Manage 2.1.0 and 2.1.1 are now available from the Chef downloads site. Manage 2.1.1 is a security release to address a cross site scripting vulnerability that was discovered to exist in previous versions of Manage, including 2.1.0 and the 1.x series.
Manage 2.1.0 is a major version bump from 1.21.1 to 2.1.0, with the major change being that the package is now called “chef-manage” instead of “opscode-manage.” While Manage 2.1.0 is a major version bump because of the name change, you shouldn’t find breaking changes or a major overhaul of the web interface.
Upgrading From Earlier Versions
When using Chef server 12.3.1 or earlier and running on Ubuntu, chef-server-ctl install opscode-manage will install a version prior to 2.1.0. To install the latest version, you must use apt-get install chef-manage. This will be fixed in a future Chef server release.
When using Enterprise Linux, chef-server-ctl install opscode-manage will install the latest version of chef-manage.
Sign Up Email Verification
Manage 2.1.0 also introduces email verification on sign up. After filling out the sign up form, you’ll receive an email with a link that will let you complete the sign up process. This ensures that when users sign up, the email address they are using belongs to them.
As a reminder, you’ll need to have mail relay configured on your Chef server to ensure it can send any emails for sign up, organization invitations, and password resets.
Change Log
The full change log for these releases (since 1.21.1) is here: https://manage.chef.io/changelog
