Category:

release


Meet the Chef Analytics Platform

Update:  Learn more about Chef Analytics in our upcoming webinar on September 17, 2014 at 10am Pacific. The Chef analytics platform is a premium feature of Chef.

Read more

Release: Chef Container 0.2.0 (beta)

This week, Chef released a version of the Chef client that can run inside a Linux container. This container-friendly client is called chef-container. In this post we’ll give you an introduction to chef-container, its purpose and its components. We’ll also tell you about a new knife plugin for managing container images.

Read more

Supermarket Grand Opening

We are excited to announce the Grand Opening of Supermarket – the new Chef community site! On July 7th, 2014 at 12:00 PM PDT (2014–07–07 19:00 UTC) we will close the old community site and redirect all traffic to https://supermarket.getchef.com. At that time, Supermarket will be the official community site.

Read more

Security Vulnerability Releases of Chef Server

Hello, Today we are releasing new versions of Enterprise Chef Server and Open Source Chef Server to address a PostgreSQL configuration vulnerability error. The defect allows any local user on the system hosting the Chef Server’s PostgreSQL components full access to databases.

Read more

Chef Server 11.1.3 Security Release

Enterprise Chef Server 11.1.3 is a security release to address a PostgreSQL configuration error. The defect allows any local user on the system hosting the Chef Server’s PostgreSQL components full access to databases. We advise all Chef Server users to update to this latest release which corrects the error.

Read more

Enterprise Chef Server 1.4.13 Release

Enterprise Chef Server 1.4.3 is a security release to address a PostgreSQL configuration error. The defect allows any local user on the system hosting the Chef Server’s PostgreSQL components full access to databases. We advise all Chef Server users to update to this latest release which corrects the error.

Read more

Enterprise Chef Server 11.1.8 Release

Enterprise Chef Server 11.1.8 is a security release to address a PostgreSQL configuration error. The defect allows any local user on the system hosting the Chef Server’s PostgreSQL components full access to databases. We advise all Chef Server users to update to this latest release which corrects the error.

Read more

Chef Client Windows Patches for OpenSSL CVE-2014-0224 Vulnerability

Ohai Chefs, We have just released Chef Client versions 11.12.8-2 and 10.32.2-3 which includes the mitigation for the recently reported OpenSSL vulnerability CVE-2014-0224. Note that after installing these builds, if you check the OpenSSL version using `OpenSSL::OPENSSL_VERSION` you will see `OpenSSL 1.0.0k 5 Feb 2013`.

Read more
Posted in:

Chef Security Releases: 11.12.8 & 10.32.2-2

Ohai Chefs, Today we are releasing Chef Client 11.12.8 & 10.32.2-2 which include an updated version of OpenSSL that patches CVE-2014-0224. All installs of Chef Client should be upgraded immediately. This bug permits an attacker to execute an undetectable MITM attack on an otherwise secure connection.

Read more

Chef Releases for OpenSSL (CVE-2014-0224) Vulnerability

On Thursday June 5th at approximately 14:00 UTC, the CHEF engineering team was made aware of OpenSSL CVE-2014-0224. A bug in the OpenSSL framework could permit a MITM attack under certain circumstances using a carefully constructed request. Due to the nature of this vulnerabilty, we recommend that you upgrade your installations immediately.

Read more

release