<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Dear community,</p>
<p>This IntelMQ version did not gain any major features and is a
sole product maintenance release. It covers various minor error
corrections in the IntelMQ software, and usability enhancements
for the new API. Some notable changes are listed below.<br>
Thanks again to all contributors!<br>
</p>
<p class="moz-quote-pre" wrap="">The installation instructions:
<a class="moz-txt-link-freetext"
href="https://intelmq.readthedocs.io/en/maintenance/user/installation.html">https://intelmq.readthedocs.io/en/maintenance/user/installation.html</a><br>
Upgrade instructions:
<a class="moz-txt-link-freetext"
href="https://intelmq.readthedocs.io/en/maintenance/user/upgrade.html">https://intelmq.readthedocs.io/en/maintenance/user/upgrade.html</a><br>
All packages have been published to PyPI. The deb/rpm-repositories
and dockerhub are following on Friday.</p>
<p class="moz-quote-pre" wrap="">I'm trying to summarize the changes
here, the full changelogs are linked below.<br>
</p>
The Cymru CAP Parser has been adapted to the new format for events
of the category "bruteforce" (PR#1795 by Sebastian Wagner, CERT.at,
fixes 1794).<br>
<p>The Shodan Parser now supports nested conversions, improved
protocol detection and has a majorly extended parser mapping
(PR#1821 by Mikk Markus Möll, CERT.EE). The feed documentation
gained a missing description for the Shodan Country Stream (by
Sebastian Wagner, CERT.at).<br>
<br>
On the documentation front, the ecosystem document received
revised sections on intelmq-cb-mailgen and fody (PR#1792 by
Bernhard Reiter, Intevation).<br>
A new section in the documentation summarizes hardware
requirements (PR#1811 by Sebastian Wagner, CERT.at).<br>
<br>
Minor enhancements and adaptions in the tests.<br>
<br>
# IntelMQ API-related changes<br>
The IntelMQ API documentation now has more details on the required
write permission for the session database file (PR#1798 by Birger
Schacht, CERT.at, fixes intelmq-api#23).<br>
See
<a class="moz-txt-link-freetext" href="https://intelmq.readthedocs.io/en/maintenance/user/intelmq-api.html">https://intelmq.readthedocs.io/en/maintenance/user/intelmq-api.html</a><br>
<br>
Session database permission errors: Catch the exception in the
code and add a hint to check the permissions of both the file and
the directory (PR#25 by Birger Schacht, CERT.at, fixes #23).<br>
<br>
The tool `intelmqsetup`, which is part of the installation routine
for manual IntelMQ installations, is now able to automatically
create the required directory layout and file permissions for the
IntelMQ API (PR#1787 by Sebastian Wagner, CERT.at, fixes #1783)
and as well covers the webserver and sudoers configuration for
IntelMQ API and IntelMQ Manager (PR#1805 by Sebastian Wagner,
CERT.at, fixes #1803).<br>
<br>
# IntelMQ Manager-related changes<br>
The required authentication token in save-data request of the
"Configuration" tab is now sent to the backend (PR#245 by Marcos
Gonzalez, CNCSRD-DO, fixes #244).<br>
On two locations the link destinations have been fixed, they still
linked to the old PHP-based backend URLs: "Clear Configuration"
link destination (PR#249 by Sebastian Wagner, CERT.at, fixes #248)
and link to configuration page of bot on the monitor page (PR#249
by Sebastian Wagner, CERT.at, fixes #248).</p>
<p># Full changelogs:</p>
<p>IntelMQ: <a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq/releases/tag/2.3.1">https://github.com/certtools/intelmq/releases/tag/2.3.1</a><br>
IntelMQ API:
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq-api/releases/tag/2.3.1">https://github.com/certtools/intelmq-api/releases/tag/2.3.1</a><br>
IntelMQ Manager:
<a class="moz-txt-link-freetext" href="https://github.com/certtools/intelmq-manager/releases/tag/2.3.1">https://github.com/certtools/intelmq-manager/releases/tag/2.3.1</a><br>
</p>
<pre class="moz-signature" cols="72">--
// Sebastian Wagner <a class="moz-txt-link-rfc2396E" href="mailto:wagner@cert.at"><wagner@cert.at></a> - T: +43 1 5056416 7201
// CERT Austria - <a class="moz-txt-link-freetext" href="https://www.cert.at/">https://www.cert.at/</a>
// Eine Initiative der nic.at GmbH - <a class="moz-txt-link-freetext" href="https://www.nic.at/">https://www.nic.at/</a>
// Firmenbuchnummer 172568b, LG Salzburg</pre>
</body>
</html>