This release focuses on updating software to address security fixes and bug fixes.
Security vulnerabilities addressed
- CVE-2016-2324 - Git upgraded to 2.7.4
- CVE-2016-2097 and CVE-2016-209 - Ruby On Rails updated to 184.108.40.206
Bug fixes addressed
- Default the timeline search to the past two weeks instead of infinity
Chef Analytics And Chef Server
For long server names, it is required to run version 1.3.1 of Chef Analytics with Chef Server 12.5.0. EC2 tends to make long server names, so if you are running in EC2, you will likely need to upgrade both products to these versions.
Please note that our 1.2.x -> 1.3.x upgrade is different than the 1.3.x -> 1.3.x upgrade. More information can be found here: https://docs.chef.io/upgrade_analytics.html.