MISP
/
misp-website
mirror of https://github.com/MISP/misp-website
2
0
Fork 0
Code Issues Releases Wiki Activity

MISP 2.4.79 released

pull/2/head
Alexandre Dulaunoy 2017-08-25 14:45:23 +02:00
parent 6d41eb4758
commit 109d9a8810
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 179 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

179
Changelog.txt
View File

@ -2,6 +2,185 @@ Changelog
========= =========
v2.4.79 (2017-08-25)
--------------------
New
~~~
- Feeds added to the scheduled jobs. [iglocska]
- Opened up the taxonomies actions to the API: [iglocska]
valid APIs:
index, view, enable, disable
- Exposed Feed previews to the API. [iglocska]
- The following can now be fetched via the API (requires site admin access):
CSV, Freetext, MISP feeds: /feeds/previewEvent/[feed_id]
MISP feeds: /feeds/previewIndex/[feed_id]/[event_uuid]
- Added command line tool to enable/disable misp. [iglocska]
- /var/www/MISP/app/Console/cake Live [0|1]
- sets the MISP.live directive
- Add a baseurl changer for shell scripts. [iglocska]
- cake /var/www/MISP/app/Console Baseurl [new baseurl]
Changes
~~~~~~~
- Update for the version release. [iglocska]
- querystring bump
- version bump
- PyMISP version bump
- PyMISP updated. [iglocska]
- Made the current password confirmation requirement for any user
profile edits optional. [iglocska]
- default setting is having it off
- incredibly frustrating feature is now only enabled on demand
- MISP-galaxies updated. [iglocska]
- Restrict tag editor permission to only create tags. [iglocska]
- deleting/eding tags indirectly modifies events created by others
- reduced to site admin only functionality
- Added exit 0 to start.sh to make vagrant happy. [iglocska]
Fix
~~~
- MISP taxonomy updated. [Alexandre Dulaunoy]
- MISP galaxy updated to the latest version. [Alexandre Dulaunoy]
- Fix to the max items displayed / page using the custom pagination
tool. [iglocska]
- Slight improvement to event uuid lookup on the event view. [iglocska]
- Follow redirect from feed pull if the response is a 302. [iglocska]
- Cleanup for feeds fixed. [iglocska]
- Possible fix to the newsread = null issue. [iglocska]
- Fixed a potential persistent cross site scripting in the comments.
[iglocska]
- new tag parser for the comments implemented
- Parser now cleanly pre-constructs the replacement items after finding tag pairs
- This only impacts users of the same instance, as comments are not synchronised
- as reported by Jurgen Jans and Cedric Van Bockhaven from Deloitte
- Further Event index UI fixes. [iglocska]
- Fixed event index for non site admins. [iglocska]
- Attribute view also accessible via UUID. [iglocska]
- Fetch PGP key button goes into endless loading if no key was found.
[iglocska]
- Fixed an obviously dumb validation rule, fixes #2394. [iglocska]
- derp
- Fixed a group by issue with the event filter overlay. [iglocska]
- Misaligned event index for read only users fixed, fixes #2397.
[iglocska]
- Fixed mistyped field. [iglocska]
- Fixes to the galaxy import tool. [iglocska]
- MISP taxonomies updated to the latest version. [Alexandre Dulaunoy]
- Fix double pagination of data in the taxonomies controller, fixes
#2399. [iglocska]
- Added event_uuid to attribute view. [iglocska]
- Remove the notice thrown if no valid user exists for the given e-mail.
[iglocska]
- Fixed the XML output for the restresponse library. [iglocska]
- Fixes to several issues with the template editor, fixes #2387, fixes
#2388. [iglocska]
- Several fixes to the template editor. [iglocska]
- Fixes to issues introduced by the ajax JSON rework, fixes #2384.
[iglocska]
- Tightening the sanitisation of indicators for the e-mail alerts.
[iglocska]
- Fixes to several cases of reflected XSS, fixes #2381. [iglocska]
- as reported by @import-au
- Additionally enforce content-type on all async APIs called by the UI using CakeResponse
Other
~~~~~
- Merge branch '2.4' of https://github.com/MISP/MISP into 2.4.
[iglocska]
- Merge branch '2.4' of https://github.com/MISP/MISP into 2.4.
[iglocska]
- Merge pull request #2419 from RichieB2B/patch-1. [Andras Iklody]
Make newsread numeric instead of boolean
- Make newsread numeric instead of boolean. [Richie B2B]
Fixes #2394
- Merge pull request #2415 from CheYenBzh/2.4. [Andras Iklody]
Baseurl miss in events filter
- Baseurl miss in events filter. [Antoine Callac]
Minor change, adding baseurl for events search
- Merge pull request #2412 from cedricbonhomme/vagrant-dev-environment.
[Alexandre Dulaunoy]
Vagrant dev environment
- Updated default values for OpenSSL and GPG. [Cédric Bonhomme]
- Updated default values for OpenSSL and GPG. [Cédric Bonhomme]
- Merge pull request #2410 from cedricbonhomme/vagrant-dev-environment.
[Andras Iklody]
Introduction of a development environment based on Vagrant
- Fixed group owner of the MISP installation. [Cédric Bonhomme]
- Updateg .gitignore: ignore Vagrant log files and VM related files.
[Cédric Bonhomme]
- Updated README. [Cédric Bonhomme]
- Updated README. [Cédric Bonhomme]
- Updated README. [Cédric Bonhomme]
- Added Vagrant configuration files for a development environment.
[Cédric Bonhomme]
- Added Vagrant configuration files for a development environment.
[Cédric Bonhomme]
- Merge branch '2.4' of https://github.com/MISP/MISP into 2.4.
[iglocska]
- Merge pull request #2405 from RichieB2B/patch-3. [Andras Iklody]
Add Change Password link to profile view
- Add Change Password link to profile view. [Richie B2B]
Make it easier for users to change their password
- Merge branch '2.4' of https://github.com/MISP/MISP into 2.4.
[iglocska]
- Merge pull request #2404 from RichieB2B/patch-2. [Andras Iklody]
Initialize $abortPost in edit()
- Initialize $abortPost in edit() [Richie B2B]
Avoid notices about "Undefined variable: abortPost" in debug.log
- Merge branch '2.4' of https://github.com/MISP/MISP into 2.4.
[iglocska]
- Merge pull request #2402 from RichieB2B/patch-1. [Andras Iklody]
Rebuild _authenticateObjects cache in mixed authentication setups
- Rebuild _authenticateObjects cache in mixed authentication setups.
[Richie B2B]
When CertAuth is mixed with normal FormAuthentication the upgrade from Simple to Blowfish did not happen because of the internal _authenticateObjects cache. Calling constructAuthenticate() rebuilds this cache.
- Merge branch '2.4' of https://github.com/MISP/MISP into 2.4.
[iglocska]
- Merge pull request #2389 from truckydev/expose-galaxies-lit-to-api.
[Andras Iklody]
Expose galaxies lit to api
- Update GalaxiesController.php. [truckydev]
- Update GalaxiesController.php. [truckydev]
- Update GalaxiesController.php. [truckydev]
- Merge branch '2.4' of https://github.com/MISP/MISP into 2.4.
[iglocska]
- Merge pull request #2385 from cedricbonhomme/fix-command-line-tool-to-
enable-disable-MISP. [Andras Iklody]
Fixed error: 'Value is not a boolean, make sure that you convert 'tru…
- Fixed error: 'Value is not a boolean, make sure that you convert
'true' to true for example.' when enabling/disabling MISP with the
command line tool. [Cédric Bonhomme]
v2.4.78 (2017-08-06) v2.4.78 (2017-08-06)
-------------------- --------------------