# changelog

author: Support <support@atomicorp.com> - 6.2.1-1
changelog:
  - ossec-installer: Hub-aligned GPG key basenames (legacy vs modern) matching packaged RPM-GPG-KEY files
  - ossec-installer: Debian trixie APT uses modern key; other deb suites use legacy
  - ossec-installer: Fix extra bracket in legacy sources.list deb line


author: Support <support@atomicorp.com> - 6.3.0-1
changelog:
  - Release 6.3.0
  - Apache HSTS: template under /var/awp/data/templates/apache/hsts.conf; %post copies to /etc/httpd/conf.d/awp-hub-hsts.conf when httpd layout is present; reload httpd if active; %postun removes drop-in on uninstall


author: Support <support@atomicorp.com> - 6.3.1-1
changelog:
  - ossec-installer, installer.sh (Solaris 11): install AWPclamav SVR4 from hub; remove OpenCSW path and --opencsw-repo
  - Solaris: AWPclamav-latest.sol11.art.<arch>.pkg on hub; POSIX sed/awk defaults without CSW


author: Support <support@atomicorp.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - Added ossec service files for agent/server
  - Basic SElinux policy in %post
  - Reduced external dependencies


author: Support <support@atomicorp.com> - 4.0.0-1
changelog:
  - Update to 4.0.0
  - Critical security fixes for memory safety
  - Modernized FIM with SHA-256 support
  - Default AES encryption for agents


author: support <support@atomicorp.com> - 0.2-29669
changelog:
  - Adds download response code checking
  - Checks for decoders.d in ossec.conf in prereq
  - Adds dependency checks for which
  - Returns output when no updates are available
  - Checks for username/password configuration
  - Adds support for alternate update parameter: upgrade
  - Bugfix: Fixes threatfeed version detection


author: Scott R. Shinn <scott@atomicorp.com> - 0.36.2-2
changelog:
  - Fix user/group dependency issue in RPM installation
  - Remove upstream Go toolchain download, use distro golang package


author: Scott R. Shinn <scott@atomicorp.com> - 2.0.0-1
changelog:
  - Add Windows WSUS CAB (wsusscn2.cab) support for Windows vulnerability scanning
  - New ENABLE_WSUSCAB and optional WSUSCAB_URL in vuls-scanner.conf
  - Downloads wsusscn2.cab to /var/lib/vuls/ for offline CAB mode (serverSelection=3)


