# Chef Infra Client 17.4.38 Released!

**URL:** <https://discourse.chef.io/t/chef-infra-client-17-4-38-released/20243>\
**Category:** Chef Release Announcements\
**Created:** [August 28, 2021, 3:00am UTC](https://discourse.chef.io/t/chef-infra-client-17-4-38-released/20243 "2021-08-28T03:00:45Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![tas50](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/tas50/32/941_2.png) [@tas50](https://discourse.chef.io/u/tas50)\
**Post date:** [August 28, 2021, 3:00am UTC](https://discourse.chef.io/t/chef-infra-client-17-4-38-released/20243/1 "2021-08-28T03:00:45Z")

</div>

Hey folks,

We have a small late Friday release of Chef Infra Client to resolve a regression introduced in the 17.4.38 release and deliver a few nice improvements.

## What's New in 17.4.38

### Bug fixes

- Resolved a regression introduced in Chef Infra Client 17.4 that caused HWRP-style resources inheriting from LWRPBase to fail.

### Enhancements

- Improved log output to clearly define where the Infra Phase ends and the Compliance Phase begins.
- Enhanced Ohai data collection of Amazon EC2 metadata to collect additional data for some configurations.
- Removed ERROR logs when retrying failed communication with the Chef Infra Server.
- Improved the `archive_file` resource by upgrading the `libarchive` library it uses, which includes the following improvements:
  - Support for PWB and v7 binary CPIO formats.
  - Support for the deflate algorithm in symbolic link decompression with zip files.
  - Various bug fixes when working with CAB, ZIP, 7zip, and RAR files.

### Security

#### OpenSSL 1.1.1l

OpenSSL has been updated from 1.1.1k to 1.1.1l on macOS systems to resolve the following CVEs:

- [CVE-2021-3711](https://nvd.nist.gov/vuln/detail/CVE-2021-3711)
- [CVE-2021-3712](https://nvd.nist.gov/vuln/detail/CVE-2021-3712)

#### libarchive 3.5.2

Updated the libarchive library that powers the `archive_file` resource from 3.5.1 to 3.5.2 to resolve security vulnerabilities in libarchive's handling of symbolic links.

## Get the Build

As always, you can download binaries directly from [downloads.chef.io](https://downloads.chef.io/products/infra?v=17.4.38) or by using the `mixlib-install` command-line utility:

```auto
$ mixlib-install download chef -v 17.4.38

```

Alternatively, you can install Chef Infra Client using one of the following command options:

```auto
# In Shell
$ curl https://omnitruck.chef.io/install.sh | sudo bash -s -- -P chef -v 17.4.38
# In Windows Powershell
. { iwr -useb https://omnitruck.chef.io/install.ps1 } | iex; install -project chef -version 17.4.38

```

If you want to give this version a spin in Test Kitchen, create or add the following to your `kitchen.yml` file:

```auto
provisioner:
  product_name: chef
  product_version: 17.4.38

```

Enjoy,  
Tim