OSSEC changelog (3.8.0) scott@atomicorp.com
Release Maintainers
Dan Parriott
Scott R. Shinn (https://www.atomicorp.com)
Contributors on this release
Release Notes
Update to authd to enforce chrooting, and privilege separation. The authd daemon will by default run as the ossec user. Adds support for AIX 7.x on power architecture (8/9/10).
General
- @ddpbsd - PR 1874 - pcre2 fix for windows1 decoders
- @g3rhard - PR 1939 - fix for AppArmor rules (added 5100 rule as parent)
- @ngarratt - PR 1958 - Support for AIX 7
- @ddpbsd - PR 2062 - Fix for issue #2020, False positive "Trojaned version of file '/bin/diff' detected" on Archlinux
- @staskysel - PR 2064 - Fix overwriting an agent counter with sender counter during updating keys
- @pwntester - PR 2070 - Add CodeQL wofkflow
- @1stmile-sysEngineer, @ddpbsd - PR 2084 Update for 1stmile rootkit detection
- @XALM1337X - PR 2092 Fix for CVE-2020-8446
- @XALM1337X - PR 2094 Fix for CVE-2020-8445
- @atomicturtle - PR 2143 Enforce chroot and privilege separation for the authd daemon