chg: [release] MISP 2.4.125

_posts/2020-05-06-MISP.2.4.125.released.md

@@ -0,0 +1,51 @@
+---
+title: MISP 2.4.125 released (aka self-registration feature and feed improvements release)
+layout: post
+featured: /assets/images/misp/blog/timeline-sight.png
+---
+
+# MISP 2.4.125 released
+
+A new version of MISP ([2.4.125](https://github.com/MISP/MISP/tree/v2.4.125)) has been released. This version includes various improvements including a major refactoring of the feed system, a new inbox system to allow self-registration, sightings in timeline visualisation and many more improvements.
+
+# new inbox system and self-registration feature
+
+If you operate a large community such as an ISAC, the creation of new users can be a tedious task. The new self-registration feature allow organisation to get and review
+registration before creating the real user in MISP.
+
+- if the feature is enabled, users can unauthenticated send a registration request to MISP
+  - request includes information on desired org and some privileges (sync / org admin / publisher)
+- requests land in the inbox, admins can inspect the registration requests
+  - they can accept/discard them individually or en masse
+  - users will be notified of their credentials automatically
+  - quick user creation if the user asks for an org that doesn't exist yet
+
+# Feeds index refactoring and new features
+
+- added the ability to select an orgc ID for CSV/freetext feeds
+  - all events created from this feed will carry the selected orgc_id
+
+- Refactored the index fully
+  - using the factories
+  - better warnings against the dangerous new feed each pull setting
+  - event index search added
+  - several settings cleaned up / made more clear
+
+- auto reload of default feed configuration disabled, fixes #2542, fixes #5789
+  - added a button / endpoint to handle that instead to allow for the deleted default feeds to stay delete
+
+
+# Debugging improvement
+
+- [database] New MySQL data source added for debugging.
+  - MySQLObserver datasource added - prepends all queries with the requested controller/action and user ID for better debugging
+
+May improvements were done in this MISP release, for a complete overview, you can have a look at the [complete changelog](https://www.misp-project.org/Changelog.txt).
+
+# Acknowledgement
+
+We would like to thank all the [contributors](https://www.misp-project.org/contributors), reporters and users who have helped us in the past months to improve MISP and information sharing at large. This release includes multiple updates in [misp-objects](https://www.misp-project.org/objects.html), [misp-taxonomies](https://www.misp-project.org/taxonomies.html) and [misp-galaxy](https://www.misp-project.org/galaxy.html).
+
+As always, a detailed and [complete changelog is available](https://www.misp-project.org/Changelog.txt) with all the fixes, changes and improvements.
+
+