Dear Puppet Enterprise Users,
Puppet Enterprise 2.8.8 is now available.
This is a security release of Puppet Enterprise. All users of Puppet Enterprise 2.x who are unable to upgrade to Puppet Enterprise 3.x are strongly encouraged to upgrade when possible to Puppet Enterprise 2.8.8.
Puppet Enterprise 2.8.8 includes fixes to address multiple vulnerabilities in Apache HTTP Server and OpenSSL.
Puppet Enterprise 2.8.8 also includes a fix for an issue on AIX clients where previous Puppet Enterprise installations created an incomplete /etc/inittab entry for the ‘pe-puppet’ service.
For additional information on the fixes in this release, please see http://puppetlabs.com/security and https://docs.puppetlabs.com/pe/latest/release_notes.html.
As a current Puppet Enterprise user, you can upgrade to this new version as part of your annual subscription. If upgrading, it is recommended to upgrade your master and console servers first.
As always, we want to hear about your experiences with Puppet Enterprise. If you have any questions about upgrading, be sure to get in touch with Puppet Labs Support.