Skip to content

3.1.0 Release candidate

Pre-release
Pre-release
Compare
Choose a tag to compare
@sebix sebix released this 08 Aug 12:42
· 539 commits to develop since this release
3.1.0-rc1
21ffafc

What's Changed

  • BUG: utils/load_configuration: fix loading JSON with tabs in #2010
  • CTIP parser: Handle TLP value "unknown" in #2009
  • FIX: s/self.parameters/self/ in Shodan collector by @monoidic in #2020
  • BUG: provide filename when reading a non-archived file from mail by @kapalex in #2021
  • Add new bot: cut string by delimeter, max length by @mariuskarotkis in #1967
  • Core fixes by @monoidic in #2027
  • DOC: Fix typo by @schacht-certat in #2029
  • Make update script less verbose by default by @schacht-certat in #2033
  • Remove malwardomains parser by @schacht-certat in #2026
  • Add new bot: domain valid by @mariuskarotkis in #1966
  • Support Shadowserver Vulnerable SMTP server feed, fix #1984 by @monoidic in #2037
  • Shadowserver feed updates by @schacht-certat in #2036
  • Remove postgresql output bot by @schacht-certat in #2045
  • DOC: remove mention of intelmqctl list bot json output by @schacht-certat in #2030
  • Remove workarounds for XMPP bots by @schacht-certat in #2048
  • Use the YAML unsafe loader instead of the safe loader by @schacht-certat in #2041
  • Make the harmonization attribute of the bot private by @schacht-certat in #2049
  • ENH: imap collector: support unverified connections in #2055
  • ENH: utils: list_bots: strip descriptions in #2056
  • lib/harm: minor change to allowed classification.types list in #2057
  • ENH: small refactor of upgrade functions in #2058
  • Add Honeypot HTTP Scan feed to Shadowserver parser by @monoidic in #2047
  • IDF: Fix and enforce field name restrictions in #2059
  • JinjaExpert - modify message fields using jinja2 by @schacht-certat in #2040
  • Implement a clear class hierarchy by @schacht-certat in #2042
  • DOCS: Docker-compose commands updated by @waldbauer-certat in #2035
  • Refactoring intelmqctl by @schacht-certat in #2067
  • ENH: lib/bot: fix behavior for unconfigured bots in #2054
  • BUG: fix v300_pipeline_file_removal by @schacht-certat in #2083
  • Adapt ansible workflow to ansible tests by @schacht-certat in #2081
  • BUG: use correct private parameter variable by @schacht-certat in #2087
  • DOCS: fix some sphinx warnings by @schacht-certat in #2065
  • ENH: make json output indented to make it better readable by humans by @schacht-certat in #2079
  • ENH: use the upstream ansible tasks playbook by @schacht-certat in #2089
  • Return an INFO string if log file does not yet exist by @schacht-certat in #2100
  • MAINT: update the url for the vagrant+ansible test repository by @schacht-certat in #2061
  • FIX: statistics_host returns if no host value is given by @waldbauer-certat in #2104
  • DOCS: Updated docker installation instructions by @waldbauer-certat in #2069
  • BUG: fix logrotate ownership options in #2111
  • Add support for new feeds to Dataplane parser by @monoidic in #2102
  • Add RPZ file output bot by @mariuskarotkis in #1962
  • Add new bot: bro output file by @mariuskarotkis in #1963
  • DOC: restructure installation documentation in #2113
  • ENH: ctip parser: added parameter overwrite in #2112
  • Add new bot: cut string from string by @mariuskarotkis in #1965
  • ENH: intelmqsetup: revise installation of manager in #2114
  • DOC: enhance misp integration document in #2115
  • ENH: Shodan parser: handle invalid hostnames, move _common_keys out of class, adjust apply_mapping by @monoidic in #2117
  • Add JSON parser function to Jinja2 templates by @creideiki in #2120
  • DOC: feeds.yaml: fix HIBP nginx config by @sebix in #2126
  • FIX: Fixes update-database script on the last few days of a month. by @gethvi in #2121
  • DOC: add changelog for PR#2121 by @sebix in #2129
  • Docs: Remove dead IRC channel by @sebix in #2130
  • Added new shadowserver files to _config.py by @mateodurante in #2134
  • DOC: Update changelog and docs for shadowserver PR#2134 by @sebix in #2135
  • doc: feeds whishlist: add misp warning lists by @sebix in #2141
  • docs: feeds whishlist: add avast ioc repo by @sebix in #2139
  • ENH: upgrade Python syntax to 3.6+ by @sebix in #2136
  • MS CTIP Azure feed invalid hostname filtering by @monoidic in #2144
  • TST: also test on python 3.10, switch to pytest by @sebix in #2142
  • FIX: CodeQL exponential backtracking on strings by @waldbauer-certat in #2148
  • FIX: Added vscode to gitignore & automated docker build with ACT by @waldbauer-certat in #2153
  • FIX: threshold expert: configure timeout using Redis cache mixin by @creideiki in #2155
  • FIX: Fixes Blueliv collector requirements by @gethvi in #2161
  • Add fix Blueliv collector requirements to CHANGELOG.md by @gutsohnCERT in #2173
  • FIX: Moved SQLBot to SQLMixin namespace in generic-db-lookup by @waldbauer-certat in #2146
  • DOC: installation: remove EOL Fedora versions by @sebix in #2186
  • BUG: mail collectors: fix IMAP abort handling by @wagner-intevation in #2187
  • bug: fix ctl process manager initialization non-interactive by @wagner-intevation in #2189
  • doc: ms azure collector: more precise requirement name by @wagner-intevation in #2190
  • intelmqsetup: fix typo in message by @sebix in #2181
  • gitignore: add coverage file by @sebix in #2182
  • ENH: new parameter autoupdate_cached_database by @sebix in #2180
  • tst: fix reverse_dns test by @wagner-intevation in #2208
  • pkg: add requests_mock as dev dependency by @sebix in #2210
  • intelmqsetup: Fix #2197 by @wagner-intevation in #2198
  • Fix reconnection in SQL Mixin by @wagner-intevation in #2201
  • ParserBot: Fix line recovery and message dumping by @wagner-intevation in #2192
  • FIX: Added check if cymru hostname is an ip address by @waldbauer-certat in #2215
  • bug: fix ctip parser handling JSON Payload content by @wagner-intevation in #2193
  • docs: workaround for sphinx-doc/sphinx#10701 by @wagner-intevation in #2225
  • FIX: Remove AutoShun from IntelMQ as the feed is discontinued by @waldbauer-certat in #2214
  • SQL: add MSSQL support and allow storing only a subset of event fields by @creideiki in #2172
  • ENH: Added personal access token support to GitHub Collector by @waldbauer-certat in #2145
  • FIX: Use redis BLMOVE instead of BRPOPLPUSH (deprecated) by @waldbauer-certat in #2149
  • postgresql output: escape all null bytes by @wagner-intevation in #2223
  • Remove malc0de feed due to offline by @gutsohnCERT in #2184
  • TST: Fixed regex to hold gcc version by @waldbauer-certat in #2216
  • Shadowserver 202207 by @elsif2 in #2227
  • FIX: Possible race condition in file collector by @waldbauer-certat in #2147
  • tst: fix threshold expert redis host by @wagner-intevation in #2209
  • 3.1.0 Release candidate 1 by @sebix in #2230

New Contributors

Full Changelog: 3.0.2...3.1.0-rc1