# changelog

author: Kamil Dudka <kdudka@redhat.com> 7.19.7-37.el6_5.1
changelog:
  - refresh expired cookie in test172 from upstream test-suite (#1092486)
  - fix a memory leak caused by write after close (#1092479)
  - nss: implement non-blocking SSL handshake (#1092480)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-37.el6_5.3
changelog:
  - fix re-use of wrong HTTP NTLM connection (CVE-2014-0015)
  - fix connection re-use when using different log-in credentials (CVE-2014-0138)


author: Support <support@atomicorp.com> - 4.0.19-37
changelog:
  - Add ASL Kernel IPMI modules to load by default
  - Bugfix #2020, rkhunter_check, fixed condition where module would exit instead of returning
  - Bugfix #2022, mod_evasive, correct mod_evasive24 whitelist condition
  - Bugfix #XXXX, Upate ASL Web, Adds human readable message to ASL Web when it fails to read the lang file
  - Bugfix #XXXX, T-WAF fixes hard coded port numbers in t-waf conf gen
  - Bugfix #XXXX, AUM, removes feed_source condition on updating config from key values
  - Bugfix #XXXX, ASL Web, fixes ip link in events search table result window
  - Bugfix #XXXX, ASL Web fixes 0 value insert to datetime field  in aslw_mtimes


author: Support <support@atomicorp.com> - 5.0.0-150
changelog:
  - New ASL Web Interface
  - Firewall Interrogator
  - Kernel 4.4 support
  - OSSEC 2.9
  - Docker support
  - Multi-PHP support
  - Cpanel easyapache 4 support
  - Feature Request #1641, Firewall, active response is written to the INPUT table, it should be written to the ACTIVE-RESPONSE table
  - Feature Request #1747, T-WAF, raise limits in tortixd.conf if configured as a local T-WAF
  - Feature request #1876, WAF, add lua rule checks to waf report
  - Feature Request #1955, Firewall, Lint /etc/asl/whitelist for valid IP's and CIDR blocks
  - Feature Request #2037, SSH,  For UseDNS off on cpanel systems
  - Feature Request #2050, HIDS, Configure OSSEC HELO message
  - Feature Request #2055, Add support for Openvz/Virtuozzo Linux 7.0
  - Feature Request #2067, T-WAF, Add SSLCertificateChainFile to the T-WAF configuration options
  - Feature request #2095, ASL Web,  Help dialog
  - Feature Request #2096, SSH, add AllowTCPForwarding check
  - Feature Request #2102, SSH, add AllowX11Forwarding check
  - Feature Request #XXXX, HIDS, add support for user defined per-rule active responses
  - Feature Request #XXXX, HIDS, Add support for a user defined list of logs to monitor: /etc/asl/logfiles. Format: <file>,<ossec-type>
  - Feature Request #XXXX, HIDS, dynamic scaling for real-time filesystem monitoring inotify watches
  - Bugfix #1782, Plesk, fix scoreboard file in proftpd opture input for f_am_local_port
  - Bugfix #1906, WAF, add bzip2 and libapache2-modsecurity as debian/ubuntu dependencies
  - Bugfix #1924, ALLOW_eval setting has no effect. This is not a function, and thus, cannot be disabled
  - Bugfix #1944, Malware Detection, cpanel ftp upload scanner
  - Bugfix #1947, Auditdir and Tmp dir for WAF were immutable
  - Bugfix #1949, Vulnerability scanner, Error: could not find general_firewall_ftp_mod
  - Bugfix #1962, remove duplicate hmac lines
  - Bugfix #1978, Firewall, alert if the asl-firewall service is disabled and show a big red X on the gui
  - Bugfix #1979, Watchdog, _watchdog::watchdog_check 9901 ASLCommon::cmd_system ERROR: '/etc/init.d/psmon restart (1)'
  - Bugfix #1991, cpanel remote rule support
  - Bugfix #2001, Firewall, detect if VPS supports low number of rules
  - Bugfix #2002, Firewall, add locking to ASL firewall to prevent overlap with asl-shun events on long policy loading.
  - Bugfix #2020, Rootkit detection, replaced exits in rkhunter_check with returns
  - Bugfix #2022, DoS, correct mod_evasive24 whitelist condition
  - Bugfix #2024, Kernel, Runtime module loading: fixed [FIXED]
  - Bugfix #2076, Firewall, prevent /32 from being added to /etc/asl/whitelist
  - Bugfix #XXXX, Cpanel, for cpanel's use of ~/.my.cnf. 
  - Bugfix #XXXX, HIDS, for custom rule support in OSSEC. This restricts rule removal to just asl channel ossec files.
  - Bugfix #XXXX, for SSL settings to handle "custom" condition (alert but dont fix) and ASL Web unable to handle + in a named field. Additionally for backwards compatibility we are maintaining APACHE_SSLPROTOCOL as TLS+SSLv3 and TLS/SSLv3
  - Bugfix #XXXX, Firewall, the ratelimit hitcount has a max ceiling of 20, unless kernel modules are manipulated. This fix will lower this to 20 if a higher value is selected.
  - Bugfix #XXXX, cpanel, for Cpanel clamav integration on EL7
  - Bugfix #XXXX, cpanel, automatic exclusion for virtfs in the real-time malware detection system.
  Bugfixes
  - Bugfix #1782, Plesk, fix scoreboard file in proftpd on plesk 12+
  - Bugfix #1714, HIDS, do not monitor files that are symbolic links. Prevents event duplication
  - Bugfix #1829, Watchdog, only activate psmon if it has services to monitor
  - Bugfix #1863, Vulnerabiltiy Report, suppress lsof warnings during ASL Report
  - Bugfix #1897, ASL Web, Condition added in ASLWWindow.waf_config.js to capture input for f_am_local_port
  - Bugfix #1906, WAF, add bzip2 and libapache2-modsecurity as debian/ubuntu dependencies
  - Bugfix #1924, ALLOW_eval setting has no effect. This is not a function, and thus, cannot be disabled
  - Bugfix #1944, Malware Detection, cpanel ftp upload scanner
  - Bugfix #1947, Auditdir and Tmp dir for WAF were immutable
  - Bugfix #1949, Vulnerability scanner, Error: could not find general_firewall_ftp_mod
  - Bugfix #1962, remove duplicate hmac lines
  - Bugfix #1978, Firewall, alert if the asl-firewall service is disabled and show a big red X on the gui
  - Bugfix #1979, Watchdog, _watchdog::watchdog_check 9901 ASLCommon::cmd_system ERROR: '/etc/init.d/psmon restart (1)'
  - Bugfix #1991, cpanel remote rule support
  - Bugfix #2001, Firewall, detect if VPS supports low number of rules
  - Bugfix #2002, Firewall, add locking to ASL firewall to prevent overlap with asl-shun events on long policy loading.
  - Bugfix #2020, Rootkit detection, replaced exits in rkhunter_check with returns
  - Bugfix #2022, DoS, correct mod_evasive24 whitelist condition
  - Bugfix #2024, Kernel, Runtime module loading: fixed [FIXED]
  - Bugfix #2076, Firewall, prevent /32 from being added to /etc/asl/whitelist
  - Bugfix #XXXX, Cpanel, for cpanel's use of ~/.my.cnf. 
  - Bugfix #XXXX, HIDS, for custom rule support in OSSEC. This restricts rule removal to just asl channel ossec files.
  - Bugfix #XXXX, for SSL settings to handle "custom" condition (alert but dont fix) and ASL Web unable to handle + in a named field. Additionally for backwards compatibility we are maintaining APACHE_SSLPROTOCOL as TLS+SSLv3 and TLS/SSLv3
  - Bugfix #XXXX, Firewall, the ratelimit hitcount has a max ceiling of 20, unless kernel modules are manipulated. This fix will lower this to 20 if a higher value is selected.
  - Bugfix #XXXX, cpanel, for Cpanel clamav integration on EL7
  - Bugfix #XXXX, cpanel, automatic exclusion for virtfs in the real-time malware detection system.


author: Support <support@atomicorp.com> - 2.9.0-30
changelog:
  - Link against atomic-curl to isolate the curl/ssl issue with NSS (SSL connect error) issue with PHP curl
  	when it is linked against the native curl library.


