Ohai Chefs!
We're happy to announce the release of Chef v13.11.3 for those using Chef 13! This release includes important security updates as well and bug fixes.
Sensitive Properties on Windows
-
windows_service
no longer logs potentially sensitive information when a service is setup -
windows_package
now respects thesensitive
property to avoid logging sensitive data in the event of a package installation failure
Other Fixes
-
remote_directory
now properly loads files in the root of a cookbook'sfiles
directory -
osx_profile
now uses the full path the profiles CLI tool to avoid running other binaries of the same name in a users path -
package
resources that don't support theallow_downgrade
property will no longer fail -
knife bootstrap windows
error messages have been improved
Security Updates
OpenSSL
- OpenSSL has been updated to 1.0.2p to resolve CVE-2018-0732 and CVE-2018-0737
Rubyzip
- Updated Rubyzip to 1.2.2 to resolve CVE-2018-1000544
Get the Build
As always, you can download binaries directly from downloads.chef.io or by using the mixlib-install
command line utility:
$ mixlib-install download chef -v 13.11.3
Alternatively, you can install Chef using one of the following command options:
# In Shell
$ curl https://omnitruck.chef.io/install.sh | sudo bash -s -- -P chef -v 13.11.3
# In Windows Powershell
. { iwr -useb https://omnitruck.chef.io/install.ps1 } | iex; install -project chef -version 13.11.3
If you want to give this version a spin in Test Kitchen, create or add the following to your kitchen.yml
file:
provisioner:
product_name: chef
product_version: 13.11.3