MISP
/
misp-website
mirror of https://github.com/MISP/misp-website
2
0
Fork 0
Code Issues Releases Wiki Activity

new: [blog] MISP 2.4.128 release

pull/22/head
Alexandre Dulaunoy 2020-06-26 14:45:54 +02:00
parent 83246a2111
commit 624398c2d1
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 32 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
_posts/2020-06-24-MISP.2.4.128.released.md Normal file
View File

@ -0,0 +1,32 @@
---
title: MISP 2.4.128 released (STIX import/export refactored release edition)
layout: post
featured: /assets/images/misp/blog/decay.png
---
# MISP 2.4.128 released
A new version of MISP ([2.4.128](https://github.com/MISP/MISP/tree/v2.4.128)) has been released with a significant refactoring of the STIX import/export, many improvements and bugs fixed.
# STIX 2 and 1 major refactoring and improvements
A major refactoring of the STIX (version 1 and version 2) import/export has been performed by Christian Studer. We invite you to read the [Changelog](https://www.misp-project.org/Changelog.txt) for the complete set of changes and improvements. The most significant change is the import of threat-actor, tools and alike. The import process now does an automatically mapping with potential existing galaxies. As an example, if a synonym of a threat-actor is found in the original STIX file, the import will add the existing MISP galaxy with the appropriate threat-actor. It also works with tags.
# Security fix
- [CVE-2020-14969](https://cve.circl.lu/cve/CVE-2020-14969) <= MISP 2.4.128 - app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This occurs when querying the attribute restsearch API, revealing metadata about a correlating but unreachable attribute.
# New features
- [correlations] Enable CIDR correlations for ip-src|port and ip-dst|port types
- [widget] Authentication failure widget added to provide a dashboard from [D4 project](https://www.d4-project.org/).
Many other improvements are documented in the [complete changelog is available](https://www.misp-project.org/Changelog.txt).
# Acknowledgement
We would like to thank all the [contributors](https://www.misp-project.org/contributors), reporters and users who have helped us in the past months to improve MISP and information sharing at large. This release includes multiple updates in [misp-objects](https://www.misp-project.org/objects.html), [misp-taxonomies](https://www.misp-project.org/taxonomies.html) and [misp-galaxy](https://www.misp-project.org/galaxy.html).
As always, a detailed and [complete changelog is available](https://www.misp-project.org/Changelog.txt) with all the fixes, changes and improvements.