Release 1.3.5 - 3 April 2017 – IriusRisk Support

This release was focused on bug fixes and additional features including:

Import result from HP Fortify (now a .fpr file can be directly uploaded to Irius using the API)
Workflow engine improvements
The outbound email server is configurable now from the application
Permissions and Roles have been documented on the application
Better Issue Tracker integration
Improved security of IriusRisk (has been pen tested by a third party and the issues fixed)

New Features

[IR-781] - Improve the comments put on the Issue Tracker when a weakness fails
[IR-759] - Import HP Fortify results via the API
[IR-814] - Document Permissions and Roles
[IR-820] - Configurable Email
[IR-749] - Implement basic Testing over the API
[IR-774] - When a Countermeasure Test fails and JIRA/Redmine is configured, comments exported should be accurate
[IR-841] - Update LDAP integration documentation
[IR-859] - Create initial workflow transition rules

Bugs

[IRX-612] - Cannot update CS-Default.xml library
[IRX-620] - Solve Cross Site Scripting vulnerability in image upload
[IRX-625] - Template import doesn't work through rules engine
[IR-828] - Import of MS Threat models has errors
[IR-829] - Can't delete Security Classifications
[IR-837] - Button to enable API by user not displayed after enable API global setting.
[IR-839] - New Product button is activated when user does not have the permission
[IR-840] - Login with e-mail not working
[IR-843] - Edit group load all groups
[IR-849] - Styles are broken after open the weakness detail window
[IR-858] - Action menu doesn't work for a template
[IR-860] - Set the "AUTOCOMPLETE"=OFF attribute on the login form.
[IR-863] - Edition of Detail of Vunerability is not working, in Weakness tests
[IR-868] - Strange behaviour of users/BU combobox
[IR-869] - Server freezes if we create workflow rules that creates loop
[IR-870] - Improve error message when user is editing deprecated data
[IR-872] - Component group selector is always empty during the project creation process.
[IR-875] - Wrong header text in flat threats table
[IR-876] - Prototype library displayed in libraries filter
[IR-878] - When starting the application an exception is launched
[IR-880] - Translate weakness table header
[IR-881] - Error editing the issue ID manually
[IR-882] - When issue tracker is not configured, confusing messages are displayed
[IR-883] - Component is sometimes duplicated if we change component group
[IR-885] - UAT is not starting because a migration is failing