    ossec-hids-mysql-2.9.0-49.suse13.1.art                                                        $   >                                  LɺLw(E2   >                 9  6   ?     6      d                                                	   )        	   O           l           p                                                    	                                                            	          
               $          f          h          p          z                                                  8          k                                   (          8        m  9     |   m  :        m  G     4T     H     4\     I     4d     X     4h     Y     4p     \     4     ]     4     ^     4     b     4     d     5W     e     5\     f     5a     l     5c     u     5x     v     5     w     6H     x     6P     y     6X   C ossec-hids-mysql 2.9.0 49.suse13.1.art The OSSEC HIDS Server mysql connector Mysql connector for OSSEC    Xvloggerhead.atomicorp.com     	@http://www.ossec.net GPL Atomicorp <support@atomicorp.com> System Environment/Daemons http://www.ossec.net/ linux x86_64       	Nh    XvXv59346510cbee34ab0429fdd5d0c241f7 8aa4e2f685e42ff32f10fd625ce10b08           root root root root ossec-hids-2.9.0-49.suse13.1.art.src.rpm    ossec-hids-mysql ossec-hids-mysql(x86-64)     @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @   @      
  
  
libGeoIP.so.1()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libcrypto.so.1.0.0()(64bit) libdl.so.2()(64bit) libm.so.6()(64bit) libmysqlclient.so.18()(64bit) libmysqlclient.so.18(libmysqlclient_18)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) libssl.so.1.0.0()(64bit) libz.so.1()(64bit) ossec-hids-server rpmlib(CompressedFileNames) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsLzma)                  2.9.0-49.suse13.1.art 3.0.4-1 4.0-1 4.4.6-1     ossec-hids-postgres  4.11.1 XYX@TT@SSS[S@R@R@RʚR@R@RrF@RiRR@Q@QY@Q@@QQ@Q@Qu&@Qu&@QkQg@Q\PDPP@PP@OiO@OЗOЗO	O OpZ@NNS@NK@N;@N;@N6@N-ZNMMM@M@M@M?MM>MUM@MPL~L8LΫLΫLʷ@LeL@L{LL@LA@LLLzL~@@L|LvW@LmLa?@LRL4l@LT@KtK͗@KKK@K[K@K8@K@K@K@J@JJJ@JJJn@JL@JI@J2C@J2C@J/@J&eI@Io@I)@I4IܑISupport <support@atomicorp.com> - 2.9.0-49 Support <support@atomicorp.com> - 2.9.0-48 Support <support@atomicorp.com> - 2.8.1-47 Support <support@atomicorp.com> - 2.8.0-46 Support <support@atomicorp.com> - 2.8.0-45.1 Support <support@atomicorp.com> - 2.8.0-45 Support <support@atomicorp.com> - 2.7.1-44 Support <support@atomicorp.com> - 2.7.1-43 Support <support@atomicorp.com> - 2.7.1-42 Support <support@atomicorp.com> - 2.7.1-41 Support <support@atomicorp.com> - 2.7.1-40 Support <support@atomicorp.com> - 2.7.1-36 Support <support@atomicorp.com> - 2.7.1-35 Support <support@atomicorp.com> - 2.7-34 Support <support@atomicorp.com> - 2.7-33 Support <support@atomicorp.com> - 2.7-32 Support <support@atomicorp.com> - 2.7-31 Support <support@atomicorp.com> - 2.7-30 Support <support@atomicorp.com> - 2.7-29 Support <support@atomicorp.com> - 2.7-28 Support <support@atomicorp.com> - 2.7-27 Support <support@atomicorp.com> - 2.7-26 Support <support@atomicorp.com> - 2.7-25 Support <support@atomicorp.com> - 2.7-24 Support <support@atomicorp.com> - 2.7-23 Support <support@atomicorp.com> - 2.7-22 Support <support@atomicorp.com> - 2.7-21 Support <support@atomicorp.com> - 2.7-20 Support <support@atomicorp.com> - 2.7-19 Support <support@atomicorp.com> - 2.7-17 Support <support@atomicorp.com> - 2.6-16 Support <support@atomicorp.com> - 2.6-15 Support <support@atomicorp.com> - 2.6-14 Support <support@atomicorp.com> - 2.6-13 Support <support@atomicorp.com> - 2.6-12 Support <support@atomicorp.com> - 2.6-11 Support <support@atomicorp.com> - 2.6-10 Support <support@atomicorp.com> - 2.6-9 Support <support@atomicorp.com> - 2.6-8 Support <support@atomicorp.com> - 2.6-7 Support <support@atomicorp.com> - 2.6-6 Support <support@atomicorp.com> - 2.6-5 Support <support@atomicorp.com> - 2.6-4 Support <support@atomicorp.com> - 2.6-3 Support <support@atomicorp.com> - 2.6-2 Support <support@atomicorp.com> - 2.6-1 Support <support@atomicorp.com> - 2.6.0-0.10 Support <support@atomicorp.com> - 2.6.0-0.9 Support <support@atomicorp.com> - 2.6.0-0.8 Support <support@atomicorp.com> - 2.6.0-0.7 Support <support@atomicorp.com> - 2.6.0-0.6 Support <support@atomicorp.com> - 2.6.0-0.5 Support <support@atomicorp.com> - 2.6.0-0.4 Support <support@atomicorp.com> - 2.6.0-0.3 Support <support@atomicorp.com> - 2.6.0-0.1 Support <support@atomicorp.com> - 2.5.1-10 Support <support@atomicorp.com> - 2.5.1-9 Support <support@atomicorp.com> - 2.5.1-8 Support <support@atomicorp.com> - 2.5.1-7 Support <support@atomicorp.com> - 2.5.1-6 Support <support@atomicorp.com> - 2.5.1-5 Support <support@atomicorp.com> - 2.5.1-4 Support <support@atomicorp.com> - 2.5.1-3 Support <support@atomicorp.com> - 2.5.1-2 Support <support@atomicorp.com> - 2.5.1-1 Support <support@atomicorp.com> - 2.5-1 Support <support@atomicorp.com> - 2.5-0.9 Support <support@atomicorp.com> - 2.5-0.8 Support <support@atomicorp.com> - 2.5-0.7 Support <support@atomicorp.com> - 2.5-0.6 Support <support@atomicorp.com> - 2.5-0.1 Support <support@atomicorp.com> - 2.4.1-11.2 Support <support@atomicorp.com> - 2.4.1-11.1 Support <support@atomicorp.com> - 2.4.1-10 Support <support@atomicorp.com> - 2.4.1-9 Support <support@atomicorp.com> - 2.4.1-8 Support <support@atomicorp.com> - 2.4.1-7 Support <support@atomicorp.com> - 2.4.1-6 Support <support@atomicorp.com> - 2.4.1-5 Support <support@atomicorp.com> - 2.4.1-4 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.4.1-1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.4-5 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.4-4 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.4-1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.4-0.2 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.4-0.1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.3-8 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.3-7 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.3-6 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.3-1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.2-5 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.2-4 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.2-3 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.2.0.beta2.1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.2.0.beta1.1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.1.1-5 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.1.1-3 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.1.1-1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.1-3 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.1-1 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-11 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-10 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-9 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-8 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-7 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-6 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-5 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-4 Scott R. Shinn <scott@atomicrocketturtle.com> - 2.0-2 - Update to Ossec 2.9.0 Final - Update to Ossec 2.9.0 - Update to 2.8.1. This is identical to 2.8.0-46, the only change is the hosts.deny CVE-2014-5284 is merged in. - Revert BR#1596
- Add Bugfix for hosts.deny race condition (CVE-2014-5284) - BR #1596, Add fork limiting patch (max 10) for execd to prevent DoS conditions - Upgrade to 2.8.0 - Feature Request #1512,  speed up shuns in execd, move sqlite down - Relink against native mysql - Add ar-tracking active response - Placeholder for null exclusion rules.  Legacy support - ASL 4 version with new database format - Add support for Fedora 20
- Modify optimization flags for FORTIFY - Update to 2.7.1
- Add independent rules.d/decoders.d ossec-rules package - FR#772, add rule 3360 for postfix slow brute force
-   add dovecot-decoder.patch for cpanel dovecot
-   Update 9702, 9753 for dovecot brute force
- FR#773, add rule 11308 for pure-ftp slow brute force
- FR#1347, Update for courier v4 decoder (pop3s)
- FR#1359, Update horde decoder for v5 - Disable ossec-dbd signature table (replaced by aslw_rules). This was very slow - Break ossec-dbd into separate package
- FR#1321, update courier-imap decoder for version 4.0 - Bugfix #XXX, prevent truncating last character on ossec-dbd database inserts on the alerts/data table - Add tld column to alert table w/ index - Deprecate internal id generation in dbd
- update schema to autoincrement, increase id space to int - Add is_hidden to mysql schema - Add if exists to mysql schema - Add os_dbd-mysql-replace-query.patch to consolidate SELECT/UPDATE into REPLACE sql - Consolidate alert & data into a common table
- Add ossec-authd init script - Add sqldelete command  to execd
- Update to clear sqlite db at startup - More minor updates to GeoIP tracking - Minor update to GeoIP tracking - Bugfix on permissions for files in shared/ directory for client installs
- Add GeoIP support
- Remove dependency on perl-DBD-SQLite
- Update asl-shun to new non-perl based version.
- Deprecate firewall-drop-update.patch
- Add sqlite support to execd (/var/ossec/var/execd.sqlite) - Update to 2.7 final - Feature Request #XXX, revert duplicate detection in log events to help detect extremely fast brute force attacks
- Add FORTIFY_SOURCE, PIE, and relro (full) - Update to 2.7-rc2 - Update to 2.7-rc1 - Move active response components under the common package - bugfix #xxx, correct ownership permissions on fts dir - Update to init script to suppress spurious execd output
- Add alerts queue to server package with ossec/ossec permissions - Bugfix #XXX, correct any/agentd condition - Moved agentless packages under server - Drop timeid and cat_id indexes from schema - Add new index, timeid to alerts table. - Add cmoraes patch, Adds config options for enabling/disabling rootkit/syscheck options, and agent config profiles
- Add ossec-memleaks patch
- Add agentless directories, and agent.conf
- Bugfix #XXX, ossec-hids.init will now return an exit code on status - Add prelink_cmd support - Bugfix #XXX, display multi-line events in data table correcty - Update to asl-shun.pl purge event to default to 24 hours. - Update to asl-shun.pl to change ordering of block rules
- Revert from 0805 snapshot - Update to 0805 snapshot - Update to 0801 snapshot
- Update asl-shun.pl to log to active-responses.log, blocks now go to the named chain ASL-ACTIVE-RESPONSE, and delete events are more redundant. - Update to OSSEC 2.6 Final - Update to snapshot 110711 - Update to snapshot 110613 - Update to snapshot 110609 - Update to snapshot 110606
- Moved ossecr user creation event to the ossec-hids core package - Update to snapshot 110531 - Update to snapshot 110526 - Update to snapshot 110504 - Bugfix #536, Increase the default sleep time for syscheck - Renamed to 2.6 branch - Add support for the rules/decoders dir system - Update to snapsot 110405
- Update asl-shun to support ossec alert ids - Changed asl-shun sqlite database to /var/ossec/var/blocklist3.sqlite
- asl-shun database format now stores the full alertid - Update to snapshot 101203 - Update to snapshot 101125 - Added alertid support to os_dbd, this involves a schema update - Added dst ip, src prt, and dst prt capture support to os_dbd - Bugfix #XXX, manage_agents was built in client mode for the server package. - Add clamav decoder & ruleset - Update to 2.5.1 final - Update to 2.5 final - Update to 0928 snapshot - Extended no_ar into ossec-dbd - Add no_ar option to disable active response per rule - Update to snapshot 100920 - Update snapshot to 100907 - Snapshot 100901 - Added test fix for os_dbd - Bugfix #376, ossec-control will now properly stop and reload - Update to 0809 snapshot - Relink against native mysql - Add minicon decoder from les fenison - Update to 100707 snapshot
- Feature Request #371, add ossec.log to logrotate - Updated to 100615 snapshot - Updated init and ossec-server scripts to support the new reload feature. - Update to 2.4.1 - Added zabbix reporting active response - Update to 2.4 final
- Lowered courier rule 3910 (failures) from 6 over 240 to 10 over 10
- Lowered courier rule 3911 (success) from 10 over 60 to 30 over 20 - Rebuilt for atomic repo - Update to CVS 100317 - Update to CVS 100311
- Add decoder for denyhosts
- Update asl_rules.xml to include denyhosts rules - Update to CVS 100309 - Added new decoder for smtp_auth
- Added rules to detect smtp_auth brute force attempts
- Added rules to detect imap/pop brute force attempts - Updated ossec-server.conf to be in parity with the ASL config
- Added templates dir for generating configs - Update to 2.3 release - Update to snapshot 091109 - Update to snapshot 091008 - Update to snapshot 090925
- Added timestamp field to the mysql schema
- Bugfix #XXX, for the ossec-client.init script to call the correct (renamed) ossec syscheckd/logcollector daemons
- Appologies for not updating the previous changelogs. Missed a few updates! - Update to snapshot 090827
- Feature Request #225, Added logrotate event to active-response log
- Updated system_audit_rcl.txt to look for the correct php.ini file - Update to 090824, beta 1 release - Update to 090812 snapshot - Rebuild agent daemons with -DCLIENT, added symlink trickery - update to 2.1.1 - update to 090630 snapshot, this has fixes for CentOS/RHEL 4 64-bit environments - update to 2.1 final - update to snapshot 090612 - update to snapshot 090610 - update to snapshot 090603 - Disable postgresql support, to get around an undesirable dependency on EL4 - Update to snapshot 090417 - Update to snapshot 090413 (this adds in inotify support) - Update to snapshot 090410 (this adds in inotify support) - Update to snapshot 090408 - Added authpsa rules back in, this is used to detect brute force attacks
- Added conditional building support for ASL modifications                       2.9.0-49.suse13.1.art 2.9.0-49.suse13.1.art        mysql.schema ossec-dbd /usr/share/ossec/contrib/ /var/ossec/bin/ -O2 -g -m64 -fmessage-length=0 -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables drpm lzma 5 x86_64-suse-linux           ASCII text ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=227ba56d7dd4034948957f5cc3594d0fa09c2f92, not stripped                   R  R  R  R  R  R  R  R  R  
R  R   R  R  R  R  R  	R     ?   p   ]    "k%{Usgi:N-55CtAyǬԅ((4`7M4)Ehy=lsж}>*v/K'._[$v᜻f~K	Kd9o!x;idjzFcm71>Zs
8Z?V}A_"1yBU6D':,3}w%r0r9BӖM Fwcsy9Yhzg_׺s̲4@-crąDgK6Ga)F;1	Ѕыisל$+lH7;UiESp!k-IN~^B,%nž\fs' q$n R
#!
enb">7/02xJ['6Mt̼νLp^oNɢF1*dfC<D11X 69:boX	"ioVE-!u^<WZ<;f.LnJqAxP8_g`-(z;}ZEh OL)揺2TA놚[ȥ.`ߎvY&J%'"BݺhfcX9n"YMցƏ1Iqƒ263 <!MGWp 菶;1͢M'|yX6]H!`WNOJO=Cj/#oyP|wC<З'y!LS\@_Ŝu)+}_CPX-_TS
pQT$38DAB-6%Z}`\'M20ލ'B/3=ճQ9S8-<:Uځ:Mj.>V|ZpE ,C,2Ǫ53hnh{x)2b?TjB5xȲ+5;$Cp0à~_nR!uR7=d@\15'Hz	:ׄ4CFz?PgֶLTuY4fL`މaý >['#lޡV;/t\*M'k5,gNr^?;!D?5kd=ǹ9U"HgCHVuNFz	t◑M͠YEW졟0+hLHl+3iL#CᐢL1T\(;W:+#|bBZi*4Qbń?X"Qs-4X~|rZ/܂f	4We M:sе˄FVB,z<czqI$My|ӛŅDK>"?,yjܼ̀JB9}`jW.0>wzUT6g!-CK8)Q.S $ҝ	gUؘv沯Ѽ'2V:ӀW8zBk5(+X<&;Sjl_lڄ~7{	pP<hnỠBPԚkљ(t3IpKw)WŰI&cTp{}7pu4L=qȖqHe8@9=.PaDӫÞ1O-ujMZ؜u *sv[5.[wIDc2r^wogl>Q;w%Za7Uh6
H%X%K2g*8oW9Hwj>\/:OБ
H]'(GAZL#b¿DGtVx1&neYϓX-e/1@	CeІYECJ;do;+ue+xCp-j1t`ceur4\Pk;\(ytd3<r%ޜ_R//ow%!ag9/UGδcR&lQm=)!Y6c(*w=Lۛx!fΖ$&Rso<T{堟ߔCLtqHv*͕$Zf ܣCBN6z<pdeL7tLi};آK0º@/w<Cn5,n)ǥbC' P!$,G{11m-ȿZ6ZViH 3GT	]Dh`PP沫ȿb02!-0iq2F'*fJ*9sppR@S,C]ؓ"c"Pe$|P$4Jz^bg:uzCrޓ?2LXINHdtw.hE*2yENCle]{"Kd-Սvlɼp;RI42nFc`h@/~2jp ;&ھjG/KP"	v5!#|T1Q*Q(U2o{9!5ZWz y
`QYt)ہyP`)PDJaHNFxQr f|ɷӳ,
0Z2hj5R.&Go^[^@B;f5s\|eo7ͼYp[x/q""Z\Y}Rqir8}h9]W YT0vȅnS1`hebDFӿ`;0S
vP83dg6]_}WRD_GWV#TԖ 
(cnz}^\=|
_Y1,
˕B^=X|xDjEܐ6.DіxCu`ΧӗS{ނc3~X/!>YA"־xSzf5	هt-:Sqs`zM2֩"AyU+YJf CB8"sf:Ff]zp/L\pu1i
xYn9'
lgLL.(=;_BV> jYST2-_JlMGӠNɮk@_+=6+f߿vj:^Sx ;wb54Boɏ:[S|BHZ0>)W鏏	d\WT9H5{i/H9-
8 l5}
"1JͯNOΔߜ0-*n'euXAOWi?xI$0@3Gs6S5Rɋ'ui0÷%YSItL]m%e}Lvo<>??O^@FlnSό (t%{ݷNxѾ:juW"8&|IX{`enƾ/+W^$',x%L=w;f[LL{|돵%sWp0?LO@sMхI1"u;"OWXˮ,Ȧ;f@lirK_bd6=k2f 𼙘+㩰 TW5z3J+-4XFϪ.&dEtGոy9	∰pؤ&bZv.
0pv]DZ3!(ݚ9*O #>kZ9_eN.hё{_$@)j-"s8,mEI;FtI3Jᣕ`,ӈB-g	^Blvm}bK84%O`$'tna3a.ZiWƑnQh-%?w3.T8oYAe:\^zMϰ<mP`	Poڥqauqsmsy%?;ָQ?Si=b@Bo`~QidIEsW]dcfkEgw3QKpmmI39 V4O6\Pd`y5br4^lS%֤Հ04J~
Ns[QPx4eRI3uBJwF	T4?QKA韟DEهm⣑S32mIo(<&f#,*OWA_v{f: jSRTvay w[I>Qƅv۪xޭ"7/4C;8[(QjpDV.SԽ
(p闞ʀpgQ_a͹Rh,6[~	s	wҟqyC\HMܐIifxZ@H4IuaA .a-(_|VNꅲ]W)C669(E|Z@iW:VK>=a%l7̆tb .On^܆ޙbUuw'يOHzߺ%7,q^&<^s]|z: