We are delighted to announce the availability of version 5.3.7 of Chef Supermarket.
This release remediates security vulnerabilities across dependent packages in Chef Supermarket.
Dependencies
- Upgraded Ruby from 3.1.2 to 3.1.5.
- Upgraded Rack from 2.2.20 to 2.2.23 in Supermarket and Omnibus; upgraded Fieri engine from 3.2.4 to 3.2.6.
- Pinned Puma to 5.6.9.
- Upgraded WEBrick from 1.9.1 to 1.9.2 in Supermarket and Omnibus.
Security
- Upgraded Rack from v2.2.20 to v2.2.23 (Supermarket/Omnibus) and v3.2.4 to v3.2.6 (Fieri).
- Upgraded REXML from v3.4.0 to v3.4.4.
- Upgraded fugit from v1.5.3 to v1.12.2 and et-orbi from v1.2.7 to v1.4.0.
- Upgraded Puma from v5.6.8 to v5.6.9.
- Upgraded WEBrick from v1.9.1 to v1.9.2.
- Upgraded uri from v0.13.0 to v1.0.3.
- Upgraded Ruby from v3.1.2 to v3.1.5.
- Upgraded resolv to v0.4.0.
- Upgraded cgi to v0.5.0.
- Upgraded activesupport to v7.1.5.2.
- Upgraded postgresql to v13.22.
- Upgraded jmespath to v1.6.2.
- Upgraded minimatch to v3.1.2.
- Upgraded bundler to v2.3.7.
- Upgraded net-imap to v0.5.10.
- Upgraded time to v0.3.0.
- Upgraded rdoc to v6.14.2.
For the complete list of CVEs, or if you have concerns about specific CVEs, contact your account manager or Progress Support.