chg: [ChangeLog] updated to MISP 2.4.124

pull/21/head
Alexandre Dulaunoy 2020-04-01 15:09:53 +02:00
parent e284b60851
commit b68234b895
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 213 additions and 0 deletions

View File

@ -1,6 +1,219 @@
Changelog Changelog
========= =========
v2.4.124 (2020-03-30)
---------------------
New
~~~
- [attributes:massEdit] Possibility to create proposals instead of edit.
[mokaddem]
- Add support for RHEL in the install script. [Golbark]
- [audit] Added user monitoring. [iglocska]
- site admins can set the monitoring flag on a user if the feature is enabled on the instance
- monitored users will have all requests logged along with POST bodies
- keep in mind this functionality is quite heavy and intrusive - so use it with care. The idea is that this allows us to track potentially malicious users during an investigation
- [UI] indexTable new fields / some refactoring. [iglocska]
- [helper:scopedCSS] Moved implementation in a helper. [mokaddem]
- Country galaxy generator. [iglocska]
- [dashboard] multi line chart UI added. [iglocska]
Changes
~~~~~~~
- [server:dbSchemaDiagnostic] UI Improvement to hide tables containing
only non-critical entries. [mokaddem]
- [security] Added setting to restrict the encoding of local feeds.
[iglocska]
- By adding local feeds, a malicious administrator could point MISP to ingest configuration files that the apache user has access to
- This includes some more sensitive files (database.php / config.php / .gnupg data)
- Whilst this is currently not leading to an exploitable vulnerability as the current implementation wouldn't trigger on the values,
having a setting to disable this will become much more interesting once we have a system in place for custom feed parsers
- The setting can only be enabled/disabled via the CLI
- As reported by Matthias Weckbecker
- Bump PyMISP. [Raphaël Vinot]
- [version] bump. [iglocska]
- [publish alert] default added to user creation via the API. [iglocska]
- Bumped queryversion. [mokaddem]
- [attribute:edit] Added support of chosen - fix #5736. [mokaddem]
- [widgets:mutliline] Usage of bootstrap's tooltip and fixed another
loading race-condition. [mokaddem]
- [alert] emails now have instructions on how to disable them.
[iglocska]
- [widgets:multiline] Added possibility to pick datapoint and see the
deltas. [mokaddem]
- [warninglist] bump. [iglocska]
- [warninglist] bump. [iglocska]
- [genericElement:indexTable-links] Allow to craft an URL with custom
data_path. [mokaddem]
- [genericElement:IndexTable] Allow to pass pagination options to
paginator element. [mokaddem]
- [widgets:multilines] Improved tooltip placement strategy. [mokaddem]
- [taxonomies] bumped. [iglocska]
- [widgets:multiline] Improved label wrapping. [mokaddem]
- [widgets:multiline] Integrated CSS and new config `hideAxis`
[mokaddem]
- [widgets:worlmap] Resize map on widget container resize. [mokaddem]
- [widgets:ui] Added possibility to listen to widget-resize events.
[mokaddem]
- [widgets:multiline] Support of linear x-axis. [mokaddem]
- [widgets:multiline] Pass widget_config to the view. [mokaddem]
- [widgets:multiline] Flip tooltip position if necessary. [mokaddem]
- [widgets:multiline] Adapt left margin for big numbers. [mokaddem]
- [widgets:multiline] Added more Options, datapoints and total serie.
[mokaddem]
- [widgets:multiline] Layout, UI and interactivity improvements - WiP.
[mokaddem]
- [galaxy:view] Commented `altered galaxy` for now. [mokaddem]
- [galaxyCluster:index] Migrated to use the genericElement factory +
added sparkline and icon genericIndex fields. [mokaddem]
- [galaxyCluster:view] Migrated to use the genericElement factory.
[mokaddem]
- [galaxy:index] Cleaned up artifacts from galaxy2.0. [mokaddem]
- [galaxy:view] Migrated to use the genericElement factory. [mokaddem]
- [galaxy:index] Migrated to use the genericElement factory. [mokaddem]
- [views:genericElements] Multiple addition and improvements for generic
IndexTable, TopBar and Form. [mokaddem]
- [feeds metadata] fix incorrect timestamp field. [Alexandre Dulaunoy]
- [style] Added spaces in JSON used for the automation examples.
[iglocska]
- [community] CogSec Collab disinformation sharing community :D. [VVX7]
- [taxonomies] updated to the latest version. [Alexandre Dulaunoy]
- [galaxy] bump. [iglocska]
- [helper:ScopedCSS] Usage of PHP_EOL. [mokaddem]
- [scopedCSS] Added more doc and allow having scoped and not scoped mix.
[mokaddem]
- [scopedCSS] Simplified usage and added documentation. [mokaddem]
- [widgets:multiline] Switched to scoped css usage. [mokaddem]
- [widgets] Added support of scoped CSS. [mokaddem]
- [travis] cat exec errors file. [Raphaël Vinot]
Fix
~~~
- [sync] Added function to handle older MISP instances despite the new
way of passing org filter options. [iglocska]
- [event:view] Show correct number of related events to be shown - Fix
#5732. [mokaddem]
- [objecs:reviseObject] Pass forgotten template data - Fix #5733.
[mokaddem]
- [event index] org filter correctly accepts array in addition to pipe
delimited values. [iglocska]
- fixes pull org filters
- [emailing] Added setting for default publish alert behaviour when
creating new users. [iglocska]
- [installer] Updated installer checksums. [Steve Clement]
- [attribute:edit] Create chosen picker when modal is shown. [mokaddem]
- [eventGraph:picture] Take correct Attribute picture's name. [mokaddem]
- [widget:mutlieline] Take into account scrollY position. [mokaddem]
- [widgets:multiline] Racecondition executing `init` and fetching d3.js
twice. [mokaddem]
- [pull] pull filters fixed. [iglocska]
- [widgets:multiline] Ensure that d3.js is loaded only once. [mokaddem]
- [widgets:SimpleList] Fit minimum vertical space. [mokaddem]
- [widgets:multiline] Correctly parse boolean text for `showAxis`
[mokaddem]
- [galaxy:view] View altered galaxies/clusters buttton correctly
redirect. [mokaddem]
- [php] compatibility with older versions. [iglocska]
- [servers:pull_rules] Allows sync parameter rules to be above 40 chars.
[Sami Mokaddem]
- [message] user creation shouldn't include the "User notified of new
credentials" part of the notification mesage if emailing is disabled.
[iglocska]
- [install] Updated installer and checksums. [Steve Clement]
- [INSTALL] Properly run tests. [Raphaël Vinot]
- [suricata] fixed an invalid validation of https hostnames that blocked
the attributes from being included in the exports. [iglocska]
- [dashboard] css conflict resolved. [iglocska]
- in a really hacky way for now
- [side menu] Fixed Dashboard link from the side menu in the statistic
view. [chrisr3d]
- [thread:view] Threads are no longer rendered for not related Event on
rare occasion. [mokaddem]
- [user:login] Added support of `RFC822` for older PHP version.
[mokaddem]
- [stix export] Fixed cybox object import. [chrisr3d]
Other
~~~~~
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [iglocska]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [mokaddem]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [iglocska]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [iglocska]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [mokaddem]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [iglocska]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [mokaddem]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [iglocska]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [iglocska]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [mokaddem]
- Merge pull request #5643 from Kortho/patch-3. [Steve Clement]
fixed python venv creation command
- Fixed python venv creation command. [Kortho]
The command for creating virtual environment in RHEL was wrong, fixed it :)
- Merge pull request #5706 from RichieB2B/ncsc-nl/venv-ssdeep. [Steve
Clement]
Fix venv and ssdeep for RHEL 7
- Update INSTALL.rhel7.md. [Steve Clement]
- Install ssdeep PHP module on RHEL 7. [Richard van den Berg]
- Fix virtualenv creation on RHEL 7. [Richard van den Berg]
- Merge pull request #5705 from Golbark/redhat-install-script-support.
[Steve Clement]
new: usr: add support for RHEL in the install script
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [mokaddem]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [iglocska]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [mokaddem]
- Merge pull request #5721 from stricaud/debian2. [Andras Iklody]
Debian improvements
- Add installation files: workers and VERSION.json. [Sebastien Tricaud]
- Adding missing packages. [Sebastien Tricaud]
- Adding compat file. [Sebastien Tricaud]
- Bump version in changelog. [Sebastien Tricaud]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [iglocska]
- Merge branch 'feature-widget-multipleline' into 2.4. [mokaddem]
- Merge branch '2.4' of github.com:MISP/MISP into feature-widget-
multipleline. [mokaddem]
- Merge branch '2.4' of github.com:MISP/MISP into view-migration-galaxy.
[mokaddem]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [iglocska]
- Merge branch 'GlennHD-2.4' into 2.4. [Alexandre Dulaunoy]
- Merge branch '2.4' of https://github.com/GlennHD/MISP into
GlennHD-2.4. [Alexandre Dulaunoy]
- Fixed indentation of DigitalSide & Metasploit CVEs. [GlennHD]
Fixed indentation of DigitalSide & Metasploit CVEs to align with others.
- Added Malware Bazaar. [GlennHD]
Added abuse.ch Malware Bazaar
- Merge pull request #5717 from VVX7/2.4. [Andras Iklody]
chg: [community] CogSec Collab disinformation sharing community :D
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [iglocska]
- Merge pull request #5707 from MISP/feature-widgets-scoped-css. [Andras
Iklody]
Scoped css for widget
- Merge branch '2.4' of github.com:MISP/MISP into feature-widgets-
scoped-css. [mokaddem]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [iglocska]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [iglocska]
- Merge pull request #5697 from MISP/chrisr3d_patch. [Andras Iklody]
Fix link to the dashboard from the statistics page
- Merge remote-tracking branch 'origin/2.4' into chrisr3d_patch.
[chrisr3d]
- Merge branch '2.4' of github.com:MISP/MISP into 2.4. [chrisr3d]
v2.4.123 (2020-03-10) v2.4.123 (2020-03-10)
--------------------- ---------------------