OSSEC

v4.1.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 7d Forensics & Incident Response

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

compliance file-integrity-management fim hids intrusion-detection loganalyzer

+5 more

nist800-53 ossec pci-dss policy-monitoring security

Affected surfaces

auth deps

Summary

AI summary

Broad release touches https://github.com/ossec/ossec-hids/pull/2181, https://github.com/ossec/ossec-hids/pull/2195, https://github.com/ossec/ossec-hids/pull/2183, and https://github.com/ossec/ossec-hids/pull/2185.

Full changelog

OSSEC changelog (4.1.0)

Release Maintainers

Dan Parriott

Scott R. Shinn (https://www.atomicorp.com)

Contributors on this release

@atomicturtle
@mobstef

Release Notes

Key enhancements include SMTP authentication support, IPv6 whitelisting improvements, and support for large files (>2GB). This release also includes multiple bug fixes for analysisd and logcollector crashes. This changelog is not yet complete

Security Fixes

@atomicturtle - PR 2181 - Increase default decoder field limit to 256 to support complex log formats
@atomicturtle - PR 2195 - Add SMTP TLS and authentication support to maild and monitord

General

@atomicturtle - PR 2183 - CentOS 7 build fixes and C99 adjustments
@atomicturtle - PR 2185 - Add support for Rocky Linux 9
@atomicturtle - PR 2186 - Fix agent_control -l output formatting and ICMP logging
@atomicturtle - PR 2192 - Spec file improvements for RPM packaging
@mobstef - PR 2194 - Fix Lua symlink targets in build process
@atomicturtle - PR 2196 - Add GitHub Actions for automated Linux builds
@atomicturtle - PR 2197 - Add GitHub Actions for automated Windows builds
@atomicturtle - PR 2198 - Increase OS_MAXSTR to 6144 to prevent log truncation
@atomicturtle - PR 2200 - Improve IPv6 whitelisting and support in install.sh
@atomicturtle - PR 2201 - Enable large file support (>2GB) in Makefile and hash operations

Bug Fixes

@atomicturtle - PR 2162 - Fix Windows version reporting and DB reconnection logic
@atomicturtle - PR 2184 - Fix false positive in rootcheck for /dev/shm
@atomicturtle - PR 2187 - Fix memory leak in logcollector and initialize DH parameters in os_auth
@atomicturtle - PR 2188 - Fix crash in analysisd on sid_prev_matched list overflow
@atomicturtle - PR 2191 - Fix segfault in analysisd with custom decoders and LibMagic
@atomicturtle - PR 2199 - FIM: handle missing fields in syscheck logs and update Windows manifest IDs

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track OSSEC

Get notified when new releases ship.

About OSSEC

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

All releases →

OSSEC

Summary

Related context

Related tools