Dear Puppet Enterprise Users,
Puppet Enterprise 2.8.7 is now available.
This is a security and bugfix release of Puppet Enterprise. All users of Puppet Enterprise 2.x are encouraged to upgrade when possible to Puppet Enterprise 2.8.7.
Puppet Enterprise 2.8.7 includes fixes to address CVE-2014-3248 and CVE-2014-3249.
For information on the bug fixes in this release, see http://docs.puppetlabs.com/pe/2.8/appendix.html#release-notes.
For information on the vulnerabilities resolved in this release, please visit http://puppetlabs.com/security, or visit http://puppetlabs.com/security/cve/cve-2014-3248 and http://puppetlabs.com/security/cve/cve-2014-3249.
As a current Puppet Enterprise user, you can upgrade to this new version as part of your annual subscription. If upgrading, it is recommended to upgrade your master and console servers first.
As always, we want to hear about your experiences with Puppet Enterprise. If you have any questions about upgrading, be sure to get in touch with Puppet Labs Support.
Thanks,
Puppet Labs