Puppet Core 8.17 Drops with Major Security Updates

Published by

Jason St-Cyr

on

Perforce Puppet release announcement banner image. The heading reads: “Puppet Core 8.17 now out!” with a subtitle that has the text “Major security updates available to prevent reported vulnerabilities”
Tags: ,

The Puppet Core team is at it again keeping on top of industry vulnerabilities! This release updates or removes dependencies to resolve nearly 20 reported CVEs (details in the release notes).

Security Updates in 8.17

  • Curl updated to 8.18 [addresses 8 CVEs]
  • Ruby updated to version 3.2.10 [addresses 2 CVEs]
  • OpenSSL updated to version 3.0.19 [addresses 8 CVEs]

Deprecations and removals

  • The Ruby API has been removed from leatherman as part of ongoing efforts to streamline and modernize internal components.
  • Brotli and zstd have been removed from agent curl builds. No impact to Puppet or PXP agents.

👉 Check out the full official Release notes for 8.17

Leave a comment

Previous Post