We are delighted to announce the availability of version 4.11.0 of Chef Automate.
Improvements
- The Chef Automate HA config generation process now supports adding an IP address when backing up with MinIO. (#8241)
- The
chef-automate version
command now returns the CLI version installed on the bastion host. (#8242) - The
chef-automate status
andchef-automate service-version
commands now have--accept-hab-license
flag to accept Chef Habitat license. (#8267)
Compliance Profile Updates
-
Compliance profiles are updated to version 1.0.0/20231018131051, which includes the new and improved profiles for:
- STIG Windows Server 2022 v1.2.0
- CIS Windows Server 2022 v2.0.0(Audits)
- CIS Windows Server 2016 v2.0.0(Audits)
Bug Fixes
- Fixed
chef-automate verify
to run on a five-node Automate HA cluster. (#8251) - Fixed
chef-automate config patch
command, which was returning an error when patching the Automate config file to centralize the log file. (#8259)
Security
Security Updates
- The Inspec commands like archive, json, check and exec are run in sandboxed and secured environment which will fix:
ID | Category | Fixed Issue |
---|---|---|
CVE-2023-40050 | security | Run Inspec commands like archive, json, check and exec in Sandboxed and secured environment |
- Updated Terraform to version 1.5.7 which fixes CVE-2023-4782
Chef Packaged Product Versions
This release uses:
- Chef Habitat version: 1.6.521/20220603154827
- Chef Habitat Builder version: 9497/20221221224518
- Chef Infra Server version: 15.4.0/20230105061154
- Chef InSpec version: 4.56.22/20220517052126
Service Versions
This release uses:
- Postgres: 13.5
- OpenSearch: 1.3.7
- Nginx: 1.21.3
- Haproxy: 2.2.29
- Dex: 2.27.0
Supported External Chef Products
This release supports the following Chef products:
- Chef Infra Server version: 14.0.58+
- Chef Inspec version: 4.3.2+
- Chef Infra Client: 17.0.242+
- Chef Habitat: 0.81+
Supported Framework Versions
This release is built on the following framework versions:
- GoLang: 1.19.3
- OpenJDK: 11.0.20+8
- Angular: 11.2.6
View the package manifest for the latest release.
As always, we welcome your feedback and invite you to contact us directly or share your feedback online. Thanks for using Chef Automate!