Supermarket 3.1.96 released and contains security updates


#1

Supermarket 3.1.96 was released today and is available for download at https://downloads.chef.io/supermarket. This release contains security updates and is a recommended upgrade.

Security Fixes

  • update Rails to 5.0.7.1 #1784 (robbkidd)
  • update rack (& other gems) in the omnibus build environment #1785 (robbkidd)
  • update rack for CVE-2018-16471 #1782 (robbkidd)
  • RFC072 Artifact Yanking: disallow cookbook removal by owner (not enabled by default onprem ... yet) #1789 (robbkidd)