Bug 1974565 - python-oletools-0.60.1 is available
Summary: python-oletools-0.60.1 is available
Keywords:
Status: ASSIGNED
Alias: None
Product: Fedora
Classification: Fedora
Component: python-oletools
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Michal Ambroz
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On: 2245786 2246454 2246704 2250689
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-06-22 04:54 UTC by Upstream Release Monitoring
Modified: 2023-11-27 21:28 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Upstream Release Monitoring 2021-06-22 04:54:41 UTC
Latest upstream release: 0.60
Current version/release in rawhide: 0.56.2-2.fc35
URL: https://www.decalage.info/python/oletools

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from anitya: https://release-monitoring.org/project/15646/

Comment 1 Upstream Release Monitoring 2022-05-09 23:22:35 UTC
Latest upstream release: 0.60.1
Current version/release in rawhide: 0.56.2-4.fc36
URL: https://www.decalage.info/python/oletools

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from Anitya: https://release-monitoring.org/project/15646/

Comment 2 Michal Ambroz 2022-11-08 17:34:05 UTC
There are some regression issues olevba not detecting macros in some of the test files.

https://github.com/decalage2/oletools/issues/792

Comment 3 Michal Ambroz 2023-11-18 23:21:44 UTC
oletools 0.60.1 requires 3 new python packages in order to be able to detect and decode vba macros

Bug 2246454 - Review Request: python-pyxlsb2 - Excel 2007+ Binary Workbook (xlsb) parser
Bug 2246704 - Review Request: python-xlrd2 - Library to extract data from Microsoft Excel legacy spreadsheet files (xls)
Bug 2245786 - Review Request: python-xlmmacrodeobfuscator - XLM Emulation engine to deobfuscate malicious XLM macros, also known as Excel 4 

If anyone interested in the 0.60.1, please review the required new packages.

Packages requiring oletools:
macromilter, python-pcodedmp - RobertScheck
ocsinventory-agent - Pat Riehecky

Comment 4 Pat Riehecky 2023-11-27 20:29:19 UTC
I don't believe ocsinventory-agent is using oletools.  Where did you find the interaction point?

Comment 5 Michal Ambroz 2023-11-27 21:18:34 UTC
(In reply to Pat Riehecky from comment #4)
> I don't believe ocsinventory-agent is using oletools.  Where did you find
> the interaction point?

Hello I was checking:
repoquery --whatrequires python3-oletools
repoquery --whatrequires python3-pcodedmp
repoquery --whatrequires macromilter

There comes the ocsinventory-agent, which depends on macromilter, which depends on python3-oletools

Comment 6 Pat Riehecky 2023-11-27 21:28:38 UTC
That is strange.  OCS Inventory is a pile of perl... I'm not showing macromilter in the deps of my actual RPMs.

$ rpm -qp --requires ocsinventory-agent-2.10.0-3.fc39.x86_64.rpm perl-Ocsinventory-Agent-2.10.0-3.fc39.noarch.rpm | sort -u
/bin/sh
config(ocsinventory-agent) = 2.10.0-3.fc39
config(perl-Ocsinventory-Agent) = 2.10.0-3.fc39
dmidecode
/etc/logrotate.d
libx86
monitor-edid
net-tools
pciutils
perl(Carp)
perl(Compress::Zlib)
perl(Config)
perl(constant)
perl(Data::Dumper)
perl(Data::UUID)
perl(Digest::MD5)
perl(Encode)
perl(English)
perl(Exporter)
perl(Fcntl)
perl(File::Basename)
perl(File::Glob)
perl(File::Path)
perl(File::stat)
perl(File::Temp)
perl(Getopt::Long)
perl(HTTP::Request)
perl(IO::Socket::SSL)
perl-libs
perl(LWP) > 6
perl(LWP::Protocol)
perl(LWP::Protocol::http)
perl(LWP::Protocol::https)
perl(LWP::UserAgent)
perl(MIME::Base64)
perl(Net::IP)
perl(Net::Netmask)
perl(Net::SNMP)
perl(Net::SSLeay)
perl-Ocsinventory-Agent = 2.10.0-3.fc39
perl(Ocsinventory::Agent::AccountConfig)
perl(Ocsinventory::Agent::AccountInfo)
perl(Ocsinventory::Agent::Backend)
perl(Ocsinventory::Agent::Backend::OS::Linux::Storages)
perl(Ocsinventory::Agent::Common)
perl(Ocsinventory::Agent::Config)
perl(Ocsinventory::Agent::Encrypt)
perl(Ocsinventory::Agent::Hooks)
perl(Ocsinventory::Agent::Modules::Apache::Vhosts::Common)
perl(Ocsinventory::Agent::Modules::Databases::Oracle::Instances)
perl(Ocsinventory::Agent::Network)
perl(Ocsinventory::Agent::XML::Inventory)
perl(Ocsinventory::Agent::XML::Prolog)
perl(Ocsinventory::Agent::XML::Response)
perl(Ocsinventory::Compress)
perl(Ocsinventory::Logger)
perl(Parse::EDID)
perl(POSIX)
perl(Socket)
perl(strict)
perl(Sys::Syslog)
perl(Time::Local)
perl(utf8)
perl(vars)
perl(warnings)
perl(XML::Simple)
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rpmlib(PayloadIsZstd) <= 5.4.18-1
smartmontools
systemd
which


In any case, if macromilter is hidden somewhere in the application, I don't know where.... So I don't think I'm the right person to ask on updat compat bits.


Note You need to log in before you can comment on or make changes to this bug.