Chef Compliance 1.11.5 released

Ohai Compliance friends,

Chef Compliance 1.11.5 is now available from the Chef downloads site. This is a patch release update which is recommended for all users of Chef Compliance. Here are the enhancements and bug fixes included in this release:


  • InSpec v1.34.9
  • InSpec-SCAP v1.4.0 with improved metadata parsing from SCAP, custom overlays, and bugfixes to systemd service tests.

Bug fixes:

  • Fixed an issue which led to empty results when the platform detection failed (reported on AIX)
  • Fix zlib CVEs: CVE-2016-9841, CVE-2016-9842, CVE-2016-9843
  • Fix git CVE-1000117

Upgrade instructions

Upgrade instructions for Chef Compliance are found here. Download is available at the Chef downloads site.

– Dominik