Skip to content

Important Note

It is very strongly recommended to upgrade MISP via the web interface. This documentation may not always be up-to-date and will require you to fix permissions if you want to use the web interface to run the updates in the future.

Notice

In general, updating MISP between point releases (for exampe 2.4.50 -> 2.4.53) happens with one of the following two options (both are to be executed as root).

Option 1

To update to the latest commit from the 2.4 branch simply pull the latest commit

cd /var/www/MISP
# Replace www-data with whoever is your webserver user (apache/httpd)
sudo -u www-data git pull origin 2.4
sudo -u www-data git submodule update --init --recursive

Option 2

If you want to stick to a point release instead of pulling the latest commit directly

cd /var/www/MISP
git fetch
git checkout tags/$(git describe --tags `git rev-list --tags --max-count=1`)
git submodule update --init --recursive

Notice

If you would like to upgrade from a minor version to another, look at the Upgrade MISP guides instead (such as 2.3.xyz -> 2.4.xyz)

Warning

If for any reason something goes wrong with the above instructions, walk through the following manual upgrade

1. Update the MISP code to the latest hotfix.

As user root, do the following:

cd /var/www/MISP
git fetch
git checkout tags/$(git describe --tags `git rev-list --tags --max-count=1`)
# if the last shortcut doesn't work, specify the latest version manually
# example: git checkout tags/v2.4.XY
# the message regarding a "detached HEAD state" is expected behaviour
# (you only have to create a new branch, if you want to change stuff and do a pull request for example)

2. Update CakePHP to the latest supported version (if for some reason it doesn't get updated automatically with git submodule)

cd /var/www/MISP
git submodule update --init --recursive

3. Update Mitre's STIX and its dependencies

cd /var/www/MISP/app/files/scripts/
rm -rf python-cybox
rm -rf python-stix
sudo -u www-data git clone https://github.com/CybOXProject/python-cybox.git
sudo -u www-data git clone https://github.com/STIXProject/python-stix.git
cd /var/www/MISP/app/files/scripts/python-cybox 
python3 setup.py install 
cd /var/www/MISP/app/files/scripts/python-stix 
python3 setup.py install

4. Update mixbox to accommodate the new STIX dependencies:

cd /var/www/MISP/app/files/scripts/
rm -rf mixbox
sudo -u www-data git clone https://github.com/CybOXProject/mixbox.git
cd /var/www/MISP/app/files/scripts/mixbox
python3 setup.py install

5. install PyMISP

cd /var/www/MISP/PyMISP
python3 setup.py install

6. For RHEL/CentOS: enable python3 for php-fpm

echo 'source scl_source enable rh-python36' >> /etc/opt/rh/rh-php71/sysconfig/php-fpm
sed -i.org -e 's/^;\(clear_env = no\)/\1/' /etc/opt/rh/rh-php71/php-fpm.d/www.conf
systemctl restart rh-php71-php-fpm.service

7. Update CakeResque and its dependencies

cd /var/www/MISP/app

# Edit composer.json so that cake-resque is allowed to be updated
# "kamisama/cake-resque": ">=4.1.2"

vim composer.json
php composer.phar self-update
# if behind a proxy use HTTP_PROXY="http://yourproxy:port" php composer.phar self-update
php composer.phar update


# To use the scheduler worker for scheduled tasks, do the following:
cp -fa /var/www/MISP/INSTALL/setup/config.php /var/www/MISP/app/Plugin/CakeResque/Config/config.php

8. Make sure all file permissions are set correctly

find /var/www/MISP -type d -exec chmod g=rx {} \;
chmod -R g+r,o= /var/www/MISP/
chown -R www-data:www-data /var/www/MISP/

9. Restart the CakeResque workers

su - www-data -s /bin/bash -c 'bash /var/www/MISP/app/Console/worker/start.sh'

Note

You can also do this using the MISP application by navigating to the workers tab in the server settings and clicking on the "Restart all workers" button.

10. Add any new dependencies that might have been added since you've last updated (shown below)

11. Add requirements for the pubsub optional feature

pip install pyzmq