Merge branch 'master' of github.com:MISP/misp-website

_posts/2021-10-12-MISP.2.4.150.md

@@ -0,0 +1,19 @@
+---
+title: MISP 2.4.150 released (The "Bloody PKI again" hotfix release)
+layout: post
+featured: /assets/images/misp/blog/misp-openapi.png
+---
+
+# MISP 2.4.150 released
+
+MISP 2.4.150 released, including a new CA bundle to combat the issues with the Letsencrypt root CA expiration. This is a follow-up release to 2.4.149 and has no other major changes besides pointing to our own repository of the framework that includes the new CA bundle.
+
+# Sync issues due to the expiration of a Letsencrypt root CA
+
+As described in their [blog post](https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/#:~:text=On%20September%2030%202021%2C%20there,accept%20your%20Let's%20Encrypt%20certificate), Letsencrpyt had to retire an old Root CA, meaning that that SSL connections when synchronising MISP with other instances would fail if the remote side used letsencrypt. This update includes a new CA bundle that should help you avoid any issues with this.# Acknowledgement
+
+We would like to thank all the [contributors](https://www.misp-project.org/contributors), reporters and users who have helped us in the past months to improve MISP and information sharing at large. This release includes multiple updates in [misp-objects](https://www.misp-project.org/objects.html), [misp-taxonomies](https://www.misp-project.org/taxonomies.html) and [misp-galaxy](https://www.misp-project.org/galaxy.html)
+.
+
+As always, a detailed and [complete changelog is available](https://www.misp-project.org/Changelog.txt) with all the fixes, changes and improvements.
+

_posts/2021-11-23-MISP.2.4.151.released.md

@@ -0,0 +1,49 @@
+---
+title: MISP 2.4.151 released (Black friday threat intel rush release)
+layout: post
+featured: /assets/images/misp/blog/misp-openapi.png
+---
+
+# MISP 2.4.151 released
+
+MISP 2.4.151 released including a host of bug fixes and a bunch of new features
+
+# New features
+
+- New background processor by @righel
+- Improvements to the CLI tools
+- Bug fixes and improvements
+
+# New background processor
+
+- MISP has been using CakeResque for its background jobs for the better part of a decade. Whilst it has served us well, the library has been stale for a long time and carries a (for us) unnecesary complexity and is generally the most difficult part of the application to debug
+- Luciano "@righel" Righetti has implemented a completely new, compatible background processing engine using Supervisord
+- Queue and execute jobs the same way as you are used to from before, monitor worker progress via the tools provided by supervisord in addition to MISP
+- No scheduling capabilities, these were an unnecesary overhead for us before as we relied on corn jobs as our prefered scheduling mechanism anyway
+- Expect more improvements to this library over the course of the next months, but feel free to switch to using it already now
+- Currently it is completely optional and the old background processor will still be supported for a while
+- Be aware that manual setup steps are required to get the new processor working, refer to [the upgrade guide](https://gist.github.com/righel/8ebc6c84341f2aea7d0bfa124e535ef8) on the procedure, if you decide to start using it already now
+
+# Various CLI changes
+
+- Jakub Onderka has been doing a fair bit of refactoring and improvement of the CLI libraries
+- additional administrative tools added to help monitor and manage your MISP instance (such as redis memory diagnostics, mysql table optimisation tool, etc)
+
+# Option to move the system settings to the database
+
+- Traditionally all system config settings were stored in the config.php file, with a new configuration thanks to Jakub Onderka's implementation the settings can be moved to the database rather than the file.
+- This should help with persistence for containerised installations
+
+# Various improvements
+
+- The previous version introduced a new STIX library as a replacement for the old one. This change did end up causing some update issues for some installations, the built in updater is now aware of this change and should allow you to easily update via the UI/API updater, with the new STIX library working as intended
+- A long list of improvements, thanks to all contributors! For a detailed list of changes, head over to the [changelog](https://www.misp-project.org/Changelog.txt)
+
+
+# Acknowledgement
+
+We would like to thank all the [contributors](https://www.misp-project.org/contributors), reporters and users who have helped us in the past months to improve MISP and information sharing at large. This release includes multiple updates in [misp-objects](https://www.misp-project.org/objects.html), [misp-taxonomies](https://www.misp-project.org/taxonomies.html) and [misp-galaxy](https://www.misp-project.org/galaxy.html)
+.
+
+As always, a detailed and [complete changelog is available](https://www.misp-project.org/Changelog.txt) with all the fixes, changes and improvements.
+