# Chef InSpec 6.8.24 Released!

**URL:** <https://discourse.chef.io/t/chef-inspec-6-8-24-released/23660>\
**Category:** Chef Release Announcements\
**Created:** [January 29, 2025, 7:22am UTC](https://discourse.chef.io/t/chef-inspec-6-8-24-released/23660 "2025-01-29T07:22:47Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![chef-ci](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/chef-ci/32/2320_2.png) [@chef-ci](https://discourse.chef.io/u/chef-ci)\
**Post date:** [January 29, 2025, 7:22am UTC](https://discourse.chef.io/t/chef-inspec-6-8-24-released/23660/1 "2025-01-29T07:22:47Z")

</div>

Hello InSpec friends!  
We are delighted to announce the availability of version 6.8.24 of Chef InSpec. Changes include:  
Release Date: 29 January, 2025.

## New Features

- Deprecation notice about moving core resource packs to their individual gems after the next major release ([#7219](https://github.com/inspec/inspec/pull/7219))

- Added the `--legacy` flag to the inspec automate upload command. ([#7200](https://github.com/inspec/inspec/pull/7200))

## CVEs

- Fixes HTTP Request Smuggling in ruby webrick [CVE-2024-47220](https://nvd.nist.gov/vuln/detail/cve-2024-47220). ([#7214](https://github.com/inspec/inspec/pull/7214))
- Fixes the REXML denial of service vulnerability [CVE-2024-43398](https://nvd.nist.gov/vuln/detail/CVE-2024-43398). ([#7199](https://github.com/inspec/inspec/pull/7199))
- Fixes the REXML ReDoS vulnerability [CVE-2024-49761](https://nvd.nist.gov/vuln/detail/CVE-2024-49761). ([#7199](https://github.com/inspec/inspec/pull/7199))

## Improvements

- Use of a better cryptographic hashing algorithm on sensitive data. ([#7261](https://github.com/inspec/inspec/pull/7261))
- Improvements in the error handling of the plugin installation error. ([#7161](https://github.com/inspec/inspec/pull/7161))
- Fixed the encoding issues with special characters in passwords for Postgres Session resource ([#7277](https://github.com/inspec/inspec/pull/7277))

* * *

## Get the Build

You can download binaries directly from [Chef Downloads](https://www.chef.io/downloads/tools/inspec?v=6.8.24).