Chef Server 12.15.8 released and contains a security update


Ohai Chefs!

Today we’ve released Chef Server 12.15.8. It’s now available for download on the Downloads page.1

Security Updates

  • This release includes an update of zlib (1.2.11) addressing multiple CVEs

Updates and Bug Fixes

Among smaller fixes, these include:

  • Correctly forward data to Chef Automate in a few cases where it didn’t do that before (e.g. cookbook uploads).
  • Search users by email case-insensitively – to make use of this through Chef Manage, you’ll need the latest release (2.5.4).
  • Stricter validation of user data fields: first/middle/last name – this doesn’t affect existing users.

Please see the changelog2 and release notes3 for further details.