Ohai Chefs!
We're happy to announce the release of Chef v13.11.3 for those using Chef 13! This release includes important security updates as well and bug fixes.
Sensitive Properties on Windows
-
windows_serviceno longer logs potentially sensitive information when a service is setup -
windows_packagenow respects thesensitiveproperty to avoid logging sensitive data in the event of a package installation failure
Other Fixes
-
remote_directorynow properly loads files in the root of a cookbook'sfilesdirectory -
osx_profilenow uses the full path the profiles CLI tool to avoid running other binaries of the same name in a users path -
packageresources that don't support theallow_downgradeproperty will no longer fail -
knife bootstrap windowserror messages have been improved
Security Updates
OpenSSL
- OpenSSL has been updated to 1.0.2p to resolve CVE-2018-0732 and CVE-2018-0737
Rubyzip
- Updated Rubyzip to 1.2.2 to resolve CVE-2018-1000544
Get the Build
As always, you can download binaries directly from downloads.chef.io or by using the mixlib-install command line utility:
$ mixlib-install download chef -v 13.11.3
Alternatively, you can install Chef using one of the following command options:
# In Shell
$ curl https://omnitruck.chef.io/install.sh | sudo bash -s -- -P chef -v 13.11.3
# In Windows Powershell
. { iwr -useb https://omnitruck.chef.io/install.ps1 } | iex; install -project chef -version 13.11.3
If you want to give this version a spin in Test Kitchen, create or add the following to your kitchen.yml file:
provisioner:
product_name: chef
product_version: 13.11.3