misp-website/content/blog/2021-10-12-MISP.2.4.150.md

21 lines
1.5 KiB
Markdown
Raw Normal View History

2021-11-23 10:58:09 +01:00
---
title: MISP 2.4.150 released (The "Bloody PKI again" hotfix release)
2021-12-24 08:02:55 +01:00
date: 2021-10-12
2021-11-23 10:58:09 +01:00
layout: post
2021-12-24 08:02:55 +01:00
banner: /img/blog/letsencrypt-logo-horizontal.png
2021-11-23 10:58:09 +01:00
---
# MISP 2.4.150 released
MISP 2.4.150 released, including a new CA bundle to combat the issues with the Letsencrypt root CA expiration. This is a follow-up release to 2.4.149 and has no other major changes besides pointing to our own repository of the framework that includes the new CA bundle.
# Sync issues due to the expiration of a Letsencrypt root CA
As described in their [blog post](https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/#:~:text=On%20September%2030%202021%2C%20there,accept%20your%20Let's%20Encrypt%20certificate), Letsencrpyt had to retire an old Root CA, meaning that that SSL connections when synchronising MISP with other instances would fail if the remote side used letsencrypt. This update includes a new CA bundle that should help you avoid any issues with this.# Acknowledgement
We would like to thank all the [contributors](https://www.misp-project.org/contributors), reporters and users who have helped us in the past months to improve MISP and information sharing at large. This release includes multiple updates in [misp-objects](https://www.misp-project.org/objects.html), [misp-taxonomies](https://www.misp-project.org/taxonomies.html) and [misp-galaxy](https://www.misp-project.org/galaxy.html)
.
As always, a detailed and [complete changelog is available](https://www.misp-project.org/Changelog.txt) with all the fixes, changes and improvements.