Puppet | Security Compliance Management (SCM) | Release Announcement

[Puppet Product Updates]

Hi everyone,

Pleased to announce that the latest release for Security Compliance Management (SCM) v3.6.0 is now available on the Puppet Forge. This new release brings updated CIS CAT Pro assessor and thus, updated CIS benchmarks across many new and existing platforms. It also adds a host of new features bringing in more value for SCM users and improving the product's security posture

CIS CAT Pro Assessor update

The CIS CAT Pro Assessor is now updated to the latest available version (v4.57.1). This allows customers to monitor CIS benchmark compliance across new operating systems like Windows Server 2025, RHEL 10, and others.

Customers will also be able to monitor compliance against updated benchmarks for operating systems like Oracle Linux 8, Ubuntu 22.04 LTS, etc.

Please visit the release notes (https://help.puppet.com/scm/current/Content/UserGuide/SCM/Release_notes/release_notes.htm#SecurityComplianceManagement360)  for more details on the benchmark additions and updates.

Customers can now also use all the CIS CAT Pro benchmarks, even the ones that are not part of the SCM functionality.

Ease of use - streamlined installation

Older versions of assessor are automatically removed from the temporary installation folder

The installation also does not rely on access to system's temporary directory

Security updates

The release brings in security enhancements addressing a few vulnerabilities

Please visit the release notes (https://help.puppet.com/scm/current/Content/UserGuide/SCM/Release_notes/release_notes.htm#SecurityComplianceManagement360)  for a list of all the patched vulnerabilities

This e-mail may contain information that is privileged or confidential. If you are not the intended recipient, please delete the e-mail and any attachments and notify us immediately.