Skip to main content

Release 3.0.0 - 25-05-2020

rules
  • Updated

New Platform Features

  • Embedded Draw.io diagramming and import/export in Draw.io's own format as well as external formats.  More details can be found here.   Note: The diagram is completely embedded and no data is transmitted outside of the IriusRisk instance.
  • Clone product.  More details here. 
  • New settings option to remove or keep threats that are no longer applicable based on the rules. See documentation here. 
  • New SAML configuration option to set the entityId parameter. This allows integrating multiple IriusRisk instances with the same Identity Provider.  See documentation here. 

Upgrading from 2.x to 3

Migration

Threat models in IriusRisk will automatically be migrated to the new version and the diagram automatically converted into draw.io format.  Note that the XML import of v2.x models is not supported in version 3.x.  Make sure all the models that need to be upgraded are loaded into the IriusRisk instance before upgrading. 

XML Compatibility for Products and Libraries

Although the XML for Product is not compatible on version 3 with previous versions. The XML for libraries is fully compatible between versions 2 and 3.

Upgrading

To deploy or upgrade to version 3 edit the docker-compose.yml file and change the image name to: continuumsecurity/iriusrisk-prod:tomcat8-3

For the .war file installation the name of the war file is:  iriusrisk-3.war

Full upgrade instructions can be found here. 

Bug Fixes

This release also delivers multiple bug fixes including: 

  •  [IR-4660] - Problem when parsing XML libraries that prevented loading the file in some cases. 
  • [IR-4495] - Problem with the component questionnaire when adding questions with whitespaces on the question id.
  • [IR-4651] - Problem on startup when using Postgres EDB edition. 
  • [IR-4517] - Improved the debug logging and errors when linking to Azure DevOps/TFS as an issue tracker. 

 Caveats

  • The XML format for products has been changed for this version due to the integration with Draw.io. That means an XML for a product exported in version <= 2.4.x will not be compatible with >= 3.0.x. 
  • The Product Update feature will not update the diagram. If you are using product update through XML by either using the Action menu on the products tab or the "/products/upload/{ref}" API call, the product's diagram will not be updated with the changes you may have made in the XML's diagram definition. This will be corrected in IriusRisk version 3.0.1.

This is a cumulative release that also includes the hotfixes on the 2.4 branch: 

Comments

0 comments

Article is closed for comments.

Powered by Zendesk