<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="9">
<package pkgid="6eafaf0afec5ab2f887ed6cb524c2cdd3481c8e89e7706d8f5d9ab4b9b4eb900" name="awp-agent" arch="aarch64">
  <version epoch="0" ver="2.3.0" rel="35923.el9.art"/>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 0.7" date="1684324800">- Adding auditd rules support</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.0" date="1689854400">- Add Clamav management support to Ubuntu 18, 20, 22
- Add Debian 12 support
- Add DLP setting management
- Add DEBUG settings for enhanced logging (Default: off)
- Add SCAP content inclusion for Ubuntu and Debian</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.1.0" date="1693310400">- Add support for new Clamav custom rule organization by platform
- Add clamonacc.service for realtime in-line support
- Add quarantine support</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.1.1" date="1698062400">- Update to support Fedora/EPEL design of clamav</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.6.0" date="1716984000">- Add memscan for memory scanning</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.6.1" date="1717761600">- Add help dialog and version info to memscan</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.6.2" date="1717761601">- Performance enhancements to memscan</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.7.0" date="1719316800">- Add new asl-firewall-drop that is compatible with 4.7+ agents</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.7.1" date="1721304000">- Add ARM64 support
- Update for freshclam wrapper to manage ownership on /var/lib/clamav</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 2.2.0" date="1741694400">- Add ClamAV compliance checks
- Add Ubuntu and Debian specific compliance content support
- Fixed firewall module rich rule handling for proper action case (lowercase)
- Improved firewall module debugging and logging
- Fixed SSH access handling in firewall rules
- Added better error handling for firewall rule application</changelog>
</package>
<package pkgid="58181cee18128a845736ad10c856206214bca7acc9e4d7906efce60a1a2fd140" name="awp-agent" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="35990.el9.art"/>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 0.7" date="1684324800">- Adding auditd rules support</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.0" date="1689854400">- Add Clamav management support to Ubuntu 18, 20, 22
- Add Debian 12 support
- Add DLP setting management
- Add DEBUG settings for enhanced logging (Default: off)
- Add SCAP content inclusion for Ubuntu and Debian</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.1.0" date="1693310400">- Add support for new Clamav custom rule organization by platform
- Add clamonacc.service for realtime in-line support
- Add quarantine support</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.1.1" date="1698062400">- Update to support Fedora/EPEL design of clamav</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.6.0" date="1716984000">- Add memscan for memory scanning</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.6.1" date="1717761600">- Add help dialog and version info to memscan</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.6.2" date="1717761601">- Performance enhancements to memscan</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.7.0" date="1719316800">- Add new asl-firewall-drop that is compatible with 4.7+ agents</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.7.1" date="1721304000">- Add ARM64 support
- Update for freshclam wrapper to manage ownership on /var/lib/clamav</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 2.2.0" date="1741694400">- Add ClamAV compliance checks
- Add Ubuntu and Debian specific compliance content support
- Fixed firewall module rich rule handling for proper action case (lowercase)
- Improved firewall module debugging and logging
- Fixed SSH access handling in firewall rules
- Added better error handling for firewall rule application</changelog>
</package>
<package pkgid="047f68f2643c3b7cb90d83387469230118cc3734bef1e782383122ba0a14dc0e" name="awp-agent" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="36036.el9.art"/>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 0.7" date="1684324800">- Adding auditd rules support</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.0" date="1689854400">- Add Clamav management support to Ubuntu 18, 20, 22
- Add Debian 12 support
- Add DLP setting management
- Add DEBUG settings for enhanced logging (Default: off)
- Add SCAP content inclusion for Ubuntu and Debian</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.1.0" date="1693310400">- Add support for new Clamav custom rule organization by platform
- Add clamonacc.service for realtime in-line support
- Add quarantine support</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.1.1" date="1698062400">- Update to support Fedora/EPEL design of clamav</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.6.0" date="1716984000">- Add memscan for memory scanning</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.6.1" date="1717761600">- Add help dialog and version info to memscan</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.6.2" date="1717761601">- Performance enhancements to memscan</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.7.0" date="1719316800">- Add new asl-firewall-drop that is compatible with 4.7+ agents</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 1.7.1" date="1721304000">- Add ARM64 support
- Update for freshclam wrapper to manage ownership on /var/lib/clamav</changelog>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 2.2.0" date="1741694400">- Add ClamAV compliance checks
- Add Ubuntu and Debian specific compliance content support
- Fixed firewall module rich rule handling for proper action case (lowercase)
- Improved firewall module debugging and logging
- Fixed SSH access handling in firewall rules
- Added better error handling for firewall rule application</changelog>
</package>
<package pkgid="c7f4f6e028456f215298761cc5aba7e777dae2d1e5f6d3c6c0560d50bedfa415" name="ossec-hids" arch="aarch64">
  <version epoch="1" ver="4.11.0" rel="39873.el9.art"/>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 4.10.1-1" date="1742299200">- ossec-execd (server/manager): after active-response stdin/stdout handshake (continue/abort), close child pipes with `wpdetach()` instead of blocking on `waitpid`; reap children in the existing `waitpid(..., WNOHANG)` loop so long-running AR does not stall the exec queue. (See project `CHANGELOG.md` §4.10.1; Windows: `wpdetach` still uses `wpclose` until further process support.)
- active-response: `asl-ipset.sh` — execd JSON shun path (ipset, iptables set ref), `active-responses.log` line per run; see `CHANGELOG.md` §4.10.1.
- Drop `ar-tracking.sh` from extraneous sources (script retired; package install was already disabled).
- Renumber `ossec-hids-authd.service` to Source10.</changelog>
  <changelog author="Atomicorp &lt;support@atomicorp.com&gt; - 4.11.0-1" date="1776600000">- Bump Version to 4.11.0 to align with ossec-hids.spec and current release train.</changelog>
</package>
<package pkgid="6d8f7a5290386450f75c99e81bf66f6fba7fb7a693a60c1d3a3a682024a3f2b5" name="ossec-hids" arch="aarch64">
  <version epoch="1" ver="4.11.0" rel="39897.el9.art"/>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 4.10.1-1" date="1742299200">- ossec-execd (server/manager): after active-response stdin/stdout handshake (continue/abort), close child pipes with `wpdetach()` instead of blocking on `waitpid`; reap children in the existing `waitpid(..., WNOHANG)` loop so long-running AR does not stall the exec queue. (See project `CHANGELOG.md` §4.10.1; Windows: `wpdetach` still uses `wpclose` until further process support.)
- active-response: `asl-ipset.sh` — execd JSON shun path (ipset, iptables set ref), `active-responses.log` line per run; see `CHANGELOG.md` §4.10.1.
- Drop `ar-tracking.sh` from extraneous sources (script retired; package install was already disabled).
- Renumber `ossec-hids-authd.service` to Source10.</changelog>
  <changelog author="Atomicorp &lt;support@atomicorp.com&gt; - 4.11.0-1" date="1776600000">- Bump Version to 4.11.0 to align with ossec-hids.spec and current release train.</changelog>
</package>
<package pkgid="c90bc86cee49af828c293589db400fca2a872639b75a850cb92970306ca6a250" name="ossec-hids" arch="aarch64">
  <version epoch="1" ver="4.11.1" rel="40087.el9.art"/>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 4.10.1-1" date="1742299200">- ossec-execd (server/manager): after active-response stdin/stdout handshake (continue/abort), close child pipes with `wpdetach()` instead of blocking on `waitpid`; reap children in the existing `waitpid(..., WNOHANG)` loop so long-running AR does not stall the exec queue. (See project `CHANGELOG.md` §4.10.1; Windows: `wpdetach` still uses `wpclose` until further process support.)
- active-response: `asl-ipset.sh` — execd JSON shun path (ipset, iptables set ref), `active-responses.log` line per run; see `CHANGELOG.md` §4.10.1.
- Drop `ar-tracking.sh` from extraneous sources (script retired; package install was already disabled).
- Renumber `ossec-hids-authd.service` to Source10.</changelog>
  <changelog author="Atomicorp &lt;support@atomicorp.com&gt; - 4.11.0-1" date="1776600000">- Bump Version to 4.11.0 to align with ossec-hids.spec and current release train.</changelog>
</package>
<package pkgid="e027bed21cbbdf38e0f958927bc59639f1a8ca0ea64f7313320474ec502a06b8" name="ossec-hids-agent" arch="aarch64">
  <version epoch="1" ver="4.11.0" rel="39873.el9.art"/>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 4.10.1-1" date="1742299200">- ossec-execd (server/manager): after active-response stdin/stdout handshake (continue/abort), close child pipes with `wpdetach()` instead of blocking on `waitpid`; reap children in the existing `waitpid(..., WNOHANG)` loop so long-running AR does not stall the exec queue. (See project `CHANGELOG.md` §4.10.1; Windows: `wpdetach` still uses `wpclose` until further process support.)
- active-response: `asl-ipset.sh` — execd JSON shun path (ipset, iptables set ref), `active-responses.log` line per run; see `CHANGELOG.md` §4.10.1.
- Drop `ar-tracking.sh` from extraneous sources (script retired; package install was already disabled).
- Renumber `ossec-hids-authd.service` to Source10.</changelog>
  <changelog author="Atomicorp &lt;support@atomicorp.com&gt; - 4.11.0-1" date="1776600000">- Bump Version to 4.11.0 to align with ossec-hids.spec and current release train.</changelog>
</package>
<package pkgid="af7aef5b7a95d612f9ccc51b53721172689a0e80694dc031ad63e02ba12be787" name="ossec-hids-agent" arch="aarch64">
  <version epoch="1" ver="4.11.0" rel="39897.el9.art"/>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 4.10.1-1" date="1742299200">- ossec-execd (server/manager): after active-response stdin/stdout handshake (continue/abort), close child pipes with `wpdetach()` instead of blocking on `waitpid`; reap children in the existing `waitpid(..., WNOHANG)` loop so long-running AR does not stall the exec queue. (See project `CHANGELOG.md` §4.10.1; Windows: `wpdetach` still uses `wpclose` until further process support.)
- active-response: `asl-ipset.sh` — execd JSON shun path (ipset, iptables set ref), `active-responses.log` line per run; see `CHANGELOG.md` §4.10.1.
- Drop `ar-tracking.sh` from extraneous sources (script retired; package install was already disabled).
- Renumber `ossec-hids-authd.service` to Source10.</changelog>
  <changelog author="Atomicorp &lt;support@atomicorp.com&gt; - 4.11.0-1" date="1776600000">- Bump Version to 4.11.0 to align with ossec-hids.spec and current release train.</changelog>
</package>
<package pkgid="562f651d43c2c4948be31688542ec63d18d61d1fa270b98470c724979fc7c270" name="ossec-hids-agent" arch="aarch64">
  <version epoch="1" ver="4.11.1" rel="40087.el9.art"/>
  <changelog author="Support &lt;support@atomicorp.com&gt; - 4.10.1-1" date="1742299200">- ossec-execd (server/manager): after active-response stdin/stdout handshake (continue/abort), close child pipes with `wpdetach()` instead of blocking on `waitpid`; reap children in the existing `waitpid(..., WNOHANG)` loop so long-running AR does not stall the exec queue. (See project `CHANGELOG.md` §4.10.1; Windows: `wpdetach` still uses `wpclose` until further process support.)
- active-response: `asl-ipset.sh` — execd JSON shun path (ipset, iptables set ref), `active-responses.log` line per run; see `CHANGELOG.md` §4.10.1.
- Drop `ar-tracking.sh` from extraneous sources (script retired; package install was already disabled).
- Renumber `ossec-hids-authd.service` to Source10.</changelog>
  <changelog author="Atomicorp &lt;support@atomicorp.com&gt; - 4.11.0-1" date="1776600000">- Bump Version to 4.11.0 to align with ossec-hids.spec and current release train.</changelog>
</package>
</otherdata>