# changelog

author: Lawrence Rogers <lrr@cert.org> - 1.2.2-1
changelog:
  * Release 1.2.2-1
  	* src/threadpool.cpp (threadpool::win32_init): created for administrative simplification.
  	* src/threadpool.h (class cppmutex): moved cppmutex to this file.
  	* src/feature_recorder.h: replaced #include "cppmutex.h" with #include "threadpool.h"
  	* src/xml.cpp (xml::close): removed dtd making
  	* src/cppmutex.h: added cppmutex.h
  	* src/feature_recorder.h (class feature_recorder): replaced pthread_mutex_t with cppmutex, a C++ cover class for mutexes.
  	* src/bulk_extractor.cpp (phase1): added #ifdef HAVE_LOCALTIME_R to cover systems that do not have localtime_r.
  	* src/aftimer.h (aftimer::eta_time): changed from 'when' to 't' for consistency.
  	* src/scan_aes.cpp (scan_aes): added check -- if sp.buf.bufsize<WINDOW_SIZE, don't scan.
  	* src/regex_list.h (class regex_list): removed globbing
  	* src/scan_zip.cpp (scan_zip): now detects decmopression bomb attack and changes mode of operation so that buffers are hashed prior to being decompressed and the same buffer will only be hashed just one.
  	* src/feature_recorder_set.cpp (scan_zip): alert_recorder is now in feature_recorder_set.
  	* src/feature_recorder.cpp (feature_recorder::banner_stamp): banner_stamp moved to feature_recorder
  	* src/bulk_extractor.h: opt_banner_file moved to feature_recorder
  	* src/bulk_extractor.cpp (main): outdir now an instance variable
  	* src/feature_recorder_set.h (class feature_recorder_set): outdir now an instance variable
  	* src/feature_recorder_set.cpp (feature_recorder_set::feature_recorder_set): outdir now an instance variable
  	* src/feature_recorder.h (class feature_recorder): outdir now an instance variables
  	* src/feature_recorder.cpp (feature_recorder::feature_recorder): outdir now an instance variable
  	* src/scan_net.cpp (class packet_carver): outdir now read from feature recorder.
  	* src/scan_wordlist.cpp (wordlist_split_and_dedup): outdir now read from feature recorder.
  	* src/MANY - outdir is no longer global.
  	* src/bulk_extractor.cpp (main): added -G to specify page size

  2012-01-29  Simson Garfinkel  <simsong@imac3.home>
  	* src/xml.h (class xml): added svn_version to DFXML output.
  	* src/scan_net.cpp: now carries its own ipv6 implementation.


author: Lawrence Rogers <lrr@cert.org> - 1.5.1-1
changelog:
  * Release 1.5.1-1
  	* configure.ac: incremented version number
  	* src/image_process.cpp: multi-split files was not working properly on Windows. Fixed
  	* src/scan_rar.cpp (scan_rar): fixed typo. raw_find_volume becomes rar_find_volume
  	* src/scan_base16.flex (public): fixed decoder so that what is decoded is a child sbuf with a specific offset and length
  	* src/be13_api/feature_recorder.cpp (hexval): fixed hexval(); it was not working properly for letters A through F. (I wrote this myself becuase it isn't present on mingw.)
  	* src/be13_api/feature_recorder.h (f): several of the flags were the same, resulting in behavior that was incorrect.
  	* src/be13_api/feature_recorder_set.cpp (feature_recorder_set::unset_flag): changed clear_flag to unset_flag for consistency.
  	* bugfix: featurefiles for carved elements no longer include the name of the -o directory.
  	* src/scan_vcard.cpp (scan_vcard): removed     string myString;
  	* src/image_process.h (class process_dir): changed blocks() to max_blocks().
  	* src/be13_api/feature_recorder.cpp (feature_recorder::dump_histogram): moved regex into histogram_def so that it could be run in write(), rather than in post-processing. 
  	* src/be13_api/feature_recorder.h (class feature_recorder): removed outdir and input_fname from feature_recorder, since they are in the feature_recorder_set
  	* src/be13_api/feature_recorder.h (class feature_recorder): carve no longer needs hasher passed in, becuase it is in the feature_recorder_set
  	* src/be13_api/bulk_extractor_i.h (be13): hash_def moved from be13 namespace to feature_recorder_set
  	* src/image_process.h (class process_dir): implemented const correctness for a whole bunch of methods
  	* src/be13_api/feature_recorder.h: removed using namespace std
  	* src/be13_api/feature_recorder_set.h (class feature_recorder_set): process_histograms changed to make_histograms, because that's what it is doing
  	* src/be13_api/feature_recorder.h (class feature_recorder): make_histogram renamed to dump_histogram (because that's what it's doing; callback function added)
  	* src/be13_api: USE_HISTOGRAMS is gone; everybody uses them now.
  	* src/main.cpp (main): alert_list and stop_list are no longer global variables; they are now local to main() and added to the feature_recorder_set
  	* src/be13_api/feature_recorder_set.cpp (feature_recorder_set::init): stop_list and alert_list are now part of the feature_recorder_set.
  	* src/be13_api/Makefile.defs: moved word_and_context_list.* from bulk_extractor to be13_api
  	* src/be13_api/feature_recorder.cpp (feature_recorder::feature_recorder): now has reference to feature_recorder_set
  	* src/stand.cpp (main): replaced manual histogram generator in stand with call to phase_histogram in be13::plugin
  	* src/be13_api/bulk_extractor_i.h (be13): added proper #ifdefs for each type
  	* src/be13_api/feature_recorder_set.h (class feature_recorder_set): more functions were made virtual and more instance values were made private
  	* src/be13_api/bulk_extractor_i.h: process_packet_info renamed to process_packet.
  	* src/be13_api/sbuf.h (class sbuf_t): removed pos0_t from map_file because it can be inferred.
  	* python/bulk_extractor_reader.py (BulkReport): changed .imagefile() to .image_filename
  	* python/identify_filenames.py: changed .imagefile to .image_filename
  	* configure.ac: updated for C++ and MacOS Mavericks. Changed version to 1.4.2
  	* src/main.cpp (main): removed BULK_EXTRACTOR_DEBUG.
  	* src/scan_net.cpp (p): removed packetset (no longer used)
  	* src/be13_api/sbuf.h (stoi64): stoi() removed because it is part of stdc11
  	* src/be13_api/feature_recorder.h (f): removed tags
  	* src/be13_api/plugin.cpp (plugin::phase_histogram): cleaned up printing of newlines during histogram output printing.
  	* src/be13_api/feature_recorder.cpp (feature_recorder::write): replace substr with in-place resize
  	* src/be13_api/feature_recorder.h (class feature_recorder): added MAINTHREAD() to set_flag(), becuase flags should only be set in the main thread.
  	  lso moved definition into feature_recorder.cpp, so that the in-memory histogram can be created if that flag is set.
  	* src/bulk_extractor.cpp (main): added reporting of MD5 of disk image
  	* src/be13_api/feature_recorder.cpp (carve): valid_dosname has to be applied to ext, since ext may come with slashes in it.
  	* src/scan_bulk.cpp (dfrws2012_bulk_process_dump): removed DFRWS code.
  	* configure.ac: incremented version to 1.4.1-dev. Enabled LT_INIT support; removed RANLIB support.
  	* src/scan_accts.flex (dob): DOBs, Fedex#s, and SSNs are now recorded to a feature recorder called 'pii.txt'.
  	* configure.ac: updated to beta6
  	* src/be13_api/feature_recorder.cpp (feature_recorder::write_tag): disabled recorders no longer carve or have tag support.
  	* src/be13_api/feature_recorder_set.cpp (feature_recorder_set::create_name): added warning if feature recorder already exists.
  	* src/bulk_extractor.cpp (main): removed explicit creation of alert recorder; no longer needed.
  	* src/be13_api/feature_recorder_set.h (class feature_recorder_set): alert_recorder should not be a global static; it is now per feature_recorder_set.
  	* src/be13_api/feature_recorder.cpp (feature_recorder::feature_recorder): removed carved_set that was keeping track of what was carved, as it is no longer necessary.
  	* src/scan_exif.cpp (scan_exif): jpeg carver feature recorder renamed to jpeg_carved.
  	* src/be13_api/plugin.cpp (info_scanners): now only prints -H info if it is provided by the scanner.
  	* src/scan_zip.cpp (scan_zip_component): now records general_purpose_bit_flags in XML. Bit 1 indicates that a component is encrypted
  	  (scan_zip_component): removed max_depth check; it's in plugin system
  	* src/scan_net.cpp (scan_net): the -S variable carve_tcp is now implemented by the scan_net scanner to enable or disable TCP/IP memory structure carving. It is disabled by default.
  	* src/scan_windirs.cpp (scan_windirs): windirs now only runs at top level
  	* src/scan_zip.cpp (scan_zip_component): now prints mtime in ISO8601 format
  	  (scan_zip_component): (previously mtime and ctime were wrong parts)
  	* src/scan_xor.cpp (scan_xor): will not XOR on either side of a ZIP. improved error handling
  	* tests/regress.py: updated numbers for 1.4 release
  	* configure.ac: updated to beta4
  	* configure.ac: updated to beta3
  	* src/scan_exif.cpp: fixed jpeg validation. carving now works.
  	* src/be13_api/plugin.cpp (GET_CONFIG): fixed bug in handling of uint8_t config values. They weren't getting set properly.. Ugh.
  	* src/scan_xor.cpp (scan_xor): fixed error when XOR mask was specified as 0. Previously it recused; now it does not.
  	* configure.ac: removed defines we aren't using anymore
  	* src/be13_api/feature_recorder.h (class feature_recorder): as a result of popular demand, the UTF8 BOM and BOM EXPLAINATION have been removed from the feature files
  	* src/be13_api/feature_recorder_set.cpp (feature_recorder_set::get_name): get_name() now returns NULL if feature recorder does not exist.
  	* src/be13_api/feature_recorder.h (class feature_recorder): added context_window_before() and context_window_after().
  	* src/bulk_extractor.cpp (main): replaced context_window with context_window_default.
  	* src/be13_api/bulk_extractor_i.h (class scanner_params): made more variables const.
  	  (class recursion_control_block): removed returnAfterFound(raf); now implemented with exceptions
  	* src/bulk_extractor.cpp (]): fixed handling of LIB_EXPAT
  	  (b): restart logic did not compile. Now it is fixed.
  	* configure.ac: fixed bug in which expat.h was not being checked for. use AC_CHECK_HEADERS() instead of AC_CHECK_HEADER(), as AC_CHECK_HEADER() requires
  	  that you add additional logic and AC_CHECK_HEADERS() automatically adds HAVE_HEADER_H.
  	* src/scan_zip.cpp (scan_zip): removed name_len (not needed)
  	* src/pyxpress.h: removed 'extern' designation
  	* src/image_process.h (i): removed extern size_t opt_pagesize and extern size_t opt_margin. These are now phase1 configuration variables that are passed into the image_iterator.
  	* src/scan_email.flex (Host): removed ip_written and ip_tested (always remove dead code)
  	* src/be13_api/feature_recorder.cpp (feature_recorder::carve): changed carving so that carved files are stored with the filename of their location. Also, fixed check-then-access race error in feature_record.cpp
  	  (feature_recorder::carve): fixed race conditon in carving.
  	* feature_recorder_set.cpp - debug is now a static variable
  	* src/image_process.h (image_process): debug is now a local variable for image_process.h
  	* src/be13_api/bulk_extractor_i.h (DEBUG_EXIT_EARLY): removed DEBUG_MALLOC and DEBUG_MALLOC_FAIL_FREQUENCY; now is handled with -S system
  	* src/bulk_extractor.h: removed all global options; replaced with the be config system
  	* src/pyxpress.c: added OpenSSL exemption per email from Matthieu Suiche
  	* src/be13_api/sbuf.h: md5 support removed from sbuf
  	* src/be13_api/plugin.cpp (plugin::get_scanner_feature_file_names): extensive changes to make the global functions part of the be13::plugin class.
  	* src/bulk_extractor.cpp (main): -S now sets options; -s now sets sampling fraction.
  	* src/bulk_extractor.cpp (usage): The -B option for specifying the blocksize for bulk data analysis has been removed. Instead specify it with -S block_size=NN.
  	* src/be13_api/xml.cpp (xml::xml): Routine for opening an existing DFXML file is removed. Anyone who processes XML with regular expressions is in a state of sin.
  	* src/be13_api/plugin.cpp: max_depth changed to 7
  	* src/scan_winpe.cpp (scan_winpe_verify): added verification of section names and DLL names to reject false positives. 
  	* src/scan_net.cpp (p): carved ethernet packets are now properly recorded in ether.txt and tcp.txt
  	* packet carving for disembodied ethernet packets fixed!  In 3ad21780, simsong was creating the hz structure but not setting it, so all carved packets had zero length
  	* src/be13_api/feature_recorder.cpp (banner_stamp): added \n to # BANNER FILE NOT PROVIDED
  	* src/scan_elf.cpp (scan_elf_verify): fixed bug in scan_elf where XML was incorrect and being generated for invalid ELF headers.
  	* src/bulk_extractor.cpp (main): -Z is no longer fatal if directory does not exist.
  	* configure.ac: fixed AX_PTHREAD test to fail if pthreads are not found.
  	* src/be13_api/feature_recorder_set.cpp (get_name): renamed Mstats to Mlock. Added Mlock to get_name() (apparently this isn't thread safe?)
  	* src/threadpool.h (class worker): removed pesky noreturn problem with threadpool.
  	* python/identify_filenames.py (process_featurefile): added #'s to report printed at bottom
  	  (process_featurefile): added format
  	* python/bulk_extractor_reader.py (is_feature_line): Now handles annotated feature files.
  	  (BulkReport.__init__.validate): added programmer notice for error of providing a feature file instead of a report directory


author: - sysadmin@artefactual.com
changelog:
  - Make JVM heap size configurable /etc/sysconfig/fits
  - Fix systemd starting & stopping the service on install & uninstall


author: Lawrence R. Rogers <lrr@cert.org> 20141129-1
changelog:
  20141129
  	* code clean up

  	20141102
  	* bug fixes
  	* ewf.net added FileEntry::GetType

  	20141030
  	* bug fix in Python-bindings
  	* changes for updated dependencies

  	20141021
  	* changes for deployment

  	20141012
  	* bug fixes

  	20141007
  	* updated dependencies and corresponding changes
  	* worked on autogen.sh and synclibs.sh scripts

  	20141002
  	* removed README.macosx
  	* changes for project site move

  	20140801
  	* bug fix in Python-bindings


author: Lawrence R. Rogers <lrr@cert.org> 20141129-2
changelog:
  * Release 20141129-2
  	This version is now built with version 1 compatibility which removes the need for libewf 20100226, aka libewf version 1.


author: Lawrence R. Rogers <lrr@cert.org> 20150105-2
changelog:
  * Release 20150105-2
  	20150126
  	* fix in ewf.net

  	20150107
  	* 2015 update

  	20141229
  	* updated dpkg files
  	* updated dependencies
  	* updated .gitignore

  	20141226
  	* changes for updated dependencies

  	20141225
  	* worked on Python 3 support

  	20141210
  	* fix in spec file for zlib-static

  	20141204
  	* small changes in progress status output
  	* moved chunk groups cache into handle
  	* moved libewf_chunk_table_chunk_exists_for_offset out of write-only code path

  	20141201
  	* code clean up
  	* removed unrestrict_offset_table, added maximum of 128 M to size of offset table
  	* removed ewf_definitions.h


author: Lawrence R. Rogers <lrr@cert.org> 20160209-1
changelog:
  * Release 20160209-1
  	20160124
  	* worked on refactor

  	20160119
  	* worked on combined Python 2 and 3 build support

  	20160110
  	* 2016 update


author: Lawrence R. Rogers <lrr@cert.org> 20160331-1
changelog:
  * Release 20160331-1
  	20160329
  	* worked on thread locking support

  	20160328
  	* worked on tests
  	* worked on thread locking support

  	20160326
  	* changes for segment files read issue
  	* implement table2 fallback support in libewf_chunk_group_fill_v1

  	20160325
  	* fixed leaks libewf_chunk_table_get_chunk_data_by_offset
  	* worked on v2 support

  	20160320
  	* worked on tests
  	* fix for printing sha256 in ewfexport

  	20160319
  	* worked on tests
  	* fix for deployment using synclibs.sh
  	* removed v1 API
  	* removed delta file support
  	  - outside the concern of this library
  	* removed "random" functions from:
  	  - libewf
  	  - ewf.net
  	  - pyewf

  	20160318
  	* applied updates
  	* worked on tests


author: Lawrence R. Rogers <lrr@cert.org> 20160421-1
changelog:
  * Release 20160421-1
  	20160411
  	* worked on tests

  	20160410
  	* worked on version 2 format support
  	* worked on new read/write chunk API

  	20160409
  	* worked on multi threading support in ewfacquirestream
  	* worked on tests

  	20160404
  	* disabled bzip2 support for now
  	* add check to see if target file can be written in ewfacquire,
  	  ewfacquirestream, ewfexport, ewfrecover
  	* created a queue of storage media buffers
  	  - this blocks the reader thread if the queue is empty
  	  - this limits the maximum size of output list

  	20160403
  	* worked on deployment

  	20160402
  	* worked on multi threading support in ewfacquirestream
  	* fixes for Python-bindings tests
  	* fixes for ewfexport writing notification messsages to stdout
  	* changes for deployment
  	* increased granularity of process status

  	20160401
  	* worked on tests
  	* worked on thread locking support
  	* worked on multi threading support in ewfverify and ewfacquire

  	20160331
  	* worked on tests
  	* worked on thread locking support

  	20160330
  	* worked on thread locking support


author: Lawrence R. Rogers <lrr@cert.org> 20160623-1
changelog:
  * Release 220160623-1
  	This version is based on the source code of 20140608 but is numbered so that 
  	it becomes the default version.


author: Lawrence R. Rogers <lrr@cert.org> 20160718-1
changelog:
  * Release 20160718-1
  	This version is based on the source code of 20140608 but is numbered so that 
  	it becomes the default version. The base-on-source is part of the release number.


author: Lawrence R. Rogers <lrr@cert.org> 20160718-20140806-1
changelog:
  * Release 20160718-20140806-1
  	This version is based on the source code of 20140806 but is numbered so that 
  	it becomes the default version. The base-on-source is part of the release number.
  	-python packages renamed to -python2


author: Lawrence R. Rogers <lrr@cert.org> 1.14-2
changelog:
  * Release 1.14-2
  	Now creates the needed /etc/ld.so.conf.d/libiconv-%arch.conf file
  	Also creates a link from lib to lib64 on x86_64 architectures

  	Revision 1.14  2008/04/08 08:24:53  glen
  	- unify ftp.gnu.org urls

  	Revision 1.13  2007-11-30 21:14:54  qboosh
  	- libiconv is on LGPL v2+, but iconv utility is GPL v3+ now

  	Revision 1.12  2007-11-30 20:26:16  qboosh
  	- up to 1.12
  	- updated pl.po-update patch

  	Revision 1.11  2007-02-13 06:46:51  glen
  	- tabs in preamble

  	Revision 1.10  2007/02/12 00:49:02  baggins
  	- converted to UTF-8

  	Revision 1.9  2006/07/22 07:46:57  qboosh
  	- updated to 1.11, updated pl.po-update patch

  	Revision 1.8  2005/08/15 00:00:52  qboosh
  	- updated to 1.10, added pl.po-update patch

  	Revision 1.7  2004/09/01 16:11:10  adamg
  	- kill pld.org.pl leftovers

  	Revision 1.6  2004/03/14 23:12:48  qboosh
  	- added iconv.h to -devel (yes, C: glibc-devel - but it doesn't make sense with glibc)
  	- strict internal deps

  	Revision 1.5  2004/02/14 21:47:01  undefine
  	- copy config.sub. mayby it help on amd64.. mayby not... who know?
  	- release 2

  	Revision 1.4  2004/01/27 21:01:50  qboosh
  	- 1.9.2

  	Revision 1.3  2003/10/08 21:41:20  qboosh
  	- 1.9.1, added pl description, removed obsolete DESTDIR patch

  	Revision 1.2  2003/09/10 16:30:49  gotar
  	- md5

  	Revision 1.1  2003/09/10 16:26:07  gotar
  	- just in case


author: Lawrence R. Rogers <lrr@cert.org> 1.14-3
changelog:
  - only packages /usr/libiconv/lib for x86_64 architectures.
    This packaging error caused duplication of files in the libiconv and libiconv-devel packages


author: Lawrence R. Rogers <lrr@cert.org> 1.14-3
changelog:
  New in 1.15:
  	* The UTF-8 converter now rejects surrogates and out-of-range code points.
  	* Added ISO-2022-JP-MS converter.
  	* Updated the CP1255 converter to map one more character.
  	* The functions now support strings longer than 2 GB.


author: MediaArea.net SARL <info@mediaarea.net> - 18.03.1-0
changelog:
  - See History.txt for more info and real dates
  - Previous packages made by Toni Graffy <toni@links2linux.de>
  - Fedora style made by Vasiliy N. Glazov <vascom2@gmail.com>


author: Lawrence R. Rogers <lrr@cert.org> - 0.6.60-1.1
changelog:
  * Release 0.6.60-1.1
  	Patch from Dominique Leuenberger to add AC_USE_SYSTEM_EXTENSIONS
  	Add readpst -a option for attachment stripping


author: Lawrence R. Rogers <lrr@cert.org> - 0.6.63-1.1
changelog:
  * Release 0.6.63-1.1
  	Daniel Gryniewicz found buffer overrun in LIST_COPY_TIME
  	Old dependency filter breaks file coloring


author: Lawrence R. Rogers <lrr@cert.org> - 0.6.66-1.1
changelog:
  * Release 0.6.66-1.1
  	LibPST 0.6.66 (2015-12-21)
  	===============================
  	    * Igor Stroh  - Added Content-ID header support

  	LibPST 0.6.65 (2015-09-11)
  	===============================
  	    * Jeffrey Morlan - fix multiple Content-Type headers
  	    * Hans Liss - debug level output

  	LibPST 0.6.64 (2015-03-09)
  	===============================
  	    * AJ Shankar fixes for attachment processing and body
  	      encodings that contain embedded null chars


author: Lawrence R. Rogers <lrr@cert.org> - 0.6.68-1.1
changelog:
  * Release 0.6.68-1.1
  	LibPST 0.6.68 (2016-08-29)
  	===============================
      	    * allow folders containing multiple item types, e.g. email and calendar
      	    * better detection of valid internet headers


author: Lawrence R. Rogers <lrr@cert.org> - 0.6.69-1.1
changelog:
  * Release 0.6.69-1.1
  	LibPST 0.6.69 (2016-10-29)
  	===============================
  	    * fix bugs in code allowing folders containing multiple item types


author: Lawrence R. Rogers <lrr@cert.org> - 0.6.70-1.1
changelog:
  * Release 0.6.70-1.1
  	LibPST 0.6.70 (2017-02-08)
  	===============================
  	    * Jeffrey Morlan - pst_getID2 must not recurse into children


author: Lawrence R. Rogers <lrr@cert.org> - 0.6.71-1.1
changelog:
  * Release 0.6.71-1.1
  	LibPST 0.6.71 (2017-07-21)
  	===============================
  	    * Zachary Travis - Add support for the OST 2013 format, and
  	      Content-Disposition filename key fix for outlook compatibility


author: Lawrence R. Rogers <lrr@cert.org> - 20160424-1
changelog:
  * Release 20160424-1
  	20160424
  	* fixed byte order of identifiers

  	20160423
  	* Changes to Python bindings
  	* Worked on tests
  	* Worked on diff image parent support

  	20160111
  	* Changes to Python bindings

  	20160109
  	* fixes for rpmbuild


author: Lawrence R. Rogers <lrr@cert.org> - 20181227-3
changelog:
  * Release 20181227-3
  	Release 3 - Removed conflicts when that arise when python2 and python3
  		    versions are attempted to be installed on a system.


author: Lawrence R. Rogers <lrr@cmu.edu> 20150516-1
changelog:
  * Release 20150516-1
  	20150516
  	* fixed bug handling extent without filename
  	* fixed bug in basename handling on non UTF-8 system string systems
  	* worked on Python bindings


author: Lawrence R. Rogers <lrr@cmu.edu> 20160119-1
changelog:
  * Release 20160119-1
  	20160119
  	* worked on fallback inflate implementation

  	20160118
  	* worked on fallback inflate implementation

  	20160111
  	* Changes to Python bindings

  	20160109
  	* fixes for rpmbuild

  	20160108
  	* 2016 update
  	* worked on Python 3 support

  	201512223
  	* Changes to Python bindings
  	* updated dependencies

  	20150712
  	* fixed memory leak


author: - sysadmin@artefactual.com
changelog:
  - bump version to 0.9.3
  - use ng-nailgun client name instead of ng
  - add nailgun-server-latest-SNAPSHOT.jar symlink


author: dsilakov <denis.silakov@rosalab.ru> 1.10.0-1
changelog:
  - (1d3151d) Merge pull request #7 from import/python-six:auto_update
  - (1d3151d) Updated to 1.10.0 (by updates_builder)


author: Ralph Bean <rbean@redhat.com> - 0.6.1-1
changelog:
  - New upstream version
  - Added support for python3
  - Included README, COPYING, and CHANGELOG in docs


author: Lawrence R. Rogers <lrr@cert.org) 4.6.0-1
changelog:
  - Release 4.6.0-1
  	- New Features
  		- New Communications related Java classes and database tables.
  		- Java build updates for Autopsy Linux build
  		- Blackboard artifacts are now Content objects in Java and part of tsk_objects table in database.
  		- Increased cache sizes.
  		- Lots of bounds checking fixes from Google's fuzzing tests.  Thanks Google.
  		- HFS fix from uckelman-sf.


author: Lawrence R. Rogers <lrr@cert.org) 4.6.1-1
changelog:
  - Release 4.6.1-1
  	Lots of bounds checking fixes from Google's fuzzing tests. Thanks Goole.
  	Cleanup and fixes from uckelman-sf and others
  	PostgreSQL, libvhdi, & libvmdk are supported for Linux / OS X
  	Fixed display of NTFS GUID in istat - report from Eric Zimmerman.
  	NTFS istat shows details about all FILE_NAME attributes, not just the first. report from Eric Zimmerman.


author: Lawrence R. Rogers <lrr@cert.org) 4.6.2-1
changelog:
  - Release 4.6.2-1
  	C/C++ Code:
  	- Various compiler warning fixes
  	- Added small delay into image writer to not starve other threads

  	Java: 
  	- Added more locking to ensure that handles were not closed while other threads were using them. 
  	- Added APIs to support more queries by data source
  	- Added memory-based caching when detecting if an object has children or not.


author: Lawrence R. Rogers <lrr@cert.org) 4.6.2-2
changelog:
  - Release 4.6.2-2
  	Built with Java support. Release number is greater than the release for Fedora 28 and 27.


author: Lawrence R. Rogers <lrr@cert.org) 4.6.3-1
changelog:
  - Release 4.6.3-1
  	C/C++ Code:
  		Hashdb bug fixes for corrupt indexes and 0 hashes
  		New code for testing power of number in ExtX code
  	Java Code:
  		New class that allows generic database access
  		New methods that check for duplicate artifacts
  		Added caches for frequently used content
  	Database Schema:
  		Added Examiner table
  		Tags are now associated with Examiners
  		Changed parent_path for logical files to be consistent with FS files.


author: Lawrence R. Rogers <lrr@cert.org) 4.6.4-1
changelog:
  - Release 4.6.4-1
  	Java Code:
  		Increase max statements in database to prevent errors under load
  		Have a max timeout for SQLite retries


author: Lawrence R. Rogers <lrr@cert.org) 4.6.5-1
changelog:
  - Release 4.6.5-1
  	C/C++ Code:
  		HFS boundary check fix
  	Java Code:
  		New artifacts and attributes defined
  		Fixed bug in SleuthkitCase.getContentById() for data sources
  		Fixed bug in LayoutFile.read() that could allow reading past end of file
  	Case Database Schema:
  		New fields for hash values and acquisition details in case database
  		Store "created schema version" in case database


author: Lawrence R. Rogers <lrr@cert.org) 4.6.6-1
changelog:
  - Release 4.6.6-1
  	C/C++ Code:
  		Acquisition deteails are set in DB for E01 files
  		Fix NTFS decompression issue (from Joe Sylve)
  		Image reading fix when cache fails (Joe Sylve)
  		Fix HFS+ issue with large catalog files (Joe Sylve) 
  		Fix free memory issue in srch_strings (Derrick Karpo)
  	Java:
  		Fix so that local files can be relative
  		More Blackboard artifacts and attributes for web data
  		Added methods to CaseDbManager to enable checking for and modifying tables.
  		APIs to get and set acquisition details
  		Added methods to add volume and file systems to database
  		Added method to add LayoutFile for allocated files
  		Changed handling of JNI handles to better support multiple cases


author: Sérgio Basto <sergio@serjux.com> - 0.140-1.20140122gitde0bc36
changelog:
  - Update to 0.140 git de0bc36 (stable branch)
  - drop visualize options, ./configure doesn't have --enable-visualize or --disable-visualize, 
  anymore


author: Sérgio Basto <sergio@serjux.com> - 0.140-2.20140122gitde0bc36
changelog:
  - bootstrap x264 to avoid: 
    /usr/bin/ld: warning: libx264.so.138, needed by
    /usr/lib/gcc/x86_64-redhat-linux/4.8.2/../../../../lib64/libavcodec.so, may conflict with
    libx264.so.140


author: Dominik Mierzejewski <rpm at greysector.net> - 1.2.0-1
changelog:
  - 1.2.0
  - drop upstreamed noexec stack patch
  - BR recent nasm instead of yasm
  - licence seems to be just GPLv2+
  - move TODO from main to -devel doc
  - update summary and description
  - small spec file fixes


