Author:
Stephen Delano
Enterprise Chef 1.4.11 Release
Enterprise Chef Server 1.4.11 is a security release that includes an updated version of OpenSSL that patches CVE-2014-0224. All installs of Enterprise Chef should be upgraded immediately. This bug permits an attacker to execute an undetectable MITM attack on an otherwise secure connection.
Read moreUpdate on Heartbleed and Chef Keys
Ohai Chefs! As most of you are already aware, the OpenSSL Heartbleed bug has exposed a giant hole in the security of the Internet over the past few days.
Read moreChef Server Heartbleed (CVE-2014-0160) Releases
Ohai Chefs! Today we’re releasing patched versions of Open Source Chef Server and Enterprise Chef that address the OpenSSL security vulnerability CVE-2014-0160, also known as Heartbleed. We recommend that you upgrade your Chef Server install immediately.
Read moreEnterprise Chef 1.4.9 Release
Enterprise Chef 1.4.9 is a security release that includes an updated version of OpenSSL that patches CVE-2014-0160, also known as the Heartbleed bug. All installs of Enterprise Chef should be upgraded immediately. The result of this bug is a trivial exploit that allows an attacker to read secrets from the memory of a compromised server.
Read moreEnterprise Chef 11.1.3 Release
Enterprise Chef 11.1.3 is a security release that includes an updated version of OpenSSL that patches CVE-2014-0160, also known as the Heartbleed bug. All installs of Enterprise Chef should be upgraded immediately. The result of this bug is a trivial exploit that allows an attacker to read secrets from the memory of a compromised server.
Read moreChef Server 11.0.12 Release
Chef Server 11.0.12 is a security release that includes an updated version of OpenSSL that patches CVE-2014-0160, also known as the Heartbleed bug. All installs of Chef Server should be upgraded immediately. The result of this bug is a trivial exploit that allows an attacker to read secrets from the memory of a compromised server.
Read moreImportant Hosted Chef Security Notice
Dear Customers, On Wednesday morning we became aware of a misconfiguration of an exception handler for the Hosted Chef Management Console that caused username and password information for a small subset of our users to be leaked via email internally at Chef.
Read moreChef 0.9 EOL
As of June 11, 2012, we are officially ending support for the 0.9 series of Chef and we are encouraging all Chef 0.9 users to upgrade to Chef 0.10. Chef 0.10.0 was released on May 2, 2011. At the time, we planned to support Chef 0.9 for an additional three to six months.
Read more