## New Features ### External OpenSearch Support Chef Infra Server now supports external OpenSearch for indexing. ## Improvements - Improved performance of `chef-server-ctl reindex-opc-piecewise`. - Fixed an inconsistency issue with `knife search`. The inconsistency was due to the `read_only_allow_delete` setting in Elasticsearch, which would not update indices. Added preflights to identify Elasticsearch's `read_only_allow_delete` setting in an index. - Replaced the opscode wordmark with a configurable name in folder names, hardcodes of chef-server.rb, chef-server-running.json, and chef-secrets.json. ## Security ### PostgreSQL Updated PostgreSQL from 13.5 to 13.6. ### Elasticsearch Added additional cleanup steps to remove Log4j vulnerable libraries that may be present on some setups. ### Updated libxml2 to 2.9.13 to resolve the following CVEs: - CVE-2022-23308 - CVE-2021-3541 - CVE-2021-3537 - CVE-2021-3518 - CVE-2021-3517 - CVE-2020-24977 - CVE-2020-7595 - CVE-2019-20388 - CVE-2019-19956 ### Updated Go to 1.18 to resolve the following CVEs: - CVE-2022-27191 - CVE-2022-24921 - CVE-2022-23806 - CVE-2022-23773 - CVE-2022-23772 - CVE-2021-44716 - CVE-2021-41772 - CVE-2021-41771 - CVE-2021-39293 - CVE-2021-38297 ### Updated Expat to 2.4.7 to resolve the following CVEs: - CVE-2022-25315 - CVE-2022-25314 - CVE-2022-25313 - CVE-2022-25236 - CVE-2022-25235 - CVE-2022-23990 - CVE-2022-23852 - CVE-2022-22827 - CVE-2022-22826 - CVE-2022-22825 - CVE-2022-22824 - CVE-2022-22823 - CVE-2022-22822 - CVE-2021-46143 - CVE-2021-45960