From 624398c2d10d64bab6f85c89057e69802d81372d Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Fri, 26 Jun 2020 14:45:54 +0200 Subject: [PATCH] new: [blog] MISP 2.4.128 release --- _posts/2020-06-24-MISP.2.4.128.released.md | 32 ++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 _posts/2020-06-24-MISP.2.4.128.released.md diff --git a/_posts/2020-06-24-MISP.2.4.128.released.md b/_posts/2020-06-24-MISP.2.4.128.released.md new file mode 100644 index 0000000..8ea3ea8 --- /dev/null +++ b/_posts/2020-06-24-MISP.2.4.128.released.md @@ -0,0 +1,32 @@ +--- +title: MISP 2.4.128 released (STIX import/export refactored release edition) +layout: post +featured: /assets/images/misp/blog/decay.png +--- + +# MISP 2.4.128 released + +A new version of MISP ([2.4.128](https://github.com/MISP/MISP/tree/v2.4.128)) has been released with a significant refactoring of the STIX import/export, many improvements and bugs fixed. + +# STIX 2 and 1 major refactoring and improvements + +A major refactoring of the STIX (version 1 and version 2) import/export has been performed by Christian Studer. We invite you to read the [Changelog](https://www.misp-project.org/Changelog.txt) for the complete set of changes and improvements. The most significant change is the import of threat-actor, tools and alike. The import process now does an automatically mapping with potential existing galaxies. As an example, if a synonym of a threat-actor is found in the original STIX file, the import will add the existing MISP galaxy with the appropriate threat-actor. It also works with tags. + +# Security fix + +- [CVE-2020-14969](https://cve.circl.lu/cve/CVE-2020-14969) <= MISP 2.4.128 - app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This occurs when querying the attribute restsearch API, revealing metadata about a correlating but unreachable attribute. + +# New features + +- [correlations] Enable CIDR correlations for ip-src|port and ip-dst|port types +- [widget] Authentication failure widget added to provide a dashboard from [D4 project](https://www.d4-project.org/). + +Many other improvements are documented in the [complete changelog is available](https://www.misp-project.org/Changelog.txt). + +# Acknowledgement + +We would like to thank all the [contributors](https://www.misp-project.org/contributors), reporters and users who have helped us in the past months to improve MISP and information sharing at large. This release includes multiple updates in [misp-objects](https://www.misp-project.org/objects.html), [misp-taxonomies](https://www.misp-project.org/taxonomies.html) and [misp-galaxy](https://www.misp-project.org/galaxy.html). + +As always, a detailed and [complete changelog is available](https://www.misp-project.org/Changelog.txt) with all the fixes, changes and improvements. + +