Linux Forensics Tools Repository: Package Summary for Packages on April 3, 2013:

  • dd_rescue-1.33-1.{fc15,fc16,fc17,fc18,el5,el6}.{i686,x86_64}.rpm - Dd_rescue is a utility similar to the system utility dd which copies data from a file or block device to another. dd_rescue. does however not abort on errors in the input file. This makes it suitable for rescuing data from media with errors, e.g. a disk with bad sectors. Here are the changes from the previous distributed version (1.31):
    • This version brings long options, a new double overwrite mode (-2) and a man page.

  • fmem-kernel-objects-1.6-1.18.{fc15,fc16,fc17,fc18,el5,el6}.{i686,x86_64}.rpm - Fmem is kernel module that creates device /dev/fmem, similar to /dev/mem but without limitations. The changes added support for the following Fedora kernels:
    • 3.8.5-201 for FC18
    • 3.8.4-102 for FC17

  • python-apsw-3.7.16.1_r1-1.{fc15,fc16,fc17,fc18,el5,el6}.{i686,x86_64}.rpm - Python-apsw is a Python wrapper for the SQLite embedded relational database engine. In contrast to other wrappers such as pysqlite it focuses on being a minimal layer over SQLite attempting just to translate the complete SQLite API into Python. The documentation has a section on the differences between APSW and pysqlite. See here for a list of the changes.
  • yara-1.7-1.{fc15,fc16,fc17,fc18,el5,el6}.{i686,x86_64}.rpm - Yara scans the given FILE or the process indentified by PID looking if it matches the patterns and rules provided in a special purpose language. The rules are read from RULEFILEs or standard input. Here are the changes since the last version:
    • faster compilation
    • added suport for modulus (%) and bitwise xor (|) operators
    • better hashing of regular expressions
    • BUGFIX: yara-python segfault when using dir() on Rules and Match classes
    • BUGFIX: Integer overflow causing infinite loop
    • BUGFIX: Handling strings containing \x00 characters correctly
    • BUGFIX: Regular expressions not matching at the end of the file when compiled with RE2
    • BUGFIX: Memory leaks
    • BUGFIX: File handle leaks

  • yara-python-1.7-1.{fc15,fc16,fc17,fc18,el5,el6}.{i686,x86_64}.rpm - Yara-python is a Python extension that gives access to YARA's powerful features from Python scripts. See the changes for yara above.