# Chef Infra Server 13.2.0 Released!

**URL:** <https://discourse.chef.io/t/chef-infra-server-13-2-0-released/16952>\
**Category:** Chef Release Announcements\
**Created:** [April 15, 2020, 12:47am UTC](https://discourse.chef.io/t/chef-infra-server-13-2-0-released/16952 "2020-04-15T00:47:20Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![prajakta](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/prajakta/32/3304_2.png) [@prajakta](https://discourse.chef.io/u/prajakta)\
**Post date:** [April 15, 2020, 12:47am UTC](https://discourse.chef.io/t/chef-infra-server-13-2-0-released/16952/1 "2020-04-15T00:47:21Z")

</div>

Hello Chefs!

Chef Infra Server 13.2.0 is out and available on the [downloads site](https://downloads.chef.io/chef-server/stable). ([https://downloads.chef.io/chef-server/stable/13.2.0](https://downloads.chef.io/chef-server/stable/13.2.0))

General changes:

We are pleased to announce support for external PostgreSQL on Azure. Previously, we added support for SSL while connecting to PostgreSQL, and we have continued that work forward thanks largely to the efforts of [zanecodes](https://github.com/zanecodes). Related documentation can be found in two parts (1) [here](https://docs.chef.io/server_overview/#postgresql-settings) and (2) [here](https://docs.chef.io/runbook/server_security/#ssl-encryption-between-chef-infra-server-and-external-postgresql).

As mentioned in our 13.1.13 release announcement, we are working toward simplifying the management of Chef’s product portfolio. As a part of that effort, we are preparing to move from Solr to Elasticsearch to align with our other projects and products that leverage Elasticsearch. Chef Infra Server 13.2.0 continues to use Solr4 for search for the purposes of this release. Work has been done to merge Elasticsearch packages into the codebase, and we have merged some of the additional code to support moving from Solr to Elasticsearch in the future. Do not attempt to replace existing Solr with Elasticsearch at this time. We expect Chef Infra Server to be prepared for a cutover to Elasticsearch by mid-year (2020).

N.B. Existing external Elasticsearch implementations will not be impacted by the above.

## What's New in 13.2

### Improvements

- Azure support for external PostgreSQL:

- Update HAProxy configuration:

- Integration testing pipeline:

- Chef Infra Server supports Elasticsearch version 6 for external Elasticsearch:

- Cookstyle changes applied to the cookbooks.

- Disable actions rabbitmq queue by default.

- Log all errors triggered due to Elasticsearch reindex.

### Bug Fixes

- Fix a regression that broke FIPS 140-2 support in Chef Infra Server 13.1.13.
- Fix habitat db config for external database.
- Elasticsearch recipes should not create indexes at compile time.

### Updates

- Chef Infra Client: 15.5.17 -\> 15.8.23
- rack(oc-chef-pedant): 2.0.7 -\> 2.0.8
- rack(oc-id): 1.6.11 -\> 1.6.12
- Ruby(oc-id): 1.6.11 -\> 1.6.12
- Ruby: 2.6.3 -\> 2.6.5 fixes the following CVEs:
  - CVE-2019-16255: A code injection vulnerability of Shell# and Shell#test
  - CVE-2019-16254: HTTP response splitting in WEBrick (Additional fix)
  - CVE-2019-15845: A NUL injection vulnerability of File.fnmatch and File.fnmatch?
  - CVE-2019-16201: Regular Expression Denial of Service vulnerability of WEBrick's Digest access authentication
  - CVE-2012-6708
  - CVE-2015-9251

- rubyzip(oc-id): 1.2.3 -\> 1.3.0 (fixes CVE-2019-16892)
- Erlang(habitat): 18 -\> 20

Recordings of Chef Infra Server triage sessions can be found [here](https://www.youtube.com/user/getchef). Part of keeping our issue backlog relevant is ensuring that active issues are prominently featured over inactive issues. As a part of this effort we will be more aggressively closing issues that are inactive or do not apply to supported features. If you find that an issue or PR that you are invested in has closed, please feel free to reopen it. All feature requests can be made using the [Aha! Portal](https://chef-software.ideas.aha.io/).