Chef Infra Client 17.4.38 Released!

Chef Release Announcements
1

Hey folks,

We have a small late Friday release of Chef Infra Client to resolve a regression introduced in the 17.4.38 release and deliver a few nice improvements.

What's New in 17.4.38

Bug fixes

  • Resolved a regression introduced in Chef Infra Client 17.4 that caused HWRP-style resources inheriting from LWRPBase to fail.

Enhancements

  • Improved log output to clearly define where the Infra Phase ends and the Compliance Phase begins.
  • Enhanced Ohai data collection of Amazon EC2 metadata to collect additional data for some configurations.
  • Removed ERROR logs when retrying failed communication with the Chef Infra Server.
  • Improved the archive_file resource by upgrading the libarchive library it uses, which includes the following improvements:
    • Support for PWB and v7 binary CPIO formats.
    • Support for the deflate algorithm in symbolic link decompression with zip files.
    • Various bug fixes when working with CAB, ZIP, 7zip, and RAR files.

Security

OpenSSL 1.1.1l

OpenSSL has been updated from 1.1.1k to 1.1.1l on macOS systems to resolve the following CVEs:

libarchive 3.5.2

Updated the libarchive library that powers the archive_file resource from 3.5.1 to 3.5.2 to resolve security vulnerabilities in libarchive's handling of symbolic links.

Get the Build

As always, you can download binaries directly from downloads.chef.io or by using the mixlib-install command-line utility:

$ mixlib-install download chef -v 17.4.38

Alternatively, you can install Chef Infra Client using one of the following command options:

# In Shell
$ curl https://omnitruck.chef.io/install.sh | sudo bash -s -- -P chef -v 17.4.38
# In Windows Powershell
. { iwr -useb https://omnitruck.chef.io/install.ps1 } | iex; install -project chef -version 17.4.38

If you want to give this version a spin in Test Kitchen, create or add the following to your kitchen.yml file:

provisioner:
  product_name: chef
  product_version: 17.4.38

Enjoy,
Tim