Changelog for
libtsk13-4.6.5-16.4.x86_64.rpm :
* Fri Jan 18 2019 seanlewAATTopensuse.org-Update to 4.6.5:
* HFX boundary check fix
* New fields for hash value and acquisitions details
* Store \"created schema version\" in case database
* New Java artifacts and attributes defined
* Fixed bug in SleuthkitCase.getContentById()
* Fixed bug in LayoutFile.read() that could allow oob reading
* Fri Jan 04 2019 Jan Engelhardt
- Avoid name repetition in summaries.
* Fri Dec 21 2018 atoptsoglouAATTsuse.com-Update to 4.6.4:
* Java Code: - Increase max statements in database to prevent errors under load - Have a max timeout for SQLite retries-Update to 4.6.3:
* C/C++ Code: - Hashdb bug fixes for corrupt indexes and 0 hashes - New code for testing power of number in ExtX code
* Java Code: - New class that allows generic database access - New methods that check for duplicate artifacts - Added caches for frequently used content
* Database Schema: - Added Examiner table - Tags are now associated with Examiners - Changed parent_path for logical files to be consistent with FS files.-Update to 4.6.2:
* C/C++ Code: - Various compiler warning fixes - Added small delay into image writer to not starve other threads
* Java Code: - Added more locking to ensure that handles were not closed while other threads were using them. - Added APIs to support more queries by data source - Added memory-based caching when detecting if an object has children or not.-Update to 4.6.1:
* C/C++ Code: - Lots of bounds checking fixes from Google\'s fuzzing tests. Thanks Google. - Cleanup and fixes from uckelman-sf and others - PostgreSQL, libvhdi, & libvmdk are supported - Fixed display of NTFS GUID in istat - report from Eric Zimmerman. - NTFS istat shows details about all FILE_NAME attributes, not just the first. report from Eric Zimmerman.
* Java Code: - Reports can be URLs - Reports are Content - Added APIs for graph view of communications - JNI library is extracted to name with user name in it to avoid conflicts
* Database: - Version upgraded from to 8.0 because Reports are now Content-Update to 4.6.0:
* New Features - New Communications related Java classes and database tables. - Java build updates for Autopsy Linux build - Blackboard artifacts are now Content objects in Java and part of tsk_objects table in database. - Increased cache sizes. - Lots of bounds checking fixes from Google\'s fuzzing tests. Thanks Google. - HFS fix from uckelman-sf.-Update to 4.5.0:
* New Features: - Support for LZVN compressed HFS files (from Joel Uckelman) - Use sector size from E01 (helps with 4k sector sizes) - More specific version number of DB schema - New Local Directory type in DB to differentiate with Virtual Directories - All blackboard artifacts in DB are now \'content\'. Attachments can now be children of their parent message. - Added extension as a column in tsk_files table.
* Bug Fixes: - Faster resolving of HFS hard links - Lots of fixes from Google Fuzzing efforts.
* Thu Sep 14 2017 Greg.FreemyerAATTgmail.com- update to 4.4.2
* usnjls tool for NTFS USN log (from noxdafox)
* Added index to mime type column in DB
* Use local SQLite3 if it exists (from uckelman-sf)
* Blackboard Artifacts have a shortDescription metho
* Fix for highest HFS+ inum lookup (from uckelman-sf)
* Fix ISO9660 crash
* various performance fixes and added thread safety checks- add files related to the new usnjls tool
* Sat Feb 25 2017 Greg.FreemyerAATTgmail.com- update to 4.4.0
* Compiling in Windows now uses Visual Studio 2015
* tsk_loaddb now adds new files for slack space and JNI was upgraded accordingly.
* Fri Jul 29 2016 Greg.FreemyerAATTgmail.com- update to 4.3.0
* PostgreSQL support (Windows only)
* Support for virtual machine formats via libvmdk and libvhdi (Windows only)
* Schema updates (data sources table, mime type, attributes store type)
* tsk_img_open can take externally created TSK_IMG_INFO
* New Release_ NoLibs Visual Studio target
* Various bug fixes
* Wed Feb 03 2016 Greg.FreemyerAATTgmail.com- upgrade to 4.2.0
* ExFAT support added
* New database schema
* New Sqlite hash database
* Added secondary hash database index
* Various bug fixes
* NTFS pays more attention to sequence and loads metadata only if it matches.- README.txt renamed README.md- patch sleuthkit-4.1.3-python-tsk.patch removed, now upstream
* Wed Aug 13 2014 Greg.FreemyerAATTgmail.com- upgrade to 4.1.3
* fixed bug that could crash UFS/ExtX in inode_lookup.
* More bounds checking in ISO9660 code
* Image layer bounds checking
* Update version of SQLITE-JDBC
* changed how java loads navite libraries
* Config file for YAFFS2 spare area
* New method in image layer to return names
* Yaffs2 cleanup.
* Escape all strings in SQLite database
* SQlite code uses NTTFS sequence number to match parent IDs
* FILE_NAME times in timelines
* Cellebrite disk image auto-detect
* 64-bit windows targets
* Fixed bug with Sqlite code not using NTFS Sequence
* Jar files have native libraries in them- remove sleuthkit-4.1.0-UPSTREAM-crc.patch, now in upstream release- add sleuthkit-4.1.3-python-tsk.patch, needed by python-tsk
* Tue Oct 15 2013 Greg.FreemyerAATTgmail.com- remove BuildRequires libaff - The format never got popular, and libewf is now recommended- libaff is being dropped from factory
* Sat Jun 22 2013 Greg.FreemyerAATTgmail.com- this upgrade breaks most packages that build against sleuthkit-devel- upgrade to 4.1.0
* New Features in Core: Added YAFFS2 support (patch from viaForensics). Added Ext4 support (patch from kfairbanks)
* Framework: Added Linux and MAC support. Added L01 support. Added APIs to find files by name, path and extension. Removed deprecated TskFile::getAttributes methods. moved code around for AutoBuild tool support.
* Java Bindings: added DerivedFile datamodel support added a public method to Content to add ability to close() its tsk handle before the object is gc\'d added faster skip() and random seek support to ReadContentInputStream refactored datamodel by pushing common methods up to AbstractFile fixed minor memory leaks improved regression testing framework for java bindings datamodel
* -devel proper soname handling requires fixes in packages linking to libtsk /usr/include/tsk3 renamed /usr/include/tsk libtsk3-9.so renamed libtsk-10.so due to proper soname handling other include file changes- rm fiwalk patch, now in upstream- add crc.c patch, now in upstream git repo- sortr renamed sorter by upstream- upstream improved soname handling, reflect improvements- add the java bindings to sleuthkit-devel (Packaging not well tested)- resolves BNC#815061