp/diff_new_pack.oiT8co/_old 2013-02-14 21:14:03.000000000 +0100 +++ /var/tmp/diff_new_pack.oiT8co/_new 2013-02-14 21:14:03.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package sleuthkit # -# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,10 +16,10 @@ # -%define sosuffix -3 +%define sosuffix -9 Name: sleuthkit -Version: 4.0.0 +Version: 4.0.2 Release: 0 Summary: The Sleuth Kit (TSK): tools for file system and volume forensic analysis License: CPL-1.0 and IPL-1.0 and GPL-2.0+ @@ -53,7 +53,7 @@ Group: System/Libraries %description -n libtsk3%sosuffix -The libtsk3%suffix package contains library for %{name}. +The libtsk3%sosuffix package contains library for %{name}. %package devel Summary: Development files for %{name} @@ -107,7 +107,9 @@ %{_bindir}/blkstat #{_bindir}/disk_sreset #{_bindir}/disk_stat +%{_bindir}/fcat %{_bindir}/ffind +%{_bindir}/fiwalk %{_bindir}/fls %{_bindir}/fsstat %{_bindir}/hfind @@ -119,6 +121,7 @@ %{_bindir}/istat %{_bindir}/jcat %{_bindir}/jls +%{_bindir}/jpeg_extract # This file is described as GPL in the doc # But the license remains CPL in the source. %{_bindir}/mactime ++++++ sleuthkit-4.0.0.tar.gz -> sleuthkit-4.0.2.tar.gz ++++++ /work/SRC/openSUSE:Factory/sleuthkit/sleuthkit-4.0.0.tar.gz /work/SRC/openSUSE:Factory/.sleuthkit.new/sleuthkit-4.0.2.tar.gz differ: char 5, line 1 -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org