Hello community, here is the log from the commit of package yara for openSUSE:Factory checked in at 2015-07-24 09:59:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/yara (Old) and /work/SRC/openSUSE:Factory/.yara.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "yara" Changes: -------- --- /work/SRC/openSUSE:Factory/yara/yara.changes 2014-09-26 11:21:54.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.yara.new/yara.changes 2015-07-24 09:59:11.000000000 +0200 @@ -1,0 +2,45 @@ +Thu Jul 23 16:05:05 UTC 2015 - Greg.Freemyer@gmail.com + +- add yara.pc to the libyara subpackage +- remove sed command previously needed to properly link Yara and libyara. No longer needed with latest upstream source. +- update to v3.4.0 + * Short-circuit evaluation for conditions + * New yr_rules_save_stream/yr_rules_load_stream APIs. + * load() and save() methods in yara-python accept file-like objects + * Improvements to the PE and ELF modules + * Some performance improvements + * New command-line option --print-module-data + * Multiple bug fixes. +- v3.3.0 + * Added support for negative integers and floating point numbers + * Implemented operators >,<, >=, <= for strings + * Implemented word boundary anchors (\b, \B) in regular expressions + * New features in PE module + * Math module + * New --print-namespace command line argument + * Better error handling in low memory conditions + * BUGFIX: "at" operator not working with certain strings containing wildcards + * BUGFIX: precedence of bitwise operators was incorrect + * BUGFIX: incorrect imphash result for certain PE files importing functions by ordinal + * BUGFIX: handle and memory leaks + * BUGFIX: multiple segfaults +- v3.2.0 + * ELF module + * Hash module + * New features in PE module + * Big-endian version of intXX and uintXX functions + * Modules can declare dictionary objects + * Modules accept overloaded functions + * Performance improvements + * BUGFIX: "and" operator not working properly with integer operands + * BUGFIX: False positive with strings declared as "fullword wide ascii" + * BUGFIX: False positive with "wide fullword" strings shorter than 5 bytes + * BUGFIX: Functions declared in a structure array not working properly + * BUGFIX: "contains" operator causing segfault if operand is an undefined string + +------------------------------------------------------------------- +Fri Sep 26 16:32:42 UTC 2014 - Greg.Freemyer@gmail.com + +- split off a -doc sub-project + +------------------------------------------------------------------- Old: ---- v3.1.0.tar.gz New: ---- v3.4.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ yara.spec ++++++ --- /var/tmp/diff_new_pack.m9OqTl/_old 2015-07-24 09:59:12.000000000 +0200 +++ /var/tmp/diff_new_pack.m9OqTl/_new 2015-07-24 09:59:12.000000000 +0200 @@ -1,7 +1,7 @@ # # spec file for package yara # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,19 +18,19 @@ %define soname 3 Name: yara -Version: 3.1.0 +Version: 3.4.0 Release: 0 Summary: A malware identification and classification tool License: Apache-2.0 Group: System/Filesystems Url: http://plusvic.github.io/yara/ -Source: https://github.com/plusvic/yara/archive/v3.1.0.tar.gz +Source: https://github.com/plusvic/yara/archive/v3.4.0.tar.gz +BuildRequires: file-devel BuildRequires: flex +BuildRequires: libjansson-devel BuildRequires: libtool -BuildRequires: file-devel BuildRequires: pcre-devel BuildRequires: python-devel -BuildRequires: libjansson-devel BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -59,6 +59,16 @@ %description -n libyara-devel YARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns contained on samples of those families. Each description consists of a set of strings and a Boolean expression which determines its logic. Let's see an example: +%package doc +Summary: Documentation files to support the YARA malware identification tool +Group: Development/Libraries/C and C++ +Requires: libyara%{soname} = %{version}-%{release} + +%description doc +Documentation and guideslines to support YARA. + +YARA is a tool aimed at helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns contained on samples of those families. Each description consists of a set of strings and a Boolean expression which determines its logic. Let's see an example: + %prep %setup -q @@ -72,7 +82,7 @@ %endif make %{?_smp_mflags} cd yara-python -sed -i "/libraries=\['yara'\],/a library_dirs=['%_builddir/%name-%version/libyara/.libs']," setup.py +# sed -i "/libraries=\['yara'\],/a library_dirs=['%_builddir/%name-%version/libyara/.libs']," setup.py python setup.py build %install @@ -97,19 +107,24 @@ %defattr(-,root,root) %doc COPYING README.md CONTRIBUTORS AUTHORS %{_libdir}/libyara.so.3 -%{_libdir}/libyara.so.3.1.0 +%{_libdir}/libyara.so.3.4.0 +%{_libdir}/pkgconfig/yara.pc %files -n python-%name %defattr(-,root,root) -%doc COPYING README.md CONTRIBUTORS AUTHORS docs -%{python_sitearch}/yara_python-3.1-py2.7.egg-info +%doc COPYING README.md CONTRIBUTORS AUTHORS +%{python_sitearch}/yara_python-3.4.0-py2.7.egg-info %{python_sitearch}/yara.so %files -n libyara-devel %defattr(-,root,root) -%doc COPYING README.md CONTRIBUTORS AUTHORS docs +%doc COPYING README.md CONTRIBUTORS AUTHORS %{_includedir}/yara.h %{_includedir}/yara %{_libdir}/libyara.so +%files doc +%defattr(-,root,root) +%doc docs + %changelog ++++++ v3.1.0.tar.gz -> v3.4.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/yara/v3.1.0.tar.gz /work/SRC/openSUSE:Factory/.yara.new/v3.4.0.tar.gz differ: char 13, line 1