# changelog

author: Lawrence Rogers <lrr@cert.org> 1.0-97
changelog:
  * Release 1.0-97
  	Removed the following for Fedora 35
  	  * vinetto
  	  * Volatility-community-plugins
  	  * shellbags
  	  * binplist


author: Lawrence Rogers <lrr@cert.org> 1.0-100
changelog:
  * Release 1.0-100
  	Added the following packages:
  	 * crunch
  	 * docker-forensics-toolkit
  	 * KStrike
  	 * libfplist
  	 * libfwevt
  	 * libfwps
  	 * mtftar
  	 * pstotext
  	 * pyfixbuf
  	 * VeraCrypt
  	 * videosnarf
  	 * wdpassport-utils
  	 * zeek


author: Lawrence Rogers <lrr@cert.org> 1.0-101
changelog:
  * Release 1.0-101
  	Added the following packages:
  	 * python3-oletools
  	 * python-oletools-doc
  	 * mmc-utils


author: Lawrence Rogers <lrr@cert.org> 1.0-102
changelog:
  * Release 1.0-102
  	Removed the following packages:
  	 * ssldump from CentOS/RHEL 8
  	Obsoleted the following packages:
  	 * cutter-re from CentOS/RHEL8


author: Lawrence Rogers <lrr@cert.org> 1.0-103
changelog:
  * Release 1.0-103
  	Replaced the following packages
  	 * winregrc replaces winreg-kb
  	 * winevtrc replaces winevt-kb
  	Removed packages for Fedora 36, 37, and 38
  	 * dcp
  	 * femto
  	 * bulk-reviewer
  	Remove packages for Fedora 38 (for now)
  	 * zeek
  	 * mmc-utils
  	Added
  	 * libfixbuf-ipfixDump


author: Lawrence Rogers <lrr@cert.org> 1.0-105
changelog:
  * Release 1.0-105
  	Added 
  	* libguestfs
  	* libguestfs-tools
  	* libguestfs-forensics (Not CentOS 7, 8, or 9 and Amazon Linux 2)
  	* libguestfs-gfs2 (Not CentOS 9
  	* libguestfs-hfsplus (Not Centos 7, 8, or 9 and Amazon Linux 2)
  	* libguestfs-inspect-icons
  	* libguestfs-rescue
  	* libguestfs-rsync
  	* libguestfs-ufs (Not CentOS 7, 8, or 9 and Amazon Linux 2)
  	* libguestfs-xfs
  	* libguestfs-zfs (Not CentOS 7, 8, or 9 and Amazon Linux 2)


author: Paul Howarth <paul@city-fan.org> - 1.6.10-1
changelog:
  - Update to 1.6.10
    - GeoIP_database_info now returns the full version string rather than
      incorrectly truncating it (GH#79)
    - This API is now distributed with a small test copy of GeoIP.dat rather than
      a full copy
    - Fix issue where Visual Studio 2015 was optimizing out initialization code
      (GH#81)
    - Fix test/benchmark on Windows (GH#75)


author: Paul Howarth <paul@city-fan.org> - 1.6.11-1
changelog:
  - Update to 1.6.11
    - Fix use of a NULL pointer when opening a corrupt database with 'GeoIP_open'
      (GH#87)
  - Drop EL-5 support
    - Drop redundant BuildRoot: and Group: tags
    - Drop EL5-only dependency on GeoIP-GeoLite-data
    - Drop explicit pkgconfig dependency in devel package
    - Drop buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1.6.12-1
changelog:
  - Update to 1.6.12
    - Populate metro and area code when performing lookups in IPv6 City
      databases; previously this was only done when using IPv4 City
      databases


author: Lawrence R. Rogers <lrr@cert.org> 2.6.1-7
changelog:
  * Release 2.6.1-7
  	This version uses a container based on Alpine Linux
  	The container can be found at certlifter/Volatility-2.6.1:8.
  	Note that the Dockerfile is provided as part of this package.


author: Lawrence R. Rogers <lrr@cert.org> 2.6.1-8
changelog:
  * Release 2.6.1-8
  	The errors in the script and logic changes have been corrected by the patch.
  	The container is now based on CentOS 7.9.2009 and uses volatility from LiFTeR as well as the community plugins.


author: Lawrence R. Rogers <lrr@cert.org> 20230821-1
changelog:
  * Release 20230821-1
  	Windows Operating System Symbols for Volatility 3 from 20191016
  	and the JPCERT symbols from 20230821.


author: Miro Hrončok <mhroncok@redhat.com> - 3.7.16-7
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Move_usr_bin_python_into_separate_package)


author: Michal Ambroz <rebus _AT seznam.cz> - 3.7.18-1
changelog:
  - bump to 3.7.18 which contains:
  - Remove upstream patch Sanity-check-size-passed-to-malloc.patch
  - Fix affverify failing due to context being freed too soon
  - Fix pyaff build issue with newer Python (3.7) and cython (0.29)
  - from version 3.7.17
  - fix #34: option typo (25 minutes ago)
  - minor fixes to configure.ac (3 months ago)
  - Fix issue #32, an off-by-one buffer overflow (6 months ago)
  - whitespace (6 months ago)
  - Sanity check size passed to malloc... (6 months ago)
  - Fix incrementing in vnode_split_raw.cpp for comment consistnecy (12 months ago)
  - Update Win32 readmes to fix issue #26. (1 year, 2 months ago)
  - build python3 package


author: Lawrence R. Rogers <lrr@cert.org> 5.11.4-1
changelog:
  * Release 5.11.4.1
  	Version 5.11.4
  	  Updated to allow compilation with fixbuf-2.0.0 or fixbuf-3.0.0. Notes:
  	   Processing IPFIX produced by YAF 3 is experimental and not recommended.
  	   Ensure the SchemaTools and SiLK dependencies use the same version of libfixbuf.
  	 Fixed an issue on macOS that prevented configure from finding SiLK.
  	 Updated CERT IPFIX elements to include those added in YAF 3. This update does not include the element name changes that were part of that release.


author: Lawrence R. Rogers <lrr@cert.org> 4.19.2-1
changelog:
  * Release 4.19.2-1
  	---------------- VERSION 4.19.2  --------------
  	GUI Updates:
  	- Special handling of Interesting Files and Interesting Results analysis results was removed from the tree and they are now shown as individual nodes. 
  	- Updated display of analysis results in the tabular results viewer.
  	- Improved algorithm for populating the S(core) column in the tabular results view.
  	- Updated the right-click menu options for data artifacts and analysis results.
  	- The O(ther Cases) column in the tabular results view and the Other Occurrences content viewer now count cases in the same way.  

  	Misc:
  	- Installed applications are now added to the central repository.
  	- The Central Repository ingest module no longer uses the generic Interesting Item analysis result and instead creates more specific Previously Seen, Previously Unseen, and Previously Notable analysis results.
  	- Automatic destinations (jump lists) parsing added to the Recent Activity module.
  	- French translation of user documentation contributed by github user Seb2lyon.

  	Bug Fixes:
  	- Analysis Results and Annotation content viewers now work when parent is a data artifact.
  	- Fixed bug that prevented media attachments from being displayed in the Communications Viewer. 
  	- Fixed RegRipper bug to support parsing of ShellBags with non-Latin characters.
  	- Assorted GUI responsiveness fixes.
  	- Fixed NTFS handling of compressed files that were not fully initialized (via TSK). 
  	- Other assorted bug fixes.

  	---------------- VERSION 4.19.1  --------------
  	Bug Fixes:
  	- Fixed connection leak associated with creating OS Accounts
  	- Decreased priority of OS Account Content Viewer
  	- Misc bound check fixes in TSK


author: Lawrence R. Rogers <lrr@cert.org> 4.20.0-1
changelog:
  * Release 4.20.0-1
  	---------------- VERSION 4.20.0  --------------
  	Recent Activity Updates:
  	- Added Favicons, Profiles and Extensions to Chromium Browsers
  	- Added Security Questions/Answers from SAM registry Hive

  	Data Source Processing
  	- Added Jython Support for Data Source Processor modules.
  	- Added example Python DSP plugin

  	Ingest Pipelines
  	- Added new DataArtifact ingest pipeline that artifacts will go down.
  	- Moved Keyword search functionality for artifacts to the new pipeline.

  	Linux / Mac Improvements
  	- Script to install prerequisites using Homebrew and Debian package. 
  	- Script that allows you to install TSK from source
  	- Script that sets JAVA home per install
  	- Updating Linux and Mac Installation Documentation

  	Command Line Interface
  	- Simplified command line input parameters
  	- The -listAllIngestProfiles switch was added
  	- The -nogui switch now works.
  	- Return codes now reflect if the application failed

  	Bug Fixes:
  	- Solr 8.11.2 Upgrade which includes update to Log4j to version 2.17.1
  	- Change Timezone format for Plaso output.
  	- Regex fix for Mbox parsing.
  	- Portable Case report string index out of range -1 fixed
  	- Extracting files, numbering of files and overwriting of files.
  	- Image tagging
  	- Joda-Time updated from 2.4 to 2.10 -  fixes certain timezone errors

  	Misc:
  	- Update to USB id's.
  	- Update Tesseract to 4.10.
  	- Moved configuration settings to separate ones that are machine-dependent. 
  	- Interesting files and file filters can now exclude certain features, such as folders.
  	- Adds host to artifact content viewer.
  	- When an OS Account is selected the Other Occurrences tab will no longer show the open case in the case list.

  	- The Communication window Message Viewer Threads panel layout was cleaned up so that the buttons are visible despite the subject length.
  	- Limit ingest inbox messages to first 20 keyword hits
  	- GStreamer update to version 1.20.0
  	- libheif v1.12.0 replaces ImageMagick
  	- Removal of 32bit version of Autopsy


author: Lawrence R. Rogers <lrr@cert.org> 4.21.0-1
changelog:
  * Release 4.21.0-1
  	Library Updates
  	- Update Java to version 17
  	- Update aLeapp/iLeapp executables.
  	- Update JNA Version
  	- Update SQLite library version
  	- Updated 3rd party libraries that have known CVE's

  	Ingest Module Updates:
  	- Recent Activity checks for malicious Chrome extensions from list provided by https://github.com/randomaccess3/detections
  	- Keyword Search module now can search without needing to index text into Solr. 
  	- New Cyber Triage Malware Scanner module that uses Reversing Labs (requires license). https://www.cybertriage.com/autopsy-malware-module/

  	Add Data Source Updates:
  	- Timestamps for logical files can be added. Issue https://github.com/sleuthkit/autopsy/issues/5852, https://github.com/sleuthkit/autopsy/issues/1788
  	- List of logical files/folders can be edited before they are added.  Issue https://github.com/sleuthkit/autopsy/issues/7347 

  	GUI Updates:
  	- Add "has attachments" flag for emails. Issue https://github.com/sleuthkit/autopsy/issues/7358
  	- Add Score to tree view

  	Bugs:
  	- Fix path for lnk files
  	- Fix exporting of CSV files. Issue https://github.com/sleuthkit/autopsy/issues/6717

  	Misc:
  	- Added File Repository concept for data source files that are in a central location. Required for Cyber Triage import feature.
  	- Added Spanish language support, contributor https://github.com/AburtoArielPM


author: Lawrence R. Rogers <lrr@cert.org> 2.7-1
changelog:
  * Release 2.7-1
    * Ddru_ntfsfindbad 1.5 released:
      + Fixed possible program crash if partition boot sector error
      + Better partition boot sector error output
    * Ddru_ntfsbitmap 1.5 released:
      + Fixed possible program crash if partition boot sector error
      + Better partition boot sector error output


author: Lawrence R. Rogers <lrr@cert.org> 2.8-1
changelog:
  * Release 2.8-1
  	No longer uses automake to compile, now uses a regular make file. No program files were updated or changed.


author: Lawrence R. Rogers <lrr@cert.org> - 1.4.0-1
changelog:
  * Release 1.4.0-1
  	* Added exfatattrib utility which prints or changes file attributes [Will Thompson].
  	* Added FUSE 3 support. FUSE 2 continues to be supported.
  	* Added support for timezone offsets [Nathan Hunsperger].
  	* Fixed device opening error being reported as FS error.
  	* Fixed possible data leakage when uninitialized clusters were allocated using NtSetInformationFile() call under Windows and FS was not unmounted correctly.
  	* Improved compatibility with autoconf 2.70.
  	* Fixed disk size reading on NetBSD [Dave Vasilevsky].
  	* Fixed "automounted" option handling on FreeBSD [Iouri V. Ivliev].
  	* Allowed to specify the "nonempty" mount option.
  	* Fixed file data contiguity handling bug which could cause performance degradation [noctis].
  	* Fixed possible crashes on invalid UTF-8 sequences.
  	* Fixed a situation when FS could be erroneously marked as dirty (not cleanly unmounted).


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.1
changelog:
  * Release 1.6-1.1
  	This is the initial release of this package.
  	It contains all of the OS and architecture-independent parts of FMEM.


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.2
changelog:
  * Release 1.6-1.2
  	Updated these files:
                  lkm.c
          to be in sync with the FMEM Forensics Source code repository.


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.3
changelog:
  * Release 1.6-1.3
  	Updated these files:
                  lkm.c
          to compile with linux kernels 4.7.


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.4
changelog:
  * Release 1.6-1.4
  	Updated lkm.c to current as of 2019-10-22.
  	Also updated isntall-mem to reference the correct location of the kernel modules.


author: Lawrence R. Rogers <lrr@cert.org> 1.6-13
changelog:
  * Release 1.6-13
          Kernel modules were added for the following kernels:
  		2.6.18-409
  		2.6.18-408


author: Lawrence R. Rogers <lrr@cert.org> 1.6-60
changelog:
  * Release 1.6-60
  	Kernel modules were added for the following kernels:
  		2.6.32-754.24.3
  		2.6.32-754.24.2


author: Lawrence R. Rogers <lrr@cert.org> 1.6-89
changelog:
  * Release 1.6-89
  	Kernel modules added for the following kernels:
  		3.10.0-1160.90.1
  		3.10.0-1160.88.1
  		3.10.0-1160.83.1
  		3.10.0-1160.81.1
  		3.10.0-1160.80.1


author: Lawrence R. Rogers <lrr@cert.org> 1.6-41
changelog:
  * Release 1.6-41
  	Kernel modules added for the following kernels:
  		4.18.0-508
  		4.18.0-509
  		4.18.0-511


author: Lawrence R. Rogers <lrr@cert.org> 1.6-44
changelog:
  * Release 1.6-44
  	Kernel modules added for the following kernels:
  		4.18.0-514
  		4.18.0-516
  		4.18.0-517


author: 2014 Lawrence R. Rogers <lrr@cert.org> 1.6-1
changelog:
  * Release 1.6-1
  	Kernel modules are available for the following kernels:
  		3.3.4-5    3.3.7-1    3.4.0-1    3.4.2-4    3.4.3-1    3.4.4-3
  		3.4.4-5    3.4.5-2    3.4.6-2    3.5.0-2    3.5.1-1    3.5.2-1
  		3.5.2-3    3.5.3-1    3.5.4-1    3.5.4-2    3.5.5-2    3.5.6-1
  		3.6.1-1    3.6.2-4    3.6.3-1    3.6.5-1    3.6.6-1    3.6.7-4
  		3.6.8-2    3.6.9-2    3.6.10-2   3.6.11-1   3.6.11-5   3.7.3-101
  		3.7.6-102  3.7.9-101  3.7.9-104  3.8.3-103  3.8.4-102  3.8.8-100
  		3.8.11-100 3.8.12-100 3.8.13-100 3.9.8-100  3.9.10-100


author: 2014 Lawrence R. Rogers <lrr@cert.org> 1.6-1
changelog:
  * Release 1.6-1
  	Kernel modules are available for the following kernels:
  		3.6.10-4     3.7.4-204   3.7.5-201   3.7.6-201   3.7.7-201
  		3.7.8-202    3.7.9-201   3.7.9-205   3.8.1-201   3.8.2-206
  		3.8.3-201    3.8.3-203   3.8.4-202   3.8.5-201   3.8.6-203
  		3.8.7-201    3.8.8-202   3.8.8-203   3.8.9-200   3.8.11-200
  		3.9.2-200    3.9.4-200   3.9.5-201   3.9.6-200   3.9.9-201
  		3.9.10-200   3.9.11-200  3.10.4-100  3.10.6-100  3.10.7-100
  		3.10.9-100   3.10.10-100 3.10.11-100 3.10.12-100 3.10.13-101
  		3.10.14-100  3.11.4-101  3.11.7-100  3.11.9-100  3.11.10-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-5
changelog:
  * Release 1.6-5
          Kernel modules are available for the following kernels:
                  3.14.17-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-6
changelog:
  * Release 1.6-6
          Kernel modules are available for the following kernels:
                  3.14.19-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-7
changelog:
  * Release 1.6-7
          Kernel modules are available for the following kernels:
                  3.14.22-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-8
changelog:
  * Release 1.6-8
          Kernel modules are available for the following kernels:
                  3.14.23-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-10
changelog:
  * Release 1.6-10
          Kernel modules are available for the following kernels:
                  3.14.27-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-11
changelog:
  * Release 1.6-11
          Kernel modules are available for the following kernels:
                  3.14.27-100 i686


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.38
changelog:
  * Release 1.6-1.38
  	Kernel modules were added for the following kernels:
                  4.10.10-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.39
changelog:
  * Release 1.6-1.39
  	Kernel modules were added for the following kernels:
                  4.10.14-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.40
changelog:
  * Release 1.6-1.40
  	Kernel modules were added for the following kernels:
                  4.10.15-100
                  4.10.16-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.41
changelog:
  * Release 1.6-1.41
  	Kernel modules were added for the following kernels:
                  4.10.17-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.42
changelog:
  * Release 1.6-1.42
  	Kernel modules were added for the following kernels:
                  4.11.5-100
                  4.11.4-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.46
changelog:
  * Release 1.6-1.46
  	Kernel modules were added for the following kernels:
                  4.11.10-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.47
changelog:
  * Release 1.6-1.47
  	Kernel modules were added for the following kernels:
                  4.11.12-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.40
changelog:
  * Release 1.6-1.40
  	Kernel modules were added for the following kernels:
  		4.10.15-100
  		4.10.16-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.34
changelog:
  * Release 1.6-1.34
  	Kernel modules were added for the following kernels:
  		4.15.16-200
  		4.15.15-200


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.35
changelog:
  * Release 1.6-1.35
  	Kernel modules were added for the following kernels:
  		4.20.17-100
  		4.20.16-100
  		4.20.15-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.35
changelog:
  * Release 1.6-1.35
  	Kernel modules were added for the following kernels:
  		5.8.10-100
  		5.8.9-101
  		5.8.8-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.37
changelog:
  * Release 1.6-1.37
  	Kernel modules were added for the following kernels:
  		5.10.21-100
  		5.10.20-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.40
changelog:
  * Release 1.6-1.40
  	Kernel modules were added for the following kernels:
  		5.11.11-100
  		5.11.10-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.41
changelog:
  * Release 1.6-1.41
  	Kernel modules were added for the following kernels:
  		5.11.13-100
  		5.11.12-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.42
changelog:
  * Release 1.6-1.42
  	Kernel modules were added for the following kernels:
  		5.11.15-100
  		5.11.14-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.45
changelog:
  * Release 1.6-1.45
  	Kernel modules were added for the following kernels:
  		5.11.19-100
  		5.11.18-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.46
changelog:
  * Release 1.6-1.46
  	Kernel modules were added for the following kernels:
  		5.11.22-100
  		5.11.21-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.39
changelog:
  * Release 1.6-1.39
  	Kernel modules were added for the following kernels:
  		5.13.15-100
  		5.13.14-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.40
changelog:
  * Release 1.6-1.40
  	Kernel modules were added for the following kernels:
  		5.13.19-100
  		5.13.16-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.43
changelog:
  * Release 1.6-1.43
  	Kernel modules were added for the following kernels:
  		5.14.12-100
  		5.14.11-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.45
changelog:
  * Release 1.6-1.45
  	Kernel modules were added for the following kernels:
  		5.14.16-101
  		5.14.15-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.46
changelog:
  * Release 1.6-1.46
  	Kernel modules were added for the following kernels:
  		5.14.18-100
  		5.14.17-101


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.45
changelog:
  * Release 1.6-1.45
  	Kernel modules were added for the following kernels:
  		5.16.20-100
  		5.16.19-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.50
changelog:
  * Release 1.6-1.50
  	Kernel modules were added for the following kernels:
  		5.17.9-100
  		5.17.8-100

  5.17.7-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.34
changelog:
  * Release 1.6-1.34
  	Kernel modules were added for the following kernels:
  		5.18.16-100
  		5.18.15-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.41
changelog:
  * Release 1.6-1.41
  	Kernel modules were added for the following kernels:
  		5.19.11-100
  		5.19.10-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.42
changelog:
  * Release 1.6-1.42
  	Kernel modules were added for the following kernels:
  		6.0.12-100
  		6.0.11-100
  		6.0.10-100
  		6.0.9-100
  		6.0.8-100
  		6.0.7-100
  		6.0.5-100
  		5.19.16-100
  		5.19.15-101
  		5.19.14-100
  		5.19.13-100
  		5.19.12-100


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.10
changelog:
  * Release 1.6-1.10
  	Kernel modules were added for the following kernels:
  		5.18.16-200
  		5.18.15-200


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.17
changelog:
  * Release 1.6-1.17
  	Kernel modules were added for the following kernels:
  		5.19.11-200
  		5.19.10-200


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.18
changelog:
  * Release 1.6-1.18
  	Kernel modules were added for the following kernels:
  		6.2.15-100
  		6.2.14-100
  		6.2.13-100
  		6.2.12-100
  		6.2.11-100
  		6.2.10-100
  		6.2.9-100
  		6.2.8-100
  		6.2.7-100
  		6.1.18-100
  		6.1.15-100
  		6.1.14-100
  		6.1.13-100
  		6.1.12-100
  		6.1.11-100
  		6.1.10-100
  		6.1.9-100
  		6.1.8-100
  		6.1.7-100
  		6.1.6-100
  		6.1.5-100
  		6.0.18-200
  		6.0.17-200
  		6.0.16-200
  		6.0.15-200
  		6.0.14-200
  		6.0.12-200
  		6.0.11-200
  		6.0.10-200
  		6.0.9-200
  		6.0.8-200
  		6.0.7-200
  		6.0.5-200
  		5.19.16-200
  		5.19.15-201
  		5.19.14-200
  		5.19.13-200
  		5.19.12-200


author: Lawrence R. Rogers <lrr@cert.org> 1.6-1.1
changelog:
  * Release 1.6-1.1
  	Initial release. Kernel modules were added for the following kernels:
  		6.5.11
  		6.5.10
  		6.5.6


author: Reini Urban <rurban@cpan.org> 10.1_PUBLIC_20211210-1
changelog:
  * Release 10.1_PUBLIC_20211210-1
  	Version 10.1 - see https://htmlpreview.github.io/?https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_10.1_build/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.html for changes


author: Reini Urban <rurban@cpan.org> 10.1.1_PUBLIC_20211221-1
changelog:
  * Release 10.1_PUBLIC_20211221-1
  	Version 10.1.1 - see https://htmlpreview.github.io/?https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_10.1.1_build/Ghidra/Configurations/Public_Release/src/global/docs/WhatsNew.html for changes


author: Reini Urban <rurban@cpan.org> 10.1.1_PUBLIC_20220125-1
changelog:
  * Release 10.1_PUBLIC_20220125-1
  	Version 10.1.2 - see https://htmlpreview.github.io/?https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_10.1.2_build/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.html for changes.


author: Lawrence R. Rogers <lrr@cert.org> 10.1.5_PUBLIC_20220726-1
changelog:
  * Release 10.1.5_PUBLIC_20220726-1
  	Version 10.1.5 - see https://htmlpreview.github.io/?https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_10.1.5_build/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.html


author: Lawrence R. Rogers <lrr@cert.org> 10.2.3_PUBLIC_20230208-1
changelog:
  * Release 10.2.3_PUBLIC_20230208-1
  	Version 10.2.3 - see https://htmlpreview.github.io/?https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_10.2.3_build/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.html


author: Lawrence R. Rogers <lrr@cert.org> 10.3_PUBLIC_20230510-1
changelog:
  * Release 10.3_PUBLIC_20230510-1
  	Version 10.3 - see https://htmlpreview.github.io/?https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_10.3_build/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.html


author: Lawrence R. Rogers <lrr@cert.org> 10.3.1_PUBLIC_20230614-1
changelog:
  * Release 10.3.1_PUBLIC_20230614-1
  	Version 10.3.1 - see https://htmlpreview.github.io/?https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_10.3.1_build/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.html


author: Lawrence R. Rogers <lrr@cert.org> 10.3.2_PUBLIC_20230711-1
changelog:
  * Release 10.3.2_PUBLIC_20230711-1
  	Version 10.3.2 - see https://htmlpreview.github.io/?https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_10.3.2_build/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.html


author: Lawrence R. Rogers <lrr@cert.org> 10.3.2_PUBLIC_20230829-1
changelog:
  * Release 10.3.3_PUBLIC_20230829-1
  	Version 10.3.3 - see https://htmlpreview.github.io/?https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_10.3.3_build/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.html


author: Lawrence R. Rogers <lrr@cert.org> 10.4_PUBLIC_20230928-1
changelog:
  * Release 10.4_PUBLIC_20230928-1
  	Version 10.4
  		See https://htmlpreview.github.io/?https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_10.4_build/Ghidra/Configurations/Public_Release/src/global/docs/WhatsNew.html
  		and https://htmlpreview.github.io/?https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_10.4_build/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.html


author: Lawrence R. Rogers <lrr@cert.org> 0.8.12-1
changelog:
  * Release 0.8.12-1
  	guymager-beta (0.8.12-1) unstable; urgency=low
  	 * Avoiding error "flexible array member ... ~not at end of ..." in newer gcc versions.
           * Removed bug where acquisition state never changed from "Launch" to "Acquire" for special devices


author: Lawrence R. Rogers <lrr@cert.org> 0.8.13-1
changelog:
  * Release 0.8.13-1
  	guymager-beta (0.8.13-1) unstable; urgency=low
  	 * Querying CID data for SD memory cards (DeviceInfoCommands in guymager.cfg)
  	 * String of OS version in corresponding EWF field now corresponds to the
  	   output of "uname -r" in order to circumvent Encase bugs.


author: Lawrence R. Rogers <lrr@@cert.org> - 2021.04.26-1
changelog:
  - Release 2021.04.26-1
  	Features
  		Parse "Site Characteristics Database" LevelDB @@obsidianforensics (#73)
  		Add plugin to run Unfurl across Local Storage values @@obsidianforensics (#77)
  		Add support for Chrome 88 - 90 (#72, #79)
  	Minor Changes & Fixes
  		Update Chrome Extensions parser to work on updated artifact types. @@obsidianforensics (#82)
  		Added additional download interrupt_reason codes. Minor style fixes. @@obsidianforensics (#81)
  		Add more exception handling around LevelDB records in case of corruption @@obsidianforensics (#78)
  		Add check to ensure duration values in Media History are plausible @@obsidianforensics (#75)
  		Fix bug in per_host_zoom_levels parsing @@obsidianforensics (#74)
  		If autofill values are encrypted (as Edge's are), replace the encrypted bytes with a placeholder @@obsidianforensics (#70)
  		Add new visit_source values to Update chrome.py @@chadtilbury (#68)


author: Lawrence R. Rogers <lrr@@cert.org> - 2021.12.16-1
changelog:
  - Release 2021.12.16-1
  	 Features
  		Support for Chrome 91-96 by @obsidianforensics in #107, #117
  		Add parsing of TransportSecurity file (HSTS settings).
  		Add parsing of Session Storage #102
  		Adds new "Site Setting" record type, which includes settings and preferences that are site-specific, including zoom, mute, hsts, engagement, and potentially more. #100
  		More parsing of Preference items: network_prediction_options, password_manager, sessions.event_log, and sync settings. #101
  	Minor Changes & Fixes
  		Fix for case with missing Brave version by @cteodor in #99
  		Update embedded ccl_chromium_indexeddb by @obsidianforensics in #102
  		Timestamp sorting bug caused by incorrectly interpreting microsecond timestamps by @obsidianforensics in #103
  		When searching for Profiles, don't follow symlinks (reports of loops,… by @obsidianforensics in #104
  		Add try/except around reading Session Storage records in case of Leve… by @obsidianforensics in #106
  		Two small quality of life improvements by @kumavis in #111
  		chmod +x hindsight_gui.py by @kumavis in #112
  		Report analysis session error by @kumavis in #113
  		Add support for new Network subdirectory and files moved within it by @obsidianforensics in #116
  	Packaging changes
  		This version now builds the virtual environment at package building time, not at package installation time.


author: Lawrence R. Rogers <lrr@@cert.org> - 2023.03-1
changelog:
  - Release 2023.03-1
  	🛠️ Minor Changes & Fixes
  		Add Session Storage records to SQLite output by @obsidianforensics in #119
  		Update built list of HSTS host hashes to include domains from cookies by @obsidianforensics in #121
  		Fix some packaging issues (line endings, including lib files, other small fixes) by @obsidianforensics in #122
  		Fix bug where when a version rollback occurs more than once, it doesn… by @obsidianforensics in #138
  		Fixes issue 125, where failing to decode an extension manifest caused… by @obsidianforensics in #139
  	Other Changes
  		Account for relocated files in newer Chrome versions (97-100) by @obsidianforensics in #124
  		Update README.md by @obsidianforensics in #132
  		Update version detection to include Chrome 101-111 by @obsidianforensics in #140
  		Update Hindsight version prior to release and remove Unfurl plugin (u… by @obsidianforensics in #142


author: Lawrence R. Rogers <lrr@cert.org> 2.4.1-1
changelog:
  * Release 2.4.1-1
  	Updated CERT IPFIX elements to include those added in libfixbuf 3.0.
  	This update does not include the element name changes that were part of that release.


author: Lawrence R. Rogers <lrr@cert.org> 2.0.5-1
changelog:
  * Release 2.0.5-1
  	libguytools2 (2.0.5-1) unstable; urgency=low
  	  * Moved to Qt5
  	  * Adapted to Debian 8 (Jessie)
  	 -- Guy Voncken <develop@faert.net>  Tue, 18 Jul 2017 12:00:00 +0200


author: Lawrence R. Rogers <lrr@cert.org> 2.1.0-1
changelog:
  * Release 2.1.0-1
  	libguytools2 (2.1.0-1) unstable; urgency=low
  	 * Cleaned up for C++14, some minor prototype changes to ensure same bit widths on different architectures
  	 * Some debugging (handling user errors in configuration files)
  	 * Understands # at beginning of line (first non-blank char) for remarks (REM still remains valid)
  	 -- Guy Voncken <develop@faert.net>  Fri, 31 Aug 2018 16:00:00 +0200


author: Lawrence R. Rogers <lrr@cert.org> 1.14-3
changelog:
  New in 1.15:
  	* The UTF-8 converter now rejects surrogates and out-of-range code points.
  	* Added ISO-2022-JP-MS converter.
  	* Updated the CP1255 converter to map one more character.
  	* The functions now support strings longer than 2 GB.


author: Carl Byington <carl@five-ten-sg.com> 0.6.76-1
changelog:
  - Stuart C. Naifeh - fix rfc2231 encoding when saving messages to
    both .eml and .msg formats.
  - fix template issue to build with gcc 11


author: Simone Caronni <negativo17@gmail.com> - 1.18-2.20170915git0ceb1c1
changelog:
  - Update to latest snapshot post rc3.
  - Remove RHEL 6 support.
  - Clean up SPEC file.
  - Trim changelog.


author: Lawrence R. Rogers <lrr@cert.org> 0.2.5-3
changelog:
  * Release 0.2.5-3
  	Made links so that the tools, documentation, header files, and libraries have an alias of vmfs5.

  - Remove redundant tags/sections from specfile


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-6
changelog:
  * Release 1.1.r17-6
  	Updated
  		* disk.c - added O_SYNC for output files
  		* main.c - bug fix
  		* tcp.c - support for 5.8 kernels


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-7
changelog:
  * Release 1.9.1-7
  	Changed version to match LiME web site version
  	Updated
  		* disk.c - Fixed to remove get_fs/set_fs in kernel 5.10 and beyond 
  		* tcp.c  - Fixed to remove get_fs/set_fs in kernel 5.10 and beyond


author: Lawrence R. Rogers <lrr@cert.org> 1.6-11
changelog:
  * Release 1.6-11
          Kernel modules were added for the following kernels:
                  2.6.18-406


author: Lawrence R. Rogers <lrr@cert.org> 1.6-12
changelog:
  * Release 1.6-12
          Kernel modules were added for the following kernels:
                  2.6.18-407


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-60
changelog:
  * Release 1.1.r17-60
  	Kernel modules were added for the following kernels:
  		2.6.32-754.24.3
  		2.6.32-754.24.2


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-89
changelog:
  * Release 1.9.1-89
  	Kernel modules were added for the following kernels:
  		3.10.0-1160.90.1
  		3.10.0-1160.88.1
  		3.10.0-1160.83.1
  		3.10.0-1160.81.1
  		3.10.0-1160.80.1


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-41
changelog:
  * Release 1.9.1-41
  	Kernel modules were added for the following kernels:
  		4.18.0-508
  		4.18.0-509
  		4.18.0-511


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-44
changelog:
  * Release 1.9.1-44
  	Kernel modules were added for the following kernels:
  		4.18.0-514
  		4.18.0-516
  		4.18.0-517


author: 2014 Lawrence R. Rogers <lrr@cert.org> 1.1.r17-1
changelog:
  * Release 1.1.r17-1
  	Kernel modules are available for the following kernels:
  		3.3.4-5    3.3.7-1    3.4.0-1    3.4.2-4    3.4.3-1    3.4.4-3
  		3.4.4-5    3.4.5-2    3.4.6-2    3.5.0-2    3.5.1-1    3.5.2-1
  		3.5.2-3    3.5.3-1    3.5.4-1    3.5.4-2    3.5.5-2    3.5.6-1
  		3.6.1-1    3.6.2-4    3.6.3-1    3.6.5-1    3.6.6-1    3.6.7-4
  		3.6.8-2    3.6.9-2    3.6.10-2   3.6.11-1   3.6.11-5   3.7.3-101
  		3.7.6-102  3.7.9-101  3.7.9-104  3.8.3-103  3.8.4-102  3.8.8-100
  		3.8.11-100 3.8.12-100 3.8.13-100 3.9.8-100  3.9.10-100


author: 2014 Lawrence R. Rogers <lrr@cert.org> 1.1.r17-1
changelog:
  * Release 1.1.r17-1
  	Kernel modules are available for the following kernels:
  		3.6.10-4     3.7.4-204   3.7.5-201   3.7.6-201   3.7.7-201
  		3.7.8-202    3.7.9-201   3.7.9-205   3.8.1-201   3.8.2-206
  		3.8.3-201    3.8.3-203   3.8.4-202   3.8.5-201   3.8.6-203
  		3.8.7-201    3.8.8-202   3.8.8-203   3.8.9-200   3.8.11-200
  		3.9.2-200    3.9.4-200   3.9.5-201   3.9.6-200   3.9.9-201
  		3.9.10-200   3.9.11-200  3.10.4-100  3.10.6-100  3.10.7-100
  		3.10.9-100   3.10.10-100 3.10.11-100 3.10.12-100 3.10.13-101
  		3.10.14-100  3.11.4-101  3.11.7-100  3.11.9-100  3.11.10-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-2
changelog:
  * Release 1.1.r17-2
  	Kernel modules are available for the following kernels:
  		3.14.7-100
  		3.14.8-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-5
changelog:
  * Release 1.1.r17-5
          Kernel modules are available for the following kernels:
                  3.14.17-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-6
changelog:
  * Release 1.1.r17-6
          Kernel modules are available for the following kernels:
                  3.14.19-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-7
changelog:
  * Release 1.1.r17-7
          Kernel modules are available for the following kernels:
                  3.14.22-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-8
changelog:
  * Release 1.1.r17-8
          Kernel modules are available for the following kernels:
                  3.14.23-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-10
changelog:
  * Release 1.1.r17-10
          Kernel modules are available for the following kernels:
                  3.14.27-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-11
changelog:
  * Release 1.1.r17-11
          Kernel modules are available for the following kernels:
                  3.14.27-100 i686


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-27
changelog:
  * Release 1.1.r17-27
  	Initial release. Kernel modules were added for the following kernels:
  		4.7.4-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-28
changelog:
  * Release 1.1.r17-28
  	Initial release. Kernel modules were added for the following kernels:
  		4.7.5-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-29
changelog:
  * Release 1.1.r17-29
  	Initial release. Kernel modules were added for the following kernels:
  		4.7.6-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-30
changelog:
  * Release 1.1.r17-30
  	Initial release. Kernel modules were added for the following kernels:
  		4.7.7-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-31
changelog:
  * Release 1.1.r17-31
  	Initial release. Kernel modules were added for the following kernels:
  		4.7.8-100
  		4.7.9-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-32
changelog:
  * Release 1.1.r17-32
  	Initial release. Kernel modules were added for the following kernels:
  		4.7.10-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-33
changelog:
  * Release 1.1.r17-33
  	Initial release. Kernel modules were added for the following kernels:
  		4.8.10-100
  		4.8.8-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-34
changelog:
  * Release 1.1.r17-34
  	Initial release. Kernel modules were added for the following kernels:
  		4.8.11-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-35
changelog:
  * Release 1.1.r17-35
  	Initial release. Kernel modules were added for the following kernels:
  		4.8.12-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-36
changelog:
  * Release 1.1.r17-36
  	Initial release. Kernel modules were added for the following kernels:
  		4.8.13-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-38
changelog:
  * Release 1.1.r17-38
  	Kernel modules were added for the following kernels:
                  4.10.10-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-39
changelog:
  * Release 1.1.r17-39
  	Kernel modules were added for the following kernels:
                  4.10.14-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-40
changelog:
  * Release 1.1.r17-40
  	Kernel modules were added for the following kernels:
                  4.10.15-100
                  4.10.16-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-41
changelog:
  * Release 1.1.r17-41
  	Kernel modules were added for the following kernels:
                  4.10.17-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-42
changelog:
  * Release 1.1.r17-42
  	Kernel modules were added for the following kernels:
                  4.11.5-100
                  4.11.4-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-43
changelog:
  * Release 1.1.r17-43
  	Kernel modules were added for the following kernels:
                  4.11.6-101


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-44
changelog:
  * Release 1.1.r17-44
  	Kernel modules were added for the following kernels:
                  4.11.8-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-45
changelog:
  * Release 1.1.r17-45
  	Kernel modules were added for the following kernels:
                  4.11.9-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-46
changelog:
  * Release 1.1.r17-46
  	Kernel modules were added for the following kernels:
                  4.11.10-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-47
changelog:
  * Release 1.1.r17-47
  	Kernel modules were added for the following kernels:
                  4.11.12-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-40
changelog:
  * Release 1.1.r17-40
  	Kernel modules were added for the following kernels:
  		4.10.15-100
  		4.10.16-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-42
changelog:
  * Release 1.1.r17-42
  	Kernel modules were added for the following kernels:
  		4.11.5-100
  		4.11.4-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-44
changelog:
  * Release 1.1.r17-44
  	Kernel modules were added for the following kernels:
  		4.13.8-100
  		4.13.10-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-31
changelog:
  * Release 1.1.r17-31
  	Kernel modules were added for the following kernels:
  		4.15.10-200
  		4.15.9-200


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-34
changelog:
  * Release 1.1.r17-34
  	Kernel modules were added for the following kernels:
  		4.15.16-200
  		4.15.15-200


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-37
changelog:
  * Release 1.1.r17-37
  	Kernel modules were added for the following kernels:
  		4.18.10-100
  		4.18.9-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-37
changelog:
  * Release 1.1.r17-37
  	Kernel modules were added for the following kernels:
  		4.18.9-100
  		4.18.10-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-35
changelog:
  * Release 1.1.r17-35
  	Kernel modules were added for the following kernels:
  		4.20.17-100
  		4.20.16-100
  		4.20.15-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-40
changelog:
  * Release 1.1.r17-40
  	Kernel modules were added for the following kernels:
  		5.0.13-100
  		5.0.11-100


author: Lawrence R. Rogers <lrr@cert.org> 1.1.r17-29
changelog:
  * Release 1.1.r17-29
  	Kernel modules were added for the following kernels:
  		5.1.20-200
  		5.1.18-200


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-37
changelog:
  * Release 1.9.1-37
  	Kernel modules were added for the following kernels:
  		5.10.21-100
  		5.10.20-100


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-40
changelog:
  * Release 1.9.1-40
  	Kernel modules were added for the following kernels:
  		5.11.11-100
  		5.11.10-100


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-41
changelog:
  * Release 1.9.1-41
  	Kernel modules were added for the following kernels:
  		5.11.13-100
  		5.11.12-100


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-42
changelog:
  * Release 1.9.1-42
  	Kernel modules were added for the following kernels:
  		5.11.15-100
  		5.11.14-100


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-45
changelog:
  * Release 1.9.1-45
  	Kernel modules were added for the following kernels:
  		5.11.19-100
  		5.11.18-100


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-46
changelog:
  * Release 1.9.1-46
  	Kernel modules were added for the following kernels:
  		5.11.22-100
  		5.11.21-100


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-39
changelog:
  * Release 1.9.1-39
  	Kernel modules were added for the following kernels:
  		5.13.15-100
  		5.13.14-100


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-40
changelog:
  * Release 1.9.1-40
  	Kernel modules were added for the following kernels:
  		5.13.19-100
  		5.13.16-100


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-43
changelog:
  * Release 1.9.1-43
  	Kernel modules were added for the following kernels:
  		5.14.12-100
  		5.14.11-100


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-45
changelog:
  * Release 1.9.1-45
  	Kernel modules were added for the following kernels:
  		5.14.16-101
  		5.14.15-100


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-46
changelog:
  * Release 1.9.1-46
  	Kernel modules were added for the following kernels:
  		5.14.18-100
  		5.14.17-101


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-34
changelog:
  * Release 1.9.1-34
  	Kernel modules were added for the following kernels:
  		5.18.16-100
  		5.18.15-100


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-41
changelog:
  * Release 1.9.1-41
  	Kernel modules were added for the following kernels:
  		5.19.11-100
  		5.19.10-100


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-42
changelog:
  * Release 1.9.1-42
  	Kernel modules were added for the following kernels:
  		6.0.12-100
  		6.0.11-100
  		6.0.10-100
  		6.0.9-100
  		6.0.8-100
  		6.0.7-100
  		6.0.5-100
  		5.19.16-100
  		5.19.15-101
  		5.19.14-100
  		5.19.13-100
  		5.19.12-100


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-10
changelog:
  * Release 1.9.1-10
  	Kernel modules were added for the following kernels:
  		5.18.16-200
  		5.18.15-200


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-17
changelog:
  * Release 1.9.1-17
  	Kernel modules were added for the following kernels:
  		5.19.11-200
  		5.19.10-200


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-18
changelog:
  * Release 1.9.1-18
  	Kernel modules were added for the following kernels:
  		6.2.15-100
  		6.2.14-100
  		6.2.13-100
  		6.2.12-100
  		6.2.11-100
  		6.2.10-100
  		6.2.9-100
  		6.2.8-100
  		6.2.7-100
  		6.1.18-100
  		6.1.15-100
  		6.1.14-100
  		6.1.13-100
  		6.1.12-100
  		6.1.11-100
  		6.1.10-100
  		6.1.9-100
  		6.1.8-100
  		6.1.7-100
  		6.1.6-100
  		6.1.5-100
  		6.0.18-200
  		6.0.17-200
  		6.0.16-200
  		6.0.15-200
  		6.0.14-200
  		6.0.12-200
  		6.0.11-200
  		6.0.10-200
  		6.0.9-200
  		6.0.8-200
  		6.0.7-200
  		6.0.5-200
  		5.19.16-200
  		5.19.15-201
  		5.19.14-200
  		5.19.13-200
  		5.19.12-200


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-1
changelog:
  * Release 1.9.1-1
  	Initial release. Kernel modules were added for the following kernels:
  		6.5.11
                  6.5.10
                  6.5.6


author: Jesse Kornblum <research@jessekornblum.com>
changelog:
  * Fixed basic MZ check to work on little endian systems

  	* Removed fcntl.h from configuration

  	* Fixed typo in man page


author: Jesse Kornblum <research@jessekornblum.com>
changelog:
  * Increased buffer size to 8KB to prevent underreads

  	* Added allowed executable extensions:
  	  cpl, hxs, hxi, olb, rll, and tlb.


author: Jesse Kornblum <research@jessekornblum.com>
changelog:
  * Started conversion to allow Unicode filenames, not
  	  finished yet
  	
  	* Moved previous ChangeLog file to NEWS
  	
  	* Fixed potentially fatal error in main.c that called,
  	  ironically enough, fatal_error().

  	* Added counting of number of files processed for displaying
  	  current filename being processed


author: Jesse Kornblum <research@jessekornblum.com>
changelog:
  * Completed conversion to allow Unicode filenames.
  	  Copied a few more functions from the md5deep project.

  	* Checked code into Subversion repository

  	* Version bump to 0.9 in preparation for release

  	* Cast VERBOSE_DISPLAY_NUM to uint64_t in usage message to avoid
  	  crash on OS X.

  	* Added $Id: missidentify.spec,v 1.1 2011/03/04 17:43:17 repoman Exp repoman $ tags to source code


author: Jesse Kornblum <research@jessekornblum.com>
changelog:
  * Fixed illegal filename error handling to use Unicode
  	  error display function.

  	* Updated packaging and README file
  	
  	* Version bump to 1.0


author: Neal Gompa <ngompa@datto.com> - 2:2021.8.22-1
changelog:
  - Rebase to version 2021.8.22 to fix various CVEs (RHBZ#1999869)
  - Clean up old cruft for RHEL < 7
  - Split libraries out to libs subpackage


author: Andreas Schuster <impressum@forensikblog.de> 1.1.0-1
changelog:
  * Release 1.1.0
      * Event.pm: Bumped version to 1.1.0
      * Node0x01.pm, Node0x06: Fixed check for flags
      * Node0x05.pm: Added support for flag 0x40
      * Node0x07.pm: Added parser for XML CDATA section
      * Node0x09.pm: Added parser for XML entity reference
      * Node0x0a.pm, Node0x0b.pm: Added parser for XML processing instruction
      * BXmlNode.pm: Now prints context in case of unknown opcode
      * Type0x09.pm, Type0x0a.pm: Fixed sign error
      * Type0x0b.pm, Type0x0c.pm: Output now in scientific format
      * Type0x83.pm: Added parser for array of signed byte
      * Type0x84.pm: Added parser for array of unsigned byte
      * Type0x85.pm: Added parser for array of signed int16
      * Type0x86.pm: Added parser for array of unsigned int16
      * Type0x87.pm: Added parser for array of signed int32
      * Type0x88.pm: Added parser for array of unsigned int32
      * Type0x89.pm: Added parser for array of signed int64
      * Type0x8a.pm: Added parser for array of unsigned int64
      * Type0x8b.pm: Added parser for array of single prec. float
      * Type0x8c.pm: Added parser for array of double prec. float
      * Type0x8f.pm: Added parser for array of GUID
      * Type0x91.pm: Added parser for array of FILETIME
      * Type0x92.pm: Added parser for array of SYSTEMTIME
      * VariantType.pm: Added the afore mentioned array data types


author: Andreas Schuster <impressum@forensikblog.de> 1.1.1-1
changelog:
  * Release 1.1.1
      * evtxdump.pl: make STDOUT hot/unbuffered
      * Fixed a memory leak caused by a circular object reference. Thanks
        to Heinz Mueller for reporting the bug.
      * evtxdump.pl, evtxinfo.pl, evtxtemplates.pl: require IO::File version 1.14 or later.


author: Lawrence R. Rogers <lrr@cert.org> 1.0-3
changelog:
  * Release 1.0-3
  	Release 3 includes patches from Harlan Carvey for RegRipper 3.0 put into a different location as per his email.


author: Lawrence R. Rogers <lrr@cert.org> 20211024-2
changelog:
  * Release 20211024-2
  	Version from 20211024
  	Release 2 build Plaso in a virtual environment for CentOS/RHEL. The Fedora version is unchanged.


author: PLD Team <feedback@pld-linux.org>
changelog:
  All persons listed below can be reached at <cvs_login>@pld-linux.org

  Revision 1.9 
  Revision 1.9  2005/08/04 13:38:37  adamg
  - fixed remote execution of arbitrary code vulnerability (Secunia Advisory
    SA16183)
  - unbroke %changelog
  - release 2

  Revision 1.8  2005/08/02 18:43:45  djurban
  - update pstotext to ghostgum's (libgs API author) version:

   * Changelog since 1.8g
   Version 1.9 is a modification of 1.8h to recognise excessive space in
    "ashow" as being a word separator, as found output from groff 1.08.
    Also fixed widthshow, awidthshow and added xshow, yshow and xyshow.
    Uses ANSI prototypes.  These are now required, not optional.
    Fixes a number of compiler warnings.
    Note that neither of the original authors still work at DEC/Compaq/HP.
   2004-01-09 by Russell Lang at Ghostgum Software Pty Ltd.

   Version 1.8h is a modification of the original 1.8 to allow
    operation with Aladdin Ghostscript 6.0, to add -output to
    Windows and OS/2 executables, and to insert line breaks
    and form feeds is pstotext output.  Modifications made
   2000-07-15 by Russell Lang at Ghostgum Software Pty Ltd.

    main.c changed to use mkstemp not tempnam for Unix,
   2000-06-02 by Russell Lang at Ghostgum Software Pty Ltd.

  Revision 1.7  2005/07/31 16:17:31  glen
  - todo security

  Revision 1.6  2004/04/10 23:10:21  qboosh
  - updated URLs, replaced "302 Found" html file by proper sources

  Revision 1.5  2004/04/10 23:01:04  qboosh
  - cosmetics, release 2 for Ac

  Revision 1.4  2003/05/28 13:01:25  malekith
  - massive attack: source-md5

  Revision 1.3  2003/05/25 06:25:54  misi3k
  - massive attack s/pld.org.pl/pld-linux.org/

  Revision 1.2  2002/11/29 22:46:07  ankry
  - massive attack: new %doc

  Revision 1.1  2002/03/06 00:08:27  qboosh
  - new: spec based on old RH-contrib package, but uptated to 1.8g
    (unfortunately, there is no version information in Source URL)


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.5.1-14
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Peter Robinson <pbrobinson@fedoraproject.org> 2.9.45-2
changelog:
  - Add python2 build deps to conditional
  - Re-enable python2 builds on rawhide as it's still a build requirement


author: Lawrence R. Rogers <lrr@cert.org> 0.9.0-1
changelog:
  * Release 0.9.0-1
  	Added compatibility for fixbuf-3.0; pyfixbuf supports fixbuf-2.2 and later.
  	The pyfixbuf module no longer imports the YAF_LIST variables from pyfixbuf.yaflists. Users must explicitly import those variables.
  	Updated the documentation, included programs, and cert_ipfix.xml file to use the same CERT Information Element names as YAF 3.0.0.
  	  Note that the element names defined by the pyfixbuf.yaflists module have not changed.
  	Fixed several bugs.
  	Enhanced documentation and self-tests.


author: Dan Čermák <dan.cermak@cgc-instruments.com> - 0.7.1-5
changelog:
  - BuildRequire python3-setuptools besides python3-devel
    (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Stef Walter <stef@memberwebs.com> 0.8.5
changelog:
  - Ported to Linux/FreeBSD
   - Support for very fragmented MFTs
   - Fixed memory leaks
   - Fixed many bugs


author: Stef Walter <stef@memberwebs.com> 0.8.6
changelog:
  - Don't exit on error reading source drive [Marius Hillenbrand]
   - Fixed core dump when attribute list, but no MFT loaded [Marius Hillenbrand]


author: Stef Walter <stef@memberwebs.com> 0.8.7
changelog:
  - Fix crasher on corrupted drives. A problem with update 
     sequence offset being filled with garbage [Albert Kwok]


author: Lawrence R. Rogers <lrr@cert.org> 3.19.2-1/2
changelog:
  * Release 3.19.2-1/2
  	PySiLK
  		Fix compatibility with Python 3.9 and later.
  	Building
  		Add support for libfixbuf-3.0.0 (v1.7.0 and later are supported).
  		When building with static packing-logic, include the appropriate configure flag in the generated silk.spec file.


author: Lawrence R. Rogers <lrr@cert.org> 3.22.0-1/2
changelog:
  * Release 3.22.0-1/2
  	New version of silk (https://tools.netsa.cert.org/silk/download.html#)
  	Changelog
  		rwaggbagcat
  			Added the --fields switch to select which key and/or counter fields are printed and their order.
  			Added the --missing-field=FIELD=STRING switch to print STRING when FIELD is listed in --fields but is not in the input file.
  			Added the --help-fields switch to list the possible fields and a brief description of each.
  		rwaggbagtool
  			Added the --scalar-multiply switch. When argument is COUNTER=VALUE, multiplies COUNTER's value by VALUE; when argument is only VALUE, multiplies all counters' values by VALUE.
  			Added the --divide switch to divide the counters in the first Aggregate Bag file by those in the remaining files.
  			Added the --zero-divisor-result switch to specify the result when the divisor's counter is zero or when the dividend has a key-value that is not in the divisor.
  			Added the --help-fields switch to list the possible fields and a brief description of each.
  		rwaggbag, rwaggbagbuild
  			Added the --help-fields switch to list the possible fields and a brief description of each.
  		rwbagbuild
  			Modified rwbagbuild to set the counter to the maximum value on overflow instead of raising an error.
  		rwflowappend, rwsender, rwpollexec
  			Made internal changes to the directory poller.
  	Building
  		Simplified the configure tests that check for python.
  		Changed how the packing-logic is set in silk.spec to address an error when building an RPM with static-packing logic on RHEL8.


author: Lawrence R. Rogers <lrr@cert.org> - 3.15.0-1
changelog:
  * Release 3.15.0-1
  	libskipset changes
  		Add a second argument to skOptionsIPFormatRegister().
  		Remove functions that operate on an IPset Header Entry.
  		Fix a potential bug in skIPSetWrite() by ensuring that the IPset file's header is set to use native byte order.
  	rwsetcat
  		Add the --output-path switch to specify the output file.
  		Do not use the the pager when the output contains only the count of the number of IPs in a singe IPset.


author: Lawrence R. Rogers <lrr@cert.org> - 3.16.0-1
changelog:
  * Release 3.16.0-1
  	libskipset changes
  		Internal changes
  	rwsetbuild, rwsetcat, rwsetmember, rwsettool
  		Enhance the manual pages.


author: Lawrence R. Rogers <lrr@cert.org> - 3.17.0-1
changelog:
  * Release 3.17.0-1
  	rwsetcat
  		POTENTIAL INCOMPATIBILITY. Default to using the IPv4 format for IPv6-addresses in the ::ffff:0:0/96 netblock.
  		Add new values to the --ip-format switch and change how some values (zero-padded) work.
  	libskipset changes
  		Add new values to skipaddr_flags_t.
  		Add function skipaddrStringMaxlen() to compute column width.
  		Mark the num2dot0() and num2dot0_r() functions as deprecated.
  		Do not export the structures used by SiLK header entries.


author: Lawrence R. Rogers <lrr@cert.org> - 3.18.0-1
changelog:
  * Release 3.18.0-1
  	rwsetcat
  		When --ip-format includes zero-padded and CIDR prefixes are being printed, also apply zero-padding to the prefix.
  		Fix a bug when using --ip-format=decimal,zero-padded that caused an extra leading 0 to appear for IPv6 addresses.
  	libskipset changes
  		Add function skipaddrCidrString() to get a string representation of an IP address and its CIDR designation.
  		Add function skipaddrCidrStringMaxlen() to compute column width.
  		Add macro SKIPADDR_CIDR_STRLEN for defining minimum buffer size.


author: Lawrence R. Rogers <lrr@cert.org) 4.11.1-1.1
changelog:
  - Release 4.11.1-1.1
  	C/C++:
  	 - Several fixes from Joachim Metz
  	 - NTFS Decompression bug fix from Kim Stone and Joel Uckelman
  	Java:
  	 - Fixed connection leak when making OS Accounts in bridge
  	 - OsAccount updates for instance types and special Windows SIDs
  	 - Fixed issue with duplicate value in Japanese timeline translation


author: Lawrence R. Rogers <lrr@cert.org) 4.11.1-2.1
changelog:
  - Release 4.11.1-2.1
  	Built with Java support. Release number is greater than the release for Fedora 36.


author: Lawrence R. Rogers <lrr@cert.org) 4.12.0-100
changelog:
  - Release 4.12.0-100
  	- There was a 1-year gap since 4.11.1 and the git log has 441 commits in that timeframe. 
  	- Many for small fixes.  
  	- This set of release notes is much more of an overview than other releases

  	What's New:
  	- LVM Support (non-Windows) from Joachim Metz
  	- Logical File System support (a folder structure is parsed by TSK libraries) from Ann Priestman (Basis)

  	What's Changed:
  	- Lots of bug fixes from the Basis team and Joachim Metz
  	- Additional fixes from Eran-YT, msuhanov, Joel Uckelman, Aleks L, dschoemantruter
  	- General themes of C/C++ bounds checks and Java improvements to OS Accounts, Ingest jobs, CaseDbAccessManager, and much more.

  	Built with Java support. Release number is greater than the release numbers for Fedora.


author: Lawrence R. Rogers <lrr@cert.org) 4.12.1-100
changelog:
  - Release 4.12.1-100
  	C/C++:
  	- Bug fixes from Luis Nassif and Joachim Metz
  	- Added check to stop for very large folders to prevent memory exhausion
  	Java:
  	- Added File Repository concept for files to be stored in another location
  	- Schema updated to 9.4
  	- Fixed OS Account merge bug and now fire events when accounts are merged


author: Lawrence R. Rogers <lrr@cert.org> 0.3.0-1
changelog:
  * Release 0.3.0-1
  	ZeroMQ 3.x compatibility (no longer compatible with ZeroMQ 2.x)
  	protobuf-c 1.0 compatibility (no longer compatible with protobuf-c 0.x)
  	IPv6 address field support
  	Bug fixes


author: Lawrence R. Rogers <lrr@cert.org> 3.1.66.0-1
changelog:
  - Release 3.1.66.0-1
  	See https://github.com/snort3/snort3/releases/tag/3.1.66.0 for the list of changes


author: Lawrence R. Rogers <lrr@cert.org> 3.1.67.0-1
changelog:
  - Release 3.1.67.0-1
  	See https://github.com/snort3/snort3/releases/tag/3.1.67.0 for the list of changes


author: Lawrence R. Rogers <lrr@cert.org> 3.1.69.0-1
changelog:
  - Release 3.1.69.0-1
  	See https://github.com/snort3/snort3/releases/tag/3.1.69.0 for the list of changes


author: Lawrence R. Rogers <lrr@cert.org> 3.1.70.0-1
changelog:
  - Release 3.1.70.0-1
  	See https://github.com/snort3/snort3/releases/tag/3.1.70.0 for the list of changes


author: Lawrence R. Rogers <lrr@cert.org> 3.1.71.0-1
changelog:
  - Release 3.1.71.0-1
  	See https://github.com/snort3/snort3/releases/tag/3.1.71.0 for the list of changes


author: Lawrence R. Rogers <lrr@cert.org> 3.1.72.0-1
changelog:
  - Release 3.1.72.0-1
  	See https://github.com/snort3/snort3/releases/tag/3.1.72.0 for the list of changes


author: Lawrence R. Rogers <lrr@cert.org> 3.1.73.0-1
changelog:
  - Release 3.1.73.0-1
  	See https://github.com/snort3/snort3/releases/tag/3.1.73.0 for the list of changes


author: Lawrence R. Rogers <lrr@cert.org> 3.1.74.0-1
changelog:
  - Release 3.1.74.0-1
  	See https://github.com/snort3/snort3/releases/tag/3.1.74.0 for the list of changes


author: Lawrence R. Rogers <lrr@cert.org> 3.1.75.0-1
changelog:
  - Release 3.1.75.0-1
  	See https://github.com/snort3/snort3/releases/tag/3.1.75.0 for the list of changes


author: Lawrence R. Rogers <lrr@cert.org> 3.1.76.0-1
changelog:
  - Release 3.1.76.0-1
  	See https://github.com/snort3/snort3/releases/tag/3.1.76.0 for the list of changes


author: Lawrence R. Rogers <lrr@cert.org> 1.9.0-1
changelog:
  * Release 1.9.0-1
  	Added support for labeling records based on data from a SiLK IPSet or a SiLK Prefix Map.
  	Added support for labeling records with a sensor and flowtype similar to SiLK's rwflowpack tool.
  	Added support for OpenSSL 3.0.1.
  	Changed JSON output of SSL records for unknown sslObjectType values: For unknown value X, key sslCertObjectIDX is replaced by sslCertIssuerObjectIdX or sslCertSubObjectIdX.
  		When X is 1, EmailAddress is used (e.g., sslCertIssuerEmailAddress) and when X is 25 DomainComponent is used.
  	Changed the super_mediator.spec file to configure the build using --with FEATURE options to rpmbuild.
  	Fixed a small bug in JSON output of rewritten SSL certificates.
  	Fixed bugs in TEXT export of very old YAF SSL data.
  	Changed the template scopes for the YAF stats template and Tombstone template to match those used by YAF.


author: Lawrence R. Rogers <lrr@cert.org> 1.9.1-1
changelog:
  * Release 1.9.1-1
  	Made the configure test for OpenSSL more robust to support newer releases.
  	Fixed a compilation error on some systems due to a misplaced #include.


author: Lawrence R. Rogers <lrr@@cert.org> - 0.2-2
changelog:
  - Release 0.2-2
  	This version now builds the virtual environment at package building time, not at package installation time.


author: Lawrence R. Rogers <lrr@cert.org> 1.2.2-3
changelog:
  * Release 1.2.2-3
  	Due to changes in PHP, the previous version no longer works.
  	This version uses a container based on Ubuntu.
  	The container can be found at certlifter/xplico-1.2.2:3.
  	Note that the Dockerfile is provided as part of this package.


author: Lawrence R. Rogers <lrr@cert.org> 2.12.2-1
changelog:
  * Release 2.12.2-1
  	Added new protocols to the yafAppLabelRules.conf file and updated several regular expressions.
  	Changed the regexes used by the SMTP DPI plugin and improved capture when multiple messages appear in a single SMTP session.
  	Fixed a crash in the SMTP DPI plugin when reading uniflow records.
  	Updated the POP3 DPI plugin.
  	Updated yafzcbalance to be compatibile with PF_Ring-8.


author: Lawrence R. Rogers <lrr@cert.org> 2.13.0-1
changelog:
  * Release 2.13.0-1
  	Added ability for yaf to limit payload export to a named set of applabels.
  	Increased the maximum payload that YAF may capture for performing DPI.
  	Added support for recent releases of nDPI.
  	Added yaf.init to the list of installed files.
  	Stopped export of full flow template that is never used for data records.
  	Fixed minor bug in --version where Compact IPv4 support always reported NO.
  	Fixed bugs in regular expressions for nntpResponseRegex and smtpURLRegex.


author: Lawrence R. Rogers <lrr@cert.org> 2.14.0-1
changelog:
  * Release 2.14.0-1
  	Changed DNS deep packet inspection to produce names and text records with escape codes for special characters (non-ASCII, non-printable,
  		special whitespace, and label-internal dots in names).
  	Made DNS deep packet inspection more strict about parsing malformed DNS Resource Records across RR boundaries within the packet.
  	Changed destination of --version output to the standard output.


