4 versions of InSpec are listed here, from July 24, 2021 to the current 6.8.24.1. Each one links to the publisher’s own installer files.
4 versions over 4 years · about 1.1 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 6.8.24.1Latest | January 29, 2025 | 1 KB | 64-bit MSI 1 KB Release notesNew Features
- Deprecation notice about moving core resource packs to their individual gems after the next major release (#7219)
- Added the --legacy flag to the inspec automate upload command. (#7200)
The inspec automate upload command runs inspec check and inspec export, which were updated in Chef InSpec 5.22.36. This update led to a bug with InSpec profiles with =begin =end.
Use the --legacy flag with profiles where the newer export and check methods may fail to parse older profiles correctly, particularly due to limitations in AST parsing.
CVEs
- Fixes HTTP Request Smuggling in ruby webrick CVE-2024-47220. (#7214)
- Fixes the REXML denial of service vulnerability CVE-2024-43398. (#7199)
- Fixes the REXML ReDoS vulnerability CVE-2024-49761. (#7199)
Improvements
- Use of a better cryptographic hashing algorithm on sensitive data. (#7261)
- Improvements in the error handling of the plugin installation error. (#7161)
- Fixed the encoding issues with special characters in passwords for Postgres Session resource (#7277) |
| 5.18.14.1 | October 9, 2022 | — | 64-bit MSI |
| 4.50.3.1 | November 30, 2021 | — | 64-bit MSI |
| 4.38.9.1 | July 24, 2021 | — | 64-bit MSI |
