Chef Automate 4.13.520 Released!

We are delighted to announce the availability of Chef Automate 4.13.520.

Security

  • Resolved multiple security vulnerabilities across Chef Automate core services.
  • Fixed a potential SQL injection vulnerability to ensure input sanitization and secure query execution.

Bug fixes

  • The chef-automate package-cleanup command now correctly preserves required Automate HA management packages during cleanup. Previously, it built the package whitelist only from actively running Habitat services, causing essential non-running packages such as automate-ha-ctl to be removed and breaking backend CLI commands.