baserev update by copy to link target

• Files Changed
• Browse Source

- Update to version 0.60.1:
 * olevba:
  * fixed a bug when calling XLMMacroDeobfuscator (PR #737)
  * removed keyword "sample" causing false positives
 * oleid: fixed OleID init issue (issue #695, PR #696)
 * oleobj:
  * added simple detection of CVE-2021-40444 initial stage
  * added detection for customUI onLoad
  * improved handling of incorrect filenames in OLE package (PR #451)
 * rtfobj: fixed code to find URLs in OLE2Link objects for Py3 (issue #692)
 * ftguess:
  * added PowerPoint and XPS formats (PR #716)
  * fixed issue with XPS and malformed documents (issue #711)
  * added XLSB format (issue #758)
 * improved logging with common module log_helper (PR #449)
 * More details about fixed issues and improvements in 0.60: https://github.com/decalage2/oletools/milestone/10?closed=1

• Files Changed
• Browse Source

- pytest-runner is not required for build

• Files Changed
• Browse Source

- Fix package builds for Leap 15.2 and 15.3, python-xml dependency was missing.

• Files Changed
• Browse Source

- update to version 0.60:
 - ftguess: new tool to identify file formats and containers (issue #680)
 - oleid: (issue #679)
  - each indicator now has a risk level
  - calls ftguess to identify file formats
  - calls olevba+mraptor to detect and analyse VBA+XLM macros
 - olevba:
  - when XLMMacroDeobfuscator is available, use it to extract and deobfuscate XLM macros
 - rtfobj:
  - use ftguess to identify file type of OLE Package (issue #682)
  - fixed bug in re_executable_extensions
 - crypto: added PowerPoint transparent password '/01Hannes Ruescher/01' (issue #627)
 - setup: XLMMacroDeobfuscator, xlrd2 and pyxlsb2 added as optional dependencies

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to version 0.56.2:
 - olevba:
  - updated plugin_biff to v0.0.22 to fix a bug (issues #647, #674)
 - olevba, mraptor:
  - added detection of Workbook_BeforeClose (issue #518)
 - rtfobj:
  - fixed bug when OLE package class name ends with null characters (issue #507, PR #648)
 - oleid:
  - fixed bug in check_excel (issue #584, PR #585)
 - clsid:
  - added several CLSIDs related to MS Office click-to-run issue CVE-2021-27058
  - added checks to ensure that all CLSIDs are uppercase (PR #678)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to version 0.56.1:
 - olevba:
  - fixed bug when parsing some malformed files (issue #629)
 - oleobj:
  - fixed bug preventing detection of links 'externalReference', 'frame', 'hyperlink' (issue #641, PR #670)
 - setup:
  - avoid installing msoffcrypto-tool when platform is PyPy+Windows (issue #473)
  - PyPI version is now a wheel package to improve installation and avoid antivirus false positives due to test files (issues #215, #398)

• Files Changed
• Browse Source

initialized devel package after accepting 866290

• Files Changed
• Browse Source

new package

• Browse Source