Automate version 4.11.0 Released!

We are delighted to announce the availability of version 4.11.0 of Chef Automate.

Improvements

  • The Chef Automate HA config generation process now supports adding an IP address when backing up with MinIO. (#8241)
  • The chef-automate version command now returns the CLI version installed on the bastion host. (#8242)
  • The chef-automate status and chef-automate service-version commands now have --accept-hab-license flag to accept Chef Habitat license. (#8267)

Compliance Profile Updates

  • Compliance profiles are updated to version 1.0.0/20231018131051, which includes the new and improved profiles for:

    • STIG Windows Server 2022 v1.2.0
    • CIS Windows Server 2022 v2.0.0(Audits)
    • CIS Windows Server 2016 v2.0.0(Audits)

Bug Fixes

  • Fixed chef-automate verify to run on a five-node Automate HA cluster. (#8251)
  • Fixed chef-automate config patch command, which was returning an error when patching the Automate config file to centralize the log file. (#8259)

Security

Security Updates

  • The Inspec commands like archive, json, check and exec are run in sandboxed and secured environment which will fix:
ID Category Fixed Issue
CVE-2023-40050 security Run Inspec commands like archive, json, check and exec in Sandboxed and secured environment

Chef Packaged Product Versions

This release uses:

  • Chef Habitat version: 1.6.521/20220603154827
  • Chef Habitat Builder version: 9497/20221221224518
  • Chef Infra Server version: 15.4.0/20230105061154
  • Chef InSpec version: 4.56.22/20220517052126

Service Versions

This release uses:

  • Postgres: 13.5
  • OpenSearch: 1.3.7
  • Nginx: 1.21.3
  • Haproxy: 2.2.29
  • Dex: 2.27.0

Supported External Chef Products

This release supports the following Chef products:

  • Chef Infra Server version: 14.0.58+
  • Chef Inspec version: 4.3.2+
  • Chef Infra Client: 17.0.242+
  • Chef Habitat: 0.81+

Supported Framework Versions

This release is built on the following framework versions:

  • GoLang: 1.19.3
  • OpenJDK: 11.0.20+8
  • Angular: 11.2.6

View the package manifest for the latest release.


As always, we welcome your feedback and invite you to contact us directly or share your feedback online. Thanks for using Chef Automate!