LiFTeR: Changes for libewf
- August 30, 2019: libewf{,-devel,-tools,-python2,-python3,-tools}-20160718-20140806.4.{fc25,fc26,fc27,fc28,fc29,fc30}.{i686,x86_64}.rpm, libewf{,-devel,-tools,-python2,-tools}-20160718-20140806.4.el6.{i686,x86_64}.rpm, and
libewf{,-devel,-tools,-python2,-python36,-tools}-20160718-20140806.4.el7.x86_64.rpm -
Libewf supports Expert Witness Compression Format (EWF) formatted files.
It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format.
Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format.
This package is built from the libewf source code dated 20140806 but to make it the latest version, the version number was changed to the build date (20160718) and the release number changed to include the source code release date (20140806). This release obsoletes (which causes the removal of) the ewftools package which is provided by Fedora.
- June 14, 2019: libewf{,-devel,-tools,-python2,-python3,-tools}-20160718-20140806.3.{fc25,fc26,fc27,fc28,fc29,fc30}.{i686,x86_64}.rpm, libewf{,-devel,-tools,-python2,-tools}-20160718-20140806.3.el6.{i686,x86_64}.rpm, and
libewf{,-devel,-tools,-python2,-python36,-tools}-20160718-20140806.3.el7.x86_64.rpm -
Libewf supports Expert Witness Compression Format (EWF) formatted files.
It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format.
Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format.
This package is built from the libewf source code dated 20140806 but to make it the latest version, the version number was changed to the build date (20160718) and the release number changed to include the source code release date (20140806). Note: This release contains no new capabilities. The only differences is that the packages for CentOS/RHEL 7 are named python2-libevtx and python36-libevtx. All other package names are unchanged.
- April 12, 2019: libewf{,-devel,-tools,-python2,-python3,-tools}-20160718-20140806.2.{fc24,fc25,fc26,fc27,fc28,fc29}.{i686,x86_64}.rpm, libewf{,-devel,-tools,-python2,-tools}-20160718-20140806.2.el6.{i686,x86_64}.rpm, and libewf{,-devel,-tools,-python2,-python3,-tools}-20160718-20140806.2.el7.x86_64.rpm -
Libewf supports Expert Witness Compression Format (EWF) formatted files.
It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format.
Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format.
This package is built from the libewf source code dated 20140806 but to make it the latest version, the version number was changed to the build date (20160718) and the release number changed to include the source code release date (20140806). This release now references Python 3.6 from the EPEL repository for CentOS/RHEL 7. The other systems were rebuilt to maintain release numbering consistency.
- February 1, 2019: libewf{,-devel,-tools,-python2,-python3,-tools}-20160718-20140806.1.{fc24,fc25,fc26,fc27,fc28,fc29}.{i686,x86_64}.rpm, libewf{,-devel,-tools,-python2,-tools}-20160718-20140806.1.el6.{i686,x86_64}.rpm, and libewf{,-devel,-tools,-python2,-python3,-tools}-20160718-20140806.1.el7.x86_64.rpm -
Libewf supports Expert Witness Compression Format (EWF) formatted files.
It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format.
Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format.
This package is built from the libewf source code dated 20140806 but to make it the latest version, the version number was changed to the build date (20160718) and the release number changed to include the source code release date (20140806).
- July 22, 2016: libewf{,-devel,-tools,-python}-20160718-20140608.1.{fc20,fc21,fc22,fc23,fc24,el6}.{i686,x86_64}.rpm, libewf{,-devel,-tools,-python}-20160718-20140608.1.el7.x86_64.rpm, ewftools-20160718-20140608.1.{fc20,fc21,fc22,fc23,el6,el7}.{i686,x86_64}.rpmewftools-20160718-20140608.1.el7.x86_64.rpm -
Libewf supports Expert Witness Compression Format (EWF) formatted files.
It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format.
Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format.
This package is built from the libewf source code dated 20140608 but to make it the latest version, the version number was changed to the build date (20160718) and the release number changed to include the source code release date (20140608). To install this version, do the following:
- Disable the forensics-test repository with this command: sudo yum-config-manager --disable forensics-test
- Save the list of installed libewf tools with this command: LIBEWF=`rpm -qa|grep 'ewf.*2014060801'|sed 's/-2014.*//`
- Remove this list of installed libewf tools with this command: sudo rpm -ev $LIBEWF --nodeps
- Install the new versions of these libewf tools with this command: sudo yum -y install $LIBEWF
- Update all packages with this command: sudo yum -y update
- May 9, 2016: libewf{,-devel,-tools,-python}-2014060801-1.{fc20,fc21,fc22,fc23,el6}.{i686,x86_64}.rpm, libewf{,-devel,-tools,-python}-2014060801-1.el7.x86_64.rpm, ewftools-2014060801-1.{fc20,fc21,fc22,fc23,el6}.{i686,x86_64}.rpm, andTT>ewftools-2014060801-1.el7.x86_64.rpm - Libewf supports Expert Witness Compression Format (EWF) formatted files. It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. These packages have been installed in the forensics-test repository. To use this repository, you will need to enable it with this command:
sudo yum-config-manager --enable forensics-test
- April 8, 2016: libewf{-,devel,-python}-20160209-2.{fc20,fc21,fc22,fc23,el6}.{i686,x86_64}.rpm, libewf{,-devel,-python}-20160209-2.el7.x86_64.rpm, ewftools-20160209-2.{fc20,fc21,fc22,fc23,el6}.{i686,x86_64}.rpm, and ewftools-20160209-2.el7.x86_64.rpm - Libewf supports Expert Witness Compression Format (EWF) formatted files. This version fixes the error that results when the deflate compression method (which is the default) is selected.
These packages have been installed in the forensics-test repository. To use the, you will need to enable this repository in the /etc/yum.repos.d/cert-forensics-tools.repo file and you must be root to do this.
- February 12, 2016: libewf{,-devel,-python}-20160209-1.{fc20,fc21,fc22,fc23,el6}.{i686,x86_64}.rpm, libewf{,-devel,-python}-20160209-1.el7.x86_64.rpm, ewftools-20160209-1.{fc20,fc21,fc22,fc23,el6}.{i686,x86_64}.rpm, and ewftools-20160209-1.el7.x86_64.rpm - Libewf supports Expert Witness Compression Format (EWF) formatted files.
These packages have been installed in the forensics-test repository. To use the, you will need to enable this repository in the /etc/yum.repos.d/cert-forensics-tools.repo file and you must be root to do this.
- May 11, 2015: libewf{,-devel,-tools}-20100226-1.fc21.{i686,x86_64}.rpm and ewftools-20140608-1.fc21.{i686,x86_64}.rpm - Libewf supports Expert Witness Compression Format (EWF) formatted files. This package contains the Version 1 API for the libewf tools and is needed to build the libewf-20140608 package.
- May 11, 2015: libewf{,-devel,-python}-20140608-1.fc21.{i686,x86_64}.rpm and ewftools-20140608-1.fc21.{i686,x86_64}.rpm - Libewf supports Expert Witness Compression Format (EWF) formatted files. It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Note that beginning with Fedora 19, the tools package is named ewftools to reflect the package name found in those releases of Fedora. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format.
Note: Version 20140608 is the latest production of libewf but there is a later version (20141129), an experimental version, in the repository. We have received a report that version 20141129 has a bug and cannot handle split E01 files correctly. The report noted this error in the plaso timeline tool. The bug report is here.
If you wish to install the 20140608 version of libewf, do the following, all as root
rpm -ev $(rpm -qa | grep 'ewf.*20150105*') --nodeps
Then edit /etc/yum.repos.d/cert-forensics-tools.repo so that the beginning of the file looks like the following:
yum -y install {ewftools,libewf-python,libewf}-20140608-2
[forensics]
This will install the last stable version of libewf which fixes the split E01 bug.
name=CERT Forensics Tools Repository
baseurl=http://www.cert.org/forensics/repository/fedora/cert/$releasever/$basearch
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-cert-forensics-2016-02-22
gpgcheck=1
proxy=_none_
deltarpm=0
exclude=ewftools* libewf*
Note that when a new version of libewf becomes available, you will need to removed these chnages to /etc/yum.repos.d/cert-forensics-tools.repo. Watch this page for that announcement.
- December 12, 2014: libewf{,-devel,-tools,-python}-20141129-1.{fc17,fc18}.{i686,x86_64}.rpm, libewf{,-devel,-tools,-python}-20141129-1.{fc19,fc20}.{i686,x86_64}.rpm, and ewftools-20141129-1.{fc19,fc20}.{i686,x86_64}.rpm - Libewf supports Expert Witness Compression Format (EWF) formatted files. It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Note: Beginning with Fedora 19, the tools package is named ewftools to reflect the package name found in those releases of Fedora. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Note: This package is not provided for CentOS/RHEL 5 and 6. Here are the changes from the previously released version (20140608):
- 20141129
- code clean up
- 20141102
- bug fixes
- ewf.net added FileEntry::GetType
- 20141030
- bug fix in Python-bindings
- changes for updated dependencies
- 20141021
- changes for deployment
- 20141012
- bug fixes
- 20141007
- updated dependencies and corresponding changes
- worked on autogen.sh and synclibs.sh scripts
- 20141002
- removed README.macosx
- changes for project site move
- 20140801
- bug fix in Python-bindings
In addition, this version was built to include the Version 1 API. Because of this, the shared object library libewf.so.1 and libewf.so.1.0.4 are no longer provided in this package. If your application requires these shared object libraries, they should be rebuilt to use the shared objects that come with this package, namely libewf.so.2 and libewf.so.2.1.0.
- June 27, 2014: libewf{,-devel,-tools}-20140608-1.{fc17,fc18,el5,el6}.{i686,x86_64}.rpm, libewf-{devel,tools}-20140608-1.{fc19,fc20}.{i686,x86_64}.rpm, and ewftools-20140608-1.{fc19,fc20}.{i686,x86_64}.rpm - Libewf supports Expert Witness Compression Format (EWF) formatted files. It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Note that beginning with Fedora 19, the tools package is named ewftools to reflect the package name found in those releases of Fedora. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Here are the changes from the previous version (20140427):
- bug fix for utf16 header functions
- bug fix in ewfmount regarding logical files date and time values
- updated python.m4
- fixes to build static library with mingw and cygwin
- bug fixes in m4 files
- removed #error restriction in dependency include header files
- make pyewf_handle_open more strict to catch non-string objects without the check the code will segfault on non-string objects
- May 22, 2014: libewf{,-devel,-tools}-20140427-1.{fc17,fc18,el5,el6}.{i686,x86_64}.rpm, libewf-{devel,tools}-20140427-1.{fc19,fc20}.{i686,x86_64}.rpm, and ewftools-20140427-1.{fc19,fc20}.{i686,x86_64}.rpm - Libewf supports Expert Witness Compression Format (EWF) formatted files. It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Note that beginning with Fedora 19, the tools package is named ewftools to reflect the package name found in those releases of Fedora. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Here are the changes from the previous version (20140216):
- fixes to build static library with mingw and cygwin
- bug fixes in m4 files
- removed #error restriction in dependency include header files
- make pyewf_handle_open more strict to catch non-string objects without the check the code will segfault on non-string objects
- bug fixes in empty block compression
- bug fix in libewf_read_io_handle_read_chunk_data error tolerance code path
- April 7, 2014: libewf{,-devel,-tools}-20140216-1.{fc17,fc18,el5,el6}.{i686,x86_64}.rpm, libewf-{devel,tools}-20140216-1.{fc19,fc20}.{i686,x86_64}.rpm, and ewftools-20140216-1.{fc19,fc20}.{i686,x86_64}.rpm - Libewf supports Expert Witness Compression Format (EWF) formatted files. It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Note that beginning with Fedora 19, the tools package is named ewftools to reflect the package name found in those releases of Fedora. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Here are the changes from the previous version (20140216):
- bug fix in recent process status changes
- integrating latest update for multi threaded ewfacquire changes
- changed behavior of empty-block check
- worked on integrating multi threaded ewfacquire changes
- updated dependencies
- added libcdatetime
- removed borlandc files
- small updates
- moved low-level function support from compile time to run time
- worked on sync with experimental version
- Also added missing fuse-devel build requirement
- December 13, 2013: libewf{,-devel,-tools}-20131210-1.{fc16,fc17,fc18,el5,el6}.{i686,x86_64}.rpm/{ewftools,libewf,libewf-devel}-20131210-1.fc19.{i686,x86_64}.rpm - Libewf is a library for support of the Expert Witness Compression Format (EWF). It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Note that in Fedora 19, the tools package is named ewftools to reflect the package name found in the Fedora 19 release. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Here are the changes from the previous version (20130416):
- updated dependencies
- worked on Python bindings
- added libcthreads
- fix in DFXML output for size values
- worked on ewfmount
- June 6, 2013: libewf{,-devel,-tools}-20130416-1.{fc15,fc16,fc17,fc18,el5,el6}.{i686,x86_64}.rpm - Libewf is a library for support of the Expert Witness Compression Format (EWF). It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Here are the changes from the previous version (20130128):
- added error tolerance for Logicube image with missing checksum in data section
- bug fix in libcfile.m4 for building on MingW and Cygwin
- changes and fixes in debug output
- changes to zlib.m4 for adler32 detection
- code clean up
- fix in libsmdev for MinGW build
- fixed maximum number of segments
- fixed unknown symbols error related to libbfio
- moved README.mingw and README.static to wiki
- sync with experimental version
- updated codegear files
- updated dependencies
- updated msvscpp files
- updated types.h
- updates for libsmdev
- worked on libcdata integration
- February 8, 2013: libewf{,-devel,-tools}-20130128-1.{fc15,fc16,fc17,fc18,el5,el6}.{i686,x86_64}.rpm - Libewf is a library for support of the Expert Witness Compression Format (EWF). It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Here are the changes from the previous version (20121209):
- worked on sync with experimental version
- docstring changes in pyewf
- fix for corruption scenario
- fixes in pyewf examples
- updated msvscpp files
- updated codegear files
- updated pyewf
- worked on sync with experimental version
- replace libmfcache by new libfcache
- updated configure files
- updated dpkg files
- updated rpm spec file
- updated pyewf - fixes multiple issues
- updated dependencies
- worked on sync with experimental version
- added pyewf/setup.py with thanks to Michael Cohen
- bug fix for 31th day of the month issue
- December 14, 2012: libewf{,-devel,-tools}-20121209-1.{fc14,fc15,fc16,fc17,el5,el6}.{i386,x86_64}.rpm - Libewf is a library for support of the Expert Witness Compression Format (EWF). It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Note the following:
- This version provides the development environment for Version 2 of the API using the libewf-devel package. If the Version 1 API is required, install a version of libewf-devel from 2010, for example version 20100226.
- This version provides the runtime environment for both Version 1 and Version 2 of the API. This means that both libewf.so.1 and libewf.so.2 are provided in this package for all supported operating systems and architectures.
- This version provides the a set of tools (libewf-tools) that replace ewftools.
- August 21, 2012: libewf{,-devel,-tools}-20120813-1.{fc14,fc15,fc16,fc17,el5,el6}.{i686,x86_64}.rpm - Libewf is a library for support of the Expert Witness Compression Format (EWF). It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Note the following:
- This version provides the development environment for Version 2 of the API using the libewf-devel package. If the Version 1 API is required, install a version of libewf-devel from 2010, for example version 20100226.
- This version provides the runtime environment for both Version 1 and Version 2 of the API. This means that both libewf.so.1 and libewf.so.2 are provided in this package for all supported operating systems and architectures.
- This version provides the a set of tools (libewf-tools) that replace ewftools.
- June 4, 2012: libewf{,-devel,-tools}-20120603-1.{fc14,fc15,fc16,fc17,el5,el6}.{i686,x86_64}.rpm - Libewf is a library for support of the Expert Witness Compression Format (EWF). It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Note the following:
- This version provides the development environment for Version 2 of the API using the libewf-devel package. If the Version 1 API is required, install a version of libewf-devel from 2010, for example version 20100226.
- This version provides the runtime environment for both Version 1 and Version 2 of the API. This means that both libewf.so.1 and libewf.so.2 are provided in this package for all supported operating systems and architectures.
- This version provides the a set of tools (libewf-tools) that replace ewftools.
- May 23, 2012: libewf{,-devel,-tools}-20120504-1.{fc13,fc14,fc15,fc16,el5,el6}.{i386,x86_64}.rpm - Libewf is a library for support of the Expert Witness Compression Format (EWF). It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Note the following:
- This version provides the development environment for Version 2 of the API using the libewf-devel package. If the Version 1 API is required, install a version of libewf-devel from 2010, for example version 20100226.
- This version provides the runtime environment for both Version 1 and Version 2 of the API. This means that both libewf.so.1 and libewf.so.2 are provided in this package for all supported operating systems and architectures.
- This version provides the a set of tools (libewf-tools) that replace ewftools.
- April 23, 2012: libewf{,-devel,-tools}-20120416-1.{fc13,fc14,fc15,fc16,el5,el6}.{i386,x86_64}.rpm - Libewf is a library for support of the Expert Witness Compression Format (EWF). It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Note the following:
- This version provides the development environment for Version 2 of the API using the libewf-devel package. If the Version 1 API is required, install a version of libewf-devel from 2010, for example version 20100226.
- This version provides the runtime environment for both Version 1 and Version 2 of the API. This means that both libewf.so.1 and libewf.so.2 are provided in this package for all supported operating systems and architectures.
- This version provides the a set of tools (libewf-tools) that replace ewftools.
- February 15, 2012: libewf{,-devel,-tools}-20120122-1.{fc13,fc14,fc15,fc16,el5,el6}.{i386,x86_64}.rpm - Libewf is a library for support of the Expert Witness Compression Format (EWF). It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Note the following:
- This version provides the development environment for Version 2 of the API using the libewf-devel package. If the Version 1 API is required, install a version of libewf-devel from 2010, for example version 20100226.
- This version provides the runtime environment for both Version 1 and Version 2 of the API. This means that both libewf.so.1 and libewf.so.2 are provided in this package for all supported operating systems and architectures.
- This version provides the a set of tools (libewf-tools) that replace ewftools.
- January 27, 2012: libewf{,-devel,-tools}-20120122-1.{fc13,fc14,fc15,fc16,el5,el6}.{i386,x86_64}.rpm - Libewf is a library for support of the Expert Witness Compression Format (EWF). It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Note the following:
- This version provides the development environment for Version 2 of the API using the libewf-devel package. If the Version 1 API is required, install a version of libewf-devel from 2010, for example version 20100226.
- This version provides the runtime environment for both Version 1 and Version 2 of the API. This means that both libewf.so.1 and libewf.so.2 are provided in this package for all supported operating systems and architectures.
- This version provides the a set of tools (libewf-tools) that replace ewftools.
- January 3, 2012: libewf{,-devel,-tools}-20111231-1.{fc13,fc14,fc15,fc16,el5,el6}.{i386,x86_64}.rpm - Libewf is a library for support of the Expert Witness Compression Format (EWF). It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Note the following:
- This version provides the development environment for Version 2 of the API using the libewf-devel package. If the Version 1 API is required, install a version of libewf-devel from 2010, for example version 20100226.
- This version provides the runtime environment for both Version 1 and Version 2 of the API. This means that both libewf.so.1 and libewf.so.2 are provided in this package for all supported operating systems and architectures.
- This version provides the a set of tools (libewf-tools) that replace ewftools.
- October 13, 2011: libewf{,-devel,-tools}-20111016-1.{fc12,fc13,fc14,fc15,el5,el6}.{i386,x86_64}.rpm - Libewf is a library for support of the Expert Witness Compression Format (EWF). It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Note the following:
- This version provides the development environment for Version 2 of the API using the libewf-devel package. If the Version 1 API is required, install a version of libewf-devel from 2010, for example version 20100226.
- This version provides the runtime environment for both Version 1 and Version 2 of the API. This means that both libewf.so.1 and libewf.so.2 are provided in this package for all supported operating systems and architectures.
- This version provides the a set of tools (libewf-tools) that replace ewftools.
- October 12, 2011: libewf{,-devel,-tools}-20111011-1.{fc13,fc14,fc15,el5,el6}.{i386,x86_64}.rpm - Libewf is a library for support of the Expert Witness Compression Format (EWF). It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. Note the following:
- This version provides the development environment for Version 2 of the API using the libewf-devel package. If the Version 1 API is required, install a version of libewf-devel from 2010, for example version 20100226.
- This version provides the runtime environment for both Version 1 and Version 2 of the API. This means that both libewf.so.1 and libewf.so.2 are provided in this package for all supported operating systems and architectures.
- This version provides the a set of tools (libewf-tools) that replace ewftools.