    ossec-hids-postgres-2.9.0-49.suse13.1.art                                                     $   >                                  LC3䨾@.   >                 ;  6   ?     6      d                                                	   ,        	   U           t           x                                                    	                                  
                     T          \     	     `     
     d          l                                                                                 0                    5          t          x               (          8        m  9     H   m  :        m  >     4      G     4(     H     40     I     48     X     4<     Y     4D     \     4p     ]     4x     ^     4     b     4     d     5B     e     5G     f     5L     l     5N     u     5`     v     5h     w     64     x     6<     y     6D   C ossec-hids-postgres 2.9.0 49.suse13.1.art The OSSEC HIDS Server postgres connector Postgresql connector for OSSEC Xrloggerhead.atomicorp.com     http://www.ossec.net GPL Atomicorp <support@atomicorp.com> System Environment/Daemons http://www.ossec.net/ linux i386 ln -sf /var/ossec/bin/ossec-pgsql-dbd /var/ossec/bin/ossec-dbd || :     Kh    XrXr54914fd444e8232948eafe99f0398224 1528ea8b49b10073a21866a07aab578c           root root root root ossec-hids-2.9.0-49.suse13.1.art.src.rpm    ossec-hids-postgres ossec-hids-postgres(x86-32)      @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @      
  
  
/bin/sh libGeoIP.so.1 libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.3) libc.so.6(GLIBC_2.2) libc.so.6(GLIBC_2.3) libc.so.6(GLIBC_2.3.4) libc.so.6(GLIBC_2.4) libc.so.6(GLIBC_2.7) libcrypto.so.1.0.0 libm.so.6 libpq.so.5 libpthread.so.0 libpthread.so.0(GLIBC_2.0) libpthread.so.0(GLIBC_2.2) libssl.so.1.0.0 ossec-hids-server rpmlib(CompressedFileNames) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsLzma)                   2.9.0-49.suse13.1.art 3.0.4-1 4.0-1 4.4.6-1      ossec-hids-mysql  4.11.1    XYX@TT@SSS[S@R@R@RʚR@R@RrF@RiRR@Q@QY@Q@@QQ@Q@Qu&@Qu&@QkQg@Q\PDPP@PP@OiO@OЗOЗO	O OpZ@NNS@NK@N;@N;@N6@N-ZNMMM@M@M@M?MM>MUM@MPL~L8LΫLΫLʷ@LeL@L{LL@LA@LLLzL~@@L|LvW@LmLa?@LRL4l@LT@KtK͗@KKK@K[K@K8@K@K@K@J@JJJ@JJJn@JL@JI@J2C@J2C@J/@J&eI@Io@I)@I4IܑISupport <support@atomicorp.com> - 2.9.0-49 Support <support@atomicorp.com> - 2.9.0-48 Support <support@atomicorp.com> - 2.8.1-47 Support <support@atomicorp.com> - 2.8.0-46 Support <support@atomicorp.com> - 2.8.0-45.1 Support <support@atomicorp.com> - 2.8.0-45 Support <support@atomicorp.com> - 2.7.1-44 Support <support@atomicorp.com> - 2.7.1-43 Support <support@atomicorp.com> - 2.7.1-42 Support <support@atomicorp.com> - 2.7.1-41 Support <support@atomicorp.com> - 2.7.1-40 Support <support@atomicorp.com> - 2.7.1-36 Support <support@atomicorp.com> - 2.7.1-35 Support <support@atomicorp.com> - 2.7-34 Support <support@atomicorp.com> - 2.7-33 Support <support@atomicorp.com> - 2.7-32 Support <support@atomicorp.com> - 2.7-31 Support <support@atomicorp.com> - 2.7-30 Support <support@atomicorp.com> - 2.7-29 Support <support@atomicorp.com> - 2.7-28 Support <support@atomicorp.com> - 2.7-27 Support <support@atomicorp.com> - 2.7-26 Support <support@atomicorp.com> - 2.7-25 Support <support@atomicorp.com> - 2.7-24 Support <support@atomicorp.com> - 2.7-23 Support <support@atomicorp.com> - 2.7-22 Support <support@atomicorp.com> - 2.7-21 Support <support@atomicorp.com> - 2.7-20 Support <support@atomicorp.com> - 2.7-19 Support <support@atomicorp.com> - 2.7-17 Support <support@atomicorp.com> - 2.6-16 Support <support@atomicorp.com> - 2.6-15 Support <support@atomicorp.com> - 2.6-14 Support <support@atomicorp.com> - 2.6-13 Support <support@atomicorp.com> - 2.6-12 Support <support@atomicorp.com> - 2.6-11 Support <support@atomicorp.com> - 2.6-10 Support <support@atomicorp.com> - 2.6-9 Support <support@atomicorp.com> - 2.6-8 Support <support@atomicorp.com> - 2.6-7 Support <support@atomicorp.com> - 2.6-6 Support <support@atomicorp.com> - 2.6-5 Support <support@atomicorp.com> - 2.6-4 Support <support@atomicorp.com> - 2.6-3 Support <support@atomicorp.com> - 2.6-2 Support <support@atomicorp.com> - 2.6-1 Support <support@atomicorp.com> - 2.6.0-0.10 Support <support@atomicorp.com> - 2.6.0-0.9 Support <support@atomicorp.com> - 2.6.0-0.8 Support <support@atomicorp.com> - 2.6.0-0.7 Support <support@atomicorp.com> - 2.6.0-0.6 Support <support@atomicorp.com> - 2.6.0-0.5 Support <support@atomicorp.com> - 2.6.0-0.4 Support <support@atomicorp.com> - 2.6.0-0.3 Support <support@atomicorp.com> - 2.6.0-0.1 Support <support@atomicorp.com> - 2.5.1-10 Support <support@atomicorp.com> - 2.5.1-9 Support <support@atomicorp.com> - 2.5.1-8 Support <support@atomicorp.com> - 2.5.1-7 Support <support@atomicorp.com> - 2.5.1-6 Support <support@atomicorp.com> - 2.5.1-5 Support <support@atomicorp.com> - 2.5.1-4 Support <support@atomicorp.com> - 2.5.1-3 Support <support@atomicorp.com> - 2.5.1-2 Support <support@atomicorp.com> - 2.5.1-1 Support <support@atomicorp.com> - 2.5-1 Support <support@atomicorp.com> - 2.5-0.9 Support <support@atomicorp.com> - 2.5-0.8 Support <support@atomicorp.com> - 2.5-0.7 Support <support@atomicorp.com> - 2.5-0.6 Support <support@atomicorp.com> - 2.5-0.1 Support <support@atomicorp.com> - 2.4.1-11.2 Support <support@atomicorp.com> - 2.4.1-11.1 Support <support@atomicorp.com> - 2.4.1-10 Support <support@atomicorp.com> - 2.4.1-9 Support <support@atomicorp.com> - 2.4.1-8 Support <support@atomicorp.com> - 2.4.1-7 Support <support@atomicorp.com> - 2.4.1-6 Support <support@atomicorp.com> - 2.4.1-5 Support <support@atomicorp.com> - 2.4.1-4 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.4.1-1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.4-5 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.4-4 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.4-1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.4-0.2 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.4-0.1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.3-8 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.3-7 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.3-6 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.3-1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.2-5 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.2-4 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.2-3 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.2.0.beta2.1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.2.0.beta1.1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.1.1-5 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.1.1-3 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.1.1-1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.1-3 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.1-1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-11 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-10 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-9 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-8 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-7 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-6 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-5 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-4 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-2 - Update to Ossec 2.9.0 Final - Update to Ossec 2.9.0 - Update to 2.8.1. This is identical to 2.8.0-46, the only change is the hosts.deny CVE-2014-5284 is merged in. - Revert BR#1596
- Add Bugfix for hosts.deny race condition (CVE-2014-5284) - BR #1596, Add fork limiting patch (max 10) for execd to prevent DoS conditions - Upgrade to 2.8.0 - Feature Request #1512,  speed up shuns in execd, move sqlite down - Relink against native mysql - Add ar-tracking active response - Placeholder for null exclusion rules.  Legacy support - ASL 4 version with new database format - Add support for Fedora 20
- Modify optimization flags for FORTIFY - Update to 2.7.1
- Add independent rules.d/decoders.d ossec-rules package - FR#772, add rule 3360 for postfix slow brute force
-   add dovecot-decoder.patch for cpanel dovecot
-   Update 9702, 9753 for dovecot brute force
- FR#773, add rule 11308 for pure-ftp slow brute force
- FR#1347, Update for courier v4 decoder (pop3s)
- FR#1359, Update horde decoder for v5 - Disable ossec-dbd signature table (replaced by aslw_rules). This was very slow - Break ossec-dbd into separate package
- FR#1321, update courier-imap decoder for version 4.0 - Bugfix #XXX, prevent truncating last character on ossec-dbd database inserts on the alerts/data table - Add tld column to alert table w/ index - Deprecate internal id generation in dbd
- update schema to autoincrement, increase id space to int - Add is_hidden to mysql schema - Add if exists to mysql schema - Add os_dbd-mysql-replace-query.patch to consolidate SELECT/UPDATE into REPLACE sql - Consolidate alert & data into a common table
- Add ossec-authd init script - Add sqldelete command  to execd
- Update to clear sqlite db at startup - More minor updates to GeoIP tracking - Minor update to GeoIP tracking - Bugfix on permissions for files in shared/ directory for client installs
- Add GeoIP support
- Remove dependency on perl-DBD-SQLite
- Update asl-shun to new non-perl based version.
- Deprecate firewall-drop-update.patch
- Add sqlite support to execd (/var/ossec/var/execd.sqlite) - Update to 2.7 final - Feature Request #XXX, revert duplicate detection in log events to help detect extremely fast brute force attacks
- Add FORTIFY_SOURCE, PIE, and relro (full) - Update to 2.7-rc2 - Update to 2.7-rc1 - Move active response components under the common package - bugfix #xxx, correct ownership permissions on fts dir - Update to init script to suppress spurious execd output
- Add alerts queue to server package with ossec/ossec permissions - Bugfix #XXX, correct any/agentd condition - Moved agentless packages under server - Drop timeid and cat_id indexes from schema - Add new index, timeid to alerts table. - Add cmoraes patch, Adds config options for enabling/disabling rootkit/syscheck options, and agent config profiles
- Add ossec-memleaks patch
- Add agentless directories, and agent.conf
- Bugfix #XXX, ossec-hids.init will now return an exit code on status - Add prelink_cmd support - Bugfix #XXX, display multi-line events in data table correcty - Update to asl-shun.pl purge event to default to 24 hours. - Update to asl-shun.pl to change ordering of block rules
- Revert from 0805 snapshot - Update to 0805 snapshot - Update to 0801 snapshot
- Update asl-shun.pl to log to active-responses.log, blocks now go to the named chain ASL-ACTIVE-RESPONSE, and delete events are more redundant. - Update to OSSEC 2.6 Final - Update to snapshot 110711 - Update to snapshot 110613 - Update to snapshot 110609 - Update to snapshot 110606
- Moved ossecr user creation event to the ossec-hids core package - Update to snapshot 110531 - Update to snapshot 110526 - Update to snapshot 110504 - Bugfix #536, Increase the default sleep time for syscheck - Renamed to 2.6 branch - Add support for the rules/decoders dir system - Update to snapsot 110405
- Update asl-shun to support ossec alert ids - Changed asl-shun sqlite database to /var/ossec/var/blocklist3.sqlite
- asl-shun database format now stores the full alertid - Update to snapshot 101203 - Update to snapshot 101125 - Added alertid support to os_dbd, this involves a schema update - Added dst ip, src prt, and dst prt capture support to os_dbd - Bugfix #XXX, manage_agents was built in client mode for the server package. - Add clamav decoder & ruleset - Update to 2.5.1 final - Update to 2.5 final - Update to 0928 snapshot - Extended no_ar into ossec-dbd - Add no_ar option to disable active response per rule - Update to snapshot 100920 - Update snapshot to 100907 - Snapshot 100901 - Added test fix for os_dbd - Bugfix #376, ossec-control will now properly stop and reload - Update to 0809 snapshot - Relink against native mysql - Add minicon decoder from les fenison - Update to 100707 snapshot
- Feature Request #371, add ossec.log to logrotate - Updated to 100615 snapshot - Updated init and ossec-server scripts to support the new reload feature. - Update to 2.4.1 - Added zabbix reporting active response - Update to 2.4 final
- Lowered courier rule 3910 (failures) from 6 over 240 to 10 over 10
- Lowered courier rule 3911 (success) from 10 over 60 to 30 over 20 - Rebuilt for atomic repo - Update to CVS 100317 - Update to CVS 100311
- Add decoder for denyhosts
- Update asl_rules.xml to include denyhosts rules - Update to CVS 100309 - Added new decoder for smtp_auth
- Added rules to detect smtp_auth brute force attempts
- Added rules to detect imap/pop brute force attempts - Updated ossec-server.conf to be in parity with the ASL config
- Added templates dir for generating configs - Update to 2.3 release - Update to snapshot 091109 - Update to snapshot 091008 - Update to snapshot 090925
- Added timestamp field to the mysql schema
- Bugfix #XXX, for the ossec-client.init script to call the correct (renamed) ossec syscheckd/logcollector daemons
- Appologies for not updating the previous changelogs. Missed a few updates! - Update to snapshot 090827
- Feature Request #225, Added logrotate event to active-response log
- Updated system_audit_rcl.txt to look for the correct php.ini file - Update to 090824, beta 1 release - Update to 090812 snapshot - Rebuild agent daemons with -DCLIENT, added symlink trickery - update to 2.1.1 - update to 090630 snapshot, this has fixes for CentOS/RHEL 4 64-bit environments - update to 2.1 final - update to snapshot 090612 - update to snapshot 090610 - update to snapshot 090603 - Disable postgresql support, to get around an undesirable dependency on EL4 - Update to snapshot 090417 - Update to snapshot 090413 (this adds in inotify support) - Update to snapshot 090410 (this adds in inotify support) - Update to snapshot 090408 - Added authpsa rules back in, this is used to detect brute force attacks
- Added conditional building support for ASL modifications /bin/sh                       2.9.0-49.suse13.1.art 2.9.0-49.suse13.1.art        postgresql.schema ossec-pgsql-dbd /usr/share/ossec/contrib/ /var/ossec/bin/ -O2 -g -m32 -march=i486 -fmessage-length=0 -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables drpm lzma 5 i386-suse-linux          ASCII text ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.16, BuildID[sha1]=8adc7beeeb94efb1e7ec863b06295e94dde3968e, not stripped                  R  R  R  R  
R  	R  R  R  R  R  R  R  R  R  R  R  R     ?   P   ]    "k%{Usgi!#=$9zQ,ٳ
kZ]a3Q<${j霗ȳSGDĚBZjˬN	+HwlY6Ӵt3+&826%mT([<#sD^G;@M_+L<\fU  85~
ׇp5E-worY2>ehk#YCjhHNLN>~vKe?2pQr]Rt8akt^d"Y_8%rȝI[ƿ2-0ƶBut =](l6
'lR5w#~Yz}F3̽zVW,<M2B=ЇAW,1K=l`.S3xR54@
f+X!0Z#ҍԆBeKLPKRAEg'YZ;Z*h4
jˊݼVb-M╙>*=j\#f&167%2qԃd<mK'O
olBЈS6r>G(hx(=E*:q0ֆ5£B%*Xj"@RyAc$h9]
Au'7ҁ"O=951gogZjH󛪽 Kյ5LŁJhg}?`ar޷Qdi2\$&z8m0x,IyEMPn~?,`H!z#7w[v30`(חr~6}ҤzŇ $¸WpX9&ݚ`EL.ƕ4ō=c32L3n~:<LT9nlZXэ1`u'&&;Abw[ɋmimuJq<"f֗_GL5ᒑKc@@$&PJe8Waw]*M(Ȍ?2ڢj^
I釷k)0O02P.ޖ%@7Q?UcRǕU4Ags-o :g`mo/l"UWߏ_	Ou@G5g ;Vyi	%?J
Nd5mM]8NXb]@9xpո7IuWZ[^Zx2 څU䧝BͶti+PP:(5kJ<YY+fҴ&Hɺ:)?\y'WgFcqԌ~<&N+bL6j%VI7?l(Յ;aQR?nk[KI[r'_5d5Z,Jmq ֯C)%ϸdXaLx_5nJK)ea'(33ğzɲ| 'D?Q6da'>BvpE'KcKpXƤsF </Ķ649cIָŁ/pGe8B+XU؀5K8mTF`>jCKՀm
4Cv+h0CŦ 6x	YpX.(kAogt-R&/pÉbw=.UrxNLo2R9[	WQB!0oY`?AnW%-Qc/Xk}=fzE%&zc#	UޗVd_/qd2?Θ?e#_[J3KW#`lsP	oEXF>wFOԻ)=, g؋iԋ+Ws60! Bʹ@A\M O7Ʌxœec'hӘJ#3(ensZԋ\
Q<qǑRexs6_;Ir^WnB[jqmf
 ,"H愻 6:pa''fzH
NCh Tĉpٲ dR:d,X=]D-Lh>tks`N2a m&PDv[Y.{t@;πs&[ecm'0M!d1򢸦SYnC"䬕13>q_7ӑPLiq>PUۿgTF-ҾjR~dClrgG|'F$QIr.+tR}x>:Qn]VsZ-)ӞlHͰ'G+HT\>{C;gjl4:M6
Tljn0i58ڻrj^X0L^CI`}Eg̟ftiƷ\D
CFӒG\iaZGqKՁ̊â+yANv	E{4
2&~{9wʨv4_-M7H~ J58S:m"[6(80灤۹^䵼0U\x*GXn;&g7^bȽS#eqլՍ0W(q_y˧Qh?<5u`>[9p[	cLslg+GWGӑ؎~|𥉉#T
8B	$<SءMc1ɴ`|H;U+Oҍ͆o	硭h:@Rΰ	:}CԁEm5l;]G]FfC3S9%(h#Lڛ6d0VJ*G.y3%J/M/Z,DrG,hULr>KpP664 )w̡<Q^r?a	I,I"R1=/	q˶!xiYNG.~[)E*`-,s͘ Hx{&AR-.BSyLd:ty9ې1/o	,JE%x	ÖG󃵦sv蘆UM$s%weӚ4<vqгulFזzpIJ$Vmk/n	}dln޸ɉAΨ._uܸSw65ܞɠ=x+*0;F`W&k$ Qo]0	;q^0|ॽe&]s;ӎB
)ȕvcFٗzٶmR`eܠqt;_{mX,U M?źO	N(*;PkAV<8m4̲ɾ8?,F:TD3XC64PӝnWVT!Wr7f6@dHaxE
xj2"ݠGNXVrVa@_w4ƾwC.+탲Z3aGuf\WIH"rÇB)2^<ǆ˱9PX:/2lXWy[?Un"T|Xt\d<bw=zm,g caQL4d~`F 9'GEv}|:cN?a4E@*}fḳCл*C˵6ۊ]=#;	5:+`6rTaB
֗W6-o~pa[ 1S8?,S8/]kMLzcßZmQCgmѓM{#w mL_}FBVU%M[ܦ+(/4wk3xbj1f([=qTI	OgQ-99yѹ=;LaH,t<F5oW9~6ޣfC봞MCvEJh,ZCƃc1$Uez5ҜXz:yۏ{7	DoaQ/x=j7I'PA^,?P7(C]`{vFKj9/ts?EUQ8F,6|~;07[YlV:U}/cnuv/ݝ)m-ı'&s6-(N.o"!xB]bs	Z>o`iA0d{` 40`_[=BɵpۍD5CC9@MծZʄܙJgzvʏu'$؍Bw0?ZߒK#gENՠd-BTΑ\i ,ۄ]D7)ejh*91&*+*qdiLG7Vw3*J㩹hJh$:Mqɞ	LW&rSwMvG=ċѶAz1Sԥ~shRQliQ<b	6oc5wH 