Puppet Platform 6.22.1 is now available

[Puppet Product Updates]

The next release in the Puppet 6 series, Puppet 6.22.1, is now available!

The release contains bug fixes and minor improvements, including:

• This release makes the following improvements to the puppet facts diff CLI command:
  • The command shows all of the differences between Facter 3 and Facter 4 — including facts only available in Facter 4 — and sorts the output results in alphabetical order. You can also remove certain facts from the output using the --exclude <regex> CLI option and see the results in a fully structured form.
  • The command filters the output based on an exclude list. This only contains volatile facts — those that are expected to change value between consecutive Facter runs.
  • The command pretty-prints JSON output. You can specify the older form with --render_as json.
• This release bumps Curl to 7.76.0, fixing the following CVEs: CVE-2021-22890, CVE-2021-22876
• This release bumps OpenSSL to 1.1.1k, fixing the following CVEs: CVE-2021-3450, CVE-2021-3449
• This release bumps Ruby to 2.5.9, fixing the following CVEs: CVE-2020-25613, CVE-2021-28965
• This release fixes a race condition that caused the agent to become disabled and no longer enforce desired state.
• Previously, the puppet facts diff command, which compares Facter 3 and Facter 4 facts, did not run Facter 4 in a clean environment, causing undefined behavior for custom facts resolving. With this release, Puppet 4 facts are read when running puppet facts in a new shell and custom facts resolve correctly.
• Puppet Server now adds an extension for subject-alternative-name (SAN) when it signs incoming certificate signing requests (CSR).
• The Jetty webserver now uses the local copy of the CRL from Puppet's SSL directory instead of the CA's copy.
• Jetty has been updated to 9.4.40 to resolve security issues.
• This release adds the cloud.provider fact for Azure identification on Linux and Windows platforms.
• Previously, each time you executed require facter, the Facter and Puppet bin directories were added to PATH environment variable, even if they were already there. This is now fixed and require facter only adds Facter and Puppet bin directories to PATH if they are not there.

For the full list of changes, check out the release notes: https://puppet.com/docs/puppet/6.22/release_notes_osp.html