diff --git a/LICENSE.md b/LICENSE.md index 74f3739..a92c6e1 100644 --- a/LICENSE.md +++ b/LICENSE.md @@ -1,7 +1,7 @@ This license applies to the python-oletools package, apart from the thirdparty folder which contains third-party files published with their own license. -The python-oletools package is copyright (c) 2012-2021 Philippe Lagadec (http://www.decalage.info) +The python-oletools package is copyright (c) 2012-2022 Philippe Lagadec (http://www.decalage.info) All rights reserved. diff --git a/README.md b/README.md index 91318cb..c6c2735 100644 --- a/README.md +++ b/README.md @@ -26,6 +26,21 @@ Note: python-oletools is not related to OLETools published by BeCubed Software. News ---- +- **2022-05-09 v0.60.1**: + - olevba: + - fixed a bug when calling XLMMacroDeobfuscator (PR #737) + - removed keyword "sample" causing false positives + - oleid: fixed OleID init issue (issue #695, PR #696) + - oleobj: + - added simple detection of CVE-2021-40444 initial stage + - added detection for customUI onLoad + - improved handling of incorrect filenames in OLE package (PR #451) + - rtfobj: fixed code to find URLs in OLE2Link objects for Py3 (issue #692) + - ftguess: + - added PowerPoint and XPS formats (PR #716) + - fixed issue with XPS and malformed documents (issue #711) + - added XLSB format (issue #758) + - improved logging with common module log_helper (PR #449) - **2021-06-02 v0.60**: - ftguess: new tool to identify file formats and containers (issue #680) - oleid: (issue #679) @@ -184,12 +199,16 @@ Download and Install: The recommended way to download and install/update the **latest stable release** of oletools is to use [pip](https://pip.pypa.io/en/stable/installing/): -- On Linux/Mac: `sudo -H pip install -U oletools` -- On Windows: `pip install -U oletools` +- On Linux/Mac: `sudo -H pip install -U oletools[full]` +- On Windows: `pip install -U oletools[full]` This should automatically create command-line scripts to run each tool from any directory: `olevba`, `mraptor`, `rtfobj`, etc. +The keyword `[full]` means that all optional dependencies will be installed, such as XLMMacroDeobfuscator. +If you prefer a lighter version without optional dependencies, just remove `[full]` from the command line. + + To get the **latest development version** instead: - On Linux/Mac: `sudo -H pip install -U https://github.com/decalage2/oletools/archive/master.zip` diff --git a/oletools/LICENSE.txt b/oletools/LICENSE.txt index 4a964f8..f7d8c74 100644 --- a/oletools/LICENSE.txt +++ b/oletools/LICENSE.txt @@ -3,7 +3,7 @@ LICENSE for the python-oletools package: This license applies to the python-oletools package, apart from the thirdparty folder which contains third-party files published with their own license. -The python-oletools package is copyright (c) 2012-2019 Philippe Lagadec (http://www.decalage.info) +The python-oletools package is copyright (c) 2012-2022 Philippe Lagadec (http://www.decalage.info) All rights reserved. diff --git a/oletools/ftguess.py b/oletools/ftguess.py index 3391da4..810b95c 100644 --- a/oletools/ftguess.py +++ b/oletools/ftguess.py @@ -43,7 +43,7 @@ from __future__ import print_function # 2018-07-04 v0.54 PL: - first version # 2021-05-09 v0.60 PL: - -__version__ = '0.60.1.dev8' +__version__ = '0.60.1' # ------------------------------------------------------------------------------ # TODO: diff --git a/oletools/oleid.py b/oletools/oleid.py index 61ce3c2..294f073 100644 --- a/oletools/oleid.py +++ b/oletools/oleid.py @@ -17,7 +17,7 @@ http://www.decalage.info/python/oletools #=== LICENSE ================================================================= -# oleid is copyright (c) 2012-2021, Philippe Lagadec (http://www.decalage.info) +# oleid is copyright (c) 2012-2022, Philippe Lagadec (http://www.decalage.info) # All rights reserved. # # Redistribution and use in source and binary forms, with or without @@ -60,7 +60,7 @@ from __future__ import print_function # improve encryption detection for ppt # 2021-05-07 v0.56.2 MN: - fixed bug in check_excel (issue #584, PR #585) -__version__ = '0.60.1.dev2' +__version__ = '0.60.1' #------------------------------------------------------------------------------ diff --git a/oletools/oleobj.py b/oletools/oleobj.py index 376bdd0..9f67752 100644 --- a/oletools/oleobj.py +++ b/oletools/oleobj.py @@ -90,7 +90,7 @@ from oletools.common.io_encoding import ensure_stdout_handles_unicode # 2020-03-03 v0.56 PL: - fixed bug #541, "Ole10Native" is case-insensitive # 2022-01-28 v0.60 PL: - added detection of customUI tags -__version__ = '0.60.1.dev5' +__version__ = '0.60.1' # ----------------------------------------------------------------------------- # TODO: diff --git a/oletools/olevba.py b/oletools/olevba.py index 0559c30..5620f8d 100644 --- a/oletools/olevba.py +++ b/oletools/olevba.py @@ -235,7 +235,7 @@ from __future__ import print_function # for issue #619) # 2021-04-14 PL: - added detection of Workbook_BeforeClose (issue #518) -__version__ = '0.60.1.dev6' +__version__ = '0.60.1' #------------------------------------------------------------------------------ # TODO: diff --git a/oletools/rtfobj.py b/oletools/rtfobj.py index 366fb03..f0b4e65 100644 --- a/oletools/rtfobj.py +++ b/oletools/rtfobj.py @@ -15,7 +15,7 @@ http://www.decalage.info/python/oletools #=== LICENSE ================================================================= -# rtfobj is copyright (c) 2012-2021, Philippe Lagadec (http://www.decalage.info) +# rtfobj is copyright (c) 2012-2022, Philippe Lagadec (http://www.decalage.info) # All rights reserved. # # Redistribution and use in source and binary forms, with or without modification, @@ -98,7 +98,7 @@ http://www.decalage.info/python/oletools from __future__ import print_function -__version__ = '0.60.1.dev1' +__version__ = '0.60.1' # ------------------------------------------------------------------------------ # TODO: diff --git a/setup.py b/setup.py index 7febda7..0fec8ef 100644 --- a/setup.py +++ b/setup.py @@ -55,7 +55,7 @@ import os, fnmatch #--- METADATA ----------------------------------------------------------------- name = "oletools" -version = '0.60.1.dev8' +version = '0.60.1' desc = "Python tools to analyze security characteristics of MS Office and OLE files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), for Malware Analysis and Incident Response #DFIR" long_desc = open('oletools/README.rst').read() author = "Philippe Lagadec" @@ -83,6 +83,7 @@ classifiers=[ "Programming Language :: Python :: 3.6", "Programming Language :: Python :: 3.7", "Programming Language :: Python :: 3.8", + "Programming Language :: Python :: 3.9", "Topic :: Security", "Topic :: Software Development :: Libraries :: Python Modules", ]