diff --git a/content/blog/MISP.2.4.164.released.md b/content/blog/MISP.2.4.164.released.md new file mode 100644 index 0000000..e8c722a --- /dev/null +++ b/content/blog/MISP.2.4.164.released.md @@ -0,0 +1,31 @@ +--- +title: MISP 2.4.164 released with new tag relationship feature, improvements and a security fix +date: 2022-10-10 +layout: post +banner: /img/blog/periodic-summary/periodic-summary-2.png +--- + +We are pleased to announce the immediate availability of [MISP v2.4.164](https://github.com/MISP/MISP/releases/tag/v2.4.164) with a new tag relationship features, many improvements and a security fix. + +# New tag relationship feature + +Relationship can now be added to any attribute tag or event tag. This works with tags and galaxy clusters. The new feature is available in event view. + +The tag relationship feature is also exposed in the API under the endpoint `/tags/modifyTagRelationship/[scope]/[id]` where `scope` is the attribute/event and `id` is the id of the EventTag / AttributeTag object. + +# Improvements and bug fixes + +- [periodic_report] Added security recommendations section showing course of actions related to attack techniques. +- [workflow] add support for `local` and `relationship` in workflow. +- [API/galaxyCluster/restSearch] Allow multiple filtering conditions to be used at once. +- [EventGraph] Added entity comment in the graph as tooltip and support of comment in searches. +- [UI] Many improvements and optimisation. + +# CVE-2022-42724 + +This release fix a security vulnerabilities ([CVE-2022-42724](https://cvepremium.circl.lu/cve/CVE-2022-42724)) which allows org admin to discover role names which should have been restricted to site admin. + +We strongly recommend MISP administrator to update to this latest version. + +For a more detailed changelog, please see the online [Changelog](https://www.misp-project.org/Changelog.txt). +