We are delighted to announce the availability of version 20210727104144 of Chef Automate 2.
New Features
- You can now check the
Policyfiles
from Chef Infra Server. Navigate to the Policyfiles tab: Infrastructure > Chef Infra Server > Server Name > Organization > Policyfiles > PolicyFile. (#5327, #5374, #5377)
Improvements
- Login Landing Page will now be displayed for all types of login. (#5375)
Compliance Profile Updates:
- Compliance profiles are updated to version 1.0.0/20210720091254, which includes the following profile changes: (#5367):
STIG Windows 10 v2.1.0
Fix for - ASLR check in CIS
Bug Fixes
- Fixed the pagination in Compliance Report. (#5360)
Security
Security Improvements
- We have made the following security improvements (Examples: New Security Configurations): (#5363)
Added SameSite=Lax to the Session Cookie
Security Updates
The node modules are updated to fix the following CVE issues:
- CVE-2021-23358 - Updated lodash to 1.13.1
Chef Product Versions
This release uses:
- Chef Habitat version: 1.6.181/20201030172917
- Chef Habitat Builder version: 8997/20200812161534
- Chef Infra Server version: 14.4.4/20210520120637
- Chef InSpec version: 4.24.32/20210112215549
Service Versions
This release uses:
- Postgres: 9.6.11
- ElasticSearch: 6.8.14
- Nginx: 1.19.2
- Haproxy: 2.2.2
View the package manifest for the latest release.
How to Upgrade
By default Chef Automate 2 will automatically upgrade to this new version. If you have disabled automatic upgrades you can manually initiate an upgrade by running:
chef-automate upgrade run
As always, we welcome your feedback and invite you to contact us directly or share your feedback online. Thanks for using Chef Automate 2!