The latest patch release for the current Long Term Support (LTS) release of Puppet Enterprise, PE 2018.1.13, is now available.
This is a backward-compatible release that contains security fixes,bug fixes and enhancements, including: - Security fix for CVE-2020-7943 <https://puppet.com/security/cve/CVE-2020-7943>, which prevents exposing sensitive information through the metrics API. - Updated all PE modules to use structured facts. - The default Diffident-Hellman ephemeral key size has been increased to 2048 for all JVM PE services, like Puppetserver, PuppetDB, etc. For the full list of changes, check out the release notes: https://puppet.com/docs/pe/2018.1/release_notes_pe_index.html Download PE 2018.1.13 here: https://puppet.com/misc/pe-files/previous-releases As a current Puppet Enterprise user, you can upgrade to this new version as part of your annual subscription. When upgrading, you must upgrade infrastructure components first and then update agents. For detailed upgrade instructions, see the upgrade documentation: https://puppet.com/docs/pe/2018.1/upgrading.html -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/CAJiF0gpvJ-cnNSrbTWA2Z1U2wpMu0%2BVmSo8G3T%2BphST-DB-5oQ%40mail.gmail.com.