MISP
/
misp-website
mirror of https://github.com/MISP/misp-website
2
0
Fork 0
Code Issues Releases Wiki Activity

MISP release 2.4.89

pull/4/head
Alexandre Dulaunoy 2018-03-23 15:05:02 +01:00
parent 120b2f2454
commit f78fa004ce
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 33 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
_posts/2018-03-23-MISP.2.4.89.released.md Executable file
View File

@ -0,0 +1,33 @@
---
title: MISP 2.4.89 released (aka Event graph viewer/editor)
layout: post
featured: /assets/images/misp-small.png
---
A new version of MISP [2.4.89](https://github.com/MISP/MISP/tree/v2.4.89) has been released including a new MISP event graph viewer/editor, many API improvements and critical bug fixes (including security related bug fixes).
We introduced a new functionality allowing analysts and MISP users to view objects and attributes via a graphical visualisation. The event graph view supports the ability to edit objects, attributes and create easily relationships. We foreseen many extensions to the event graph in the future.
<div class="myvideo">
<video style="display:block; width:100%; height:auto;" autoplay controls loop="loop">
<source src="{{ site.baseurl }}/assets/images/misp/video/event-graph.webm" type="video/webm" />
</video>
</div>
In addition to STIX 2.0, MISP now supports STIX 2.0 file format import from the UI. Significant improvements were made in the parsers for STIX 1.x and STIX 2.0 to support additional files. Don't hesitate to send us sample files which don't work as expected. Add a clarification in the STIX import to describe that the STIX format can be lossy compared to the MISP standard format.
API was significantly improved including attribute UUID in attribute level restSearch, deleteAttributes API can now mass-delete and many improvements.
Two security bugs were fixed:
- Sanitisation is now properly done from misp-modules especially to avoid XSS from potential malicious expansion modules.
- An API integrity bug where an authenticated user could edit and overwrite an attribute without the UUID set.
Another important fix was done on objects handling where in specific conditions could be overwritten. A recovery tool has been added in the diagnostics page.
Tons of bug fixes and minor improvement were done. [Changelog](http://www.misp-project.org/Changelog.txt) contains the complete list of what's changed from version 2.4.88.
We would like to thank all the contributors who helped to fix bugs, contributed new features or support us to release this version.
MISP [galaxy](/galaxy.pdf), [objects](/objects.pdf) and [taxonomies](/taxonomies.pdf) were notably extended by many contributors. These are also included by default in MISP. Don't forget to do a `git submodule u
pdate` and update galaxies, objects and taxonomies via the UI.