Announce: Puppet Agent 1.7.1 is available (with a critical security fix)

[Geoff Nichols]

Puppet Agent 1.7.1 is available (with a critical security fix).

This is a security release of Puppet Agent that addresses a critical vulnerability in PXP Agent as well as several other vulnerabilities.

Please see our security page and these security notices regarding the vulnerabilities fixed in this release:

• Puppet Execution Protocol (PXP) Command Whitelist Validation Vulnerability

• Unprivileged Access to Environment Catalogs

Puppet Agent 1.7.1 also contains updated versions of OpenSSL and Curl to address vulnerabilities recently announced by those projects.

This is the second release of the puppet-agent with .deb and .rpm packages signed with our new GPG signing key.

Please see our recent announcement for more information about the new GPG signing key.

Full release notes are available here: https://docs.puppet.com/puppet/latest/reference/release_notes_agent.html

To install or upgrade puppet-agent, follow the getting started directions:

http://docs.puppetlabs.com/puppet/latest/reference/index.html

-- 

Geoff Nichols

Puppet Ecosystem - Agent and Platform Team