The latest patch release for the current Long Term Support (LTS) release of Puppet Enterprise, PE 2018.1.15, is now available.
This is a backward-compatible release that contains security and bug fixes, including: - When the orchestration service restarts on the master, PCP brokers no longer fail when attempting to reconnect to the master. - This version disables the /metrics/v1 endpoints by default and restricts access to the /metrics/v2 endpoints to localhost. ( CVE-2020-7943 <https://puppet.com/security/cve/CVE-2020-7943/>) For the full list of changes, check out the release notes: https://puppet.com/docs/pe/2018.1/release_notes_pe_index.html Download PE 2018.1.15 here: https://puppet.com/misc/pe-files/previous-releases As a current Puppet Enterprise user, you can update to this new version as part of your annual subscription. When updating, you must update infrastructure components first and then update agents. For detailed instructions, see the documentation <https://puppet.com/docs/pe/2018.1/upgrading.html>. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/CAJiF0gr%2BOMrO%3DSrxuxGSV1VOHJW9Hoz360NiEKPqCzLLU7idJA%40mail.gmail.com.
