similar to: Announce: Puppet Enterprise 2.8.3 Available [ Security Release ]

Puppet 3.2.4 is now available. 3.2.4 addresses two security vulnerabilties discovered in the 3.x series of Puppet. These vulnerabilities have been assigned Mitre CVE numbers CVE-2013-4956 and CVE-2013-4761. All users of Puppet 3.2.3 and earlier are strongly encouraged to upgrade to 3.2.4. For more information on these vulnerabilities, please visit http://puppetlabs.com/security/cve/cve-2013-4761

A security vulnerability has been disclosed in Ruby on Rails, assigned CVE-2013-0333. The vulnerability in the JSON code for Ruby on Rails allows attackers to bypass authentication systems, inject arbitrary SQL, inject and execute arbitrary code, or perform a DoS attack on a Rails application. CVE details on the vulnerability can be found here:

Puppet 2.7.22 is now available. 2.7.22 addresses a security vulnerability discovered in the 2.7.x series of Puppet. This vulnerability has been assigned Mitre CVE number CVE-2013-3567. All users of Puppet 2.7.21 and earlier who cannot upgrade to the current version of Puppet, 3.2.2, are strongly encouraged to upgrade to 2.7.22. For more information on this vulnerability, please visit

Dear Puppet Enterprise Users, Puppet Enterprise 2.5.2 is now available. This is a maintenance release of PE with bug fixes and security updates. All users of Puppet Enterprise 2.5 are strongly encouraged to upgrade when possible to Puppet Enterprise 2.5.2. Puppet Enterprise 2.5.2 includes fixes to address CVE-2012-3864, CVE-2012-3865, CVE-2012-3866 and CVE-2012-3867. For more information, please

Puppet 3.0.1 is a bugfix release for the 3.x series of Puppet. To see a list of the issues addressed by this release, check out the 3.0.1 version in our issue tracter at: https://projects.puppetlabs.com/versions/328. This release contains contributions from the following people: Andrew Parker, Jeff McCune, Josh Cooper, Matthaus Owens, Moses Mendoza, Nick Fagerlund, Niels Abspoel, Patrick

Puppet 3.2.1-rc1 is a bugfix release candidate for the 3.x series of Puppet. This release addresses two major issues that were uncovered in 3.2.0 and caused us to pull that release (#20726 and #20742). It also includes a fix for Solaris support (#19760). Downloads are available at: * Source https://downloads.puppetlabs.com/puppet/puppet-3.2.1-rc1.tar.gz Available in native package format in

Puppet 3.0.1-rc1 is a bugfix release candidate for the 3.x series of Puppet. To see a list of the issues addressed by this release, check out the 3.0.1 version in our issue tracter at: https://projects.puppetlabs.com/versions/328 Downloads are available at: * Source http://downloads.puppetlabs.com/puppet/puppet-3.0.1-rc1.tar.gz RPMs are available at http://yum.puppetlabs.com Debs are available

Puppet Dashboard 1.2.23 is a maintenance release of the 1.2 series of Puppet Dashboard with bug fixes and minor features. This release is available for download at: https://downloads.puppetlabs.com/dashboard/puppet-dashboard-1.2.23.tar.gz Available in native package format in the Puppet Labs yum and apt repositories at: http://yum.puppetlabs.com and http://apt.puppetlabs.com Please report

Puppet 3.0.2-rc3 is a bugfix release candidate for the 3.x series of Puppet. This release candidate fixes bug #10963. To see a list of the issues addressed by this release, check out the 3.0.2 version in our issue tracter at: https://projects.puppetlabs.com/versions/337 Downloads are available at: * Source https://downloads.puppetlabs.com/puppet/puppet-3.0.2-rc3.tar.gz RPMs are available at

Puppet Dashboard 1.2.15 is a bugfix release of the 1.2 series of Puppet Dashboard. This release is available for download at: https://downloads.puppetlabs.com/dashboard/puppet-dashboard-1.2.15.tar.gz Debian packages are available at https://apt.puppetlabs.com RPM packages are available at https://yum.puppetlabs.com Please report feedback via the Puppet Labs Redmine site, using an affected

Puppet Dashboard 1.2.13-rc1 is a maintenance and bugfix release candidate of Puppet Dashboard. This release is available for download at: https://downloads.puppetlabs.com/dashboard/puppet-dashboard-1.2.13-rc1.tar.gz Debian packages are available at https://apt.puppetlabs.com RPM packages are available at https://yum.puppetlabs.com See the Verifying Puppet Download section at:

Puppet Dashboard 1.2.13 is a maintenance and bugfix release of Puppet Dashboard. This release is available for download at: https://downloads.puppetlabs.com/dashboard/puppet-dashboard-1.2.13.tar.gz Debian packages are available at https://apt.puppetlabs.com RPM packages are available at https://yum.puppetlabs.com See the Verifying Puppet Download section at:

Hiera-Puppet 1.0.0rc1 is a feature release candidate designed to accompany Puppet 3.0 and Hiera 1.0. It includes Puppet functions for hiera and also the puppet backend for hiera lookups. Downloads are available: * Source http://downloads.puppetlabs.com/hiera/hiera-puppet-1.0.0rc1.tar.gz * Apt and yum development repositories * Apple package

This release of Puppet Dashboard addresses CVE-2013-0277 and CVE-2013-0269. These are vulnerabilities that affect Ruby on Rails, specifically around YAML serialization and JSON handling. They expose vulnerable systems to SQL Injection, Denial of Service Attacks, and arbitrary YAML deserialization. Additionally, CVE-2013-0276 and CVE-2013-0263 affect vendored components of Puppet Dashboard, but by

Facter 1.6.13 is a maintenance release in the 1.6.x branch with bug fixes. Downloads are available at: * Source: https://downloads.puppetlabs.com/facter/facter-1.6.13.tar.gz RPMs are available at https://yum.puppetlabs.com/el or /fedora Rubygem available at http://rubygems.org/gems/facter Debs are available at https://apt.puppetlabs.com Mac package is available at

Puppet 2.7.18 is a security release in the 2.7.x branch. The security changes in 2.7.18 address CVEs 2012-3864, 2012-3865, 2012-3866 and 2012-3867. All users of Puppet 2.7.x are encouraged to upgrade when possible to Puppet 2.7.18. More information available at http://puppetlabs.com/security or visit http://puppetlabs.com/security/cve/cve-2012-3864,

Hi, Matthaus posted a link to the RC of Puppet 3.0.1 last week[1] but it might have gotten missed over the weekend. I wanted to follow up to call out some specific fixes in the release that the early adopters ran into and reported (for which: THANK YOU!!). First, the problem with `puppet kick` not working is fixed[2]. You will still see a deprecation warning, which is intentional, but

Puppet 2.7.17 is a maintenance release for Puppet in the 2.7.x series. It contains a fix for the ubuntu service regression in 2.7.16 (#15027, #15028, #15029). Downloads are available at: * Source https://downloads.puppetlabs.com/puppet/puppet-2.7.17.tar.gz Windows package is available at https://downloads.puppetlabs.com/windows/puppet-2.7.17.msi RPMs are available at

Hiera 1.1.2-rc2 is a release candidate in the 1.x series with bug fixes. Downloads are available at: * Source: https://downloads.puppetlabs.com/hiera/hiera-1.1.2-rc2.tar.gz RPMs are available at https://yum.puppetlabs.com/el or /fedora Rubygem available at http://rubygems.org/gems/hiera or by using the --pre option to gem install. Debs are available at https://apt.puppetlabs.com Mac package

Puppet 2.6.14 is a security release in the 2.6.x branch which addresses CVEs 2012-1053 and 2012-1054. All users of Puppet 2.6.x are encouraged to upgrade when possible to Puppet 2.6.14. Other information available at: http://puppetlabs.com/security or visit http://puppetlabs.com/security/cve/cve-2012-1053 and http://puppetlabs.com/security/cve/cve-2012-1053 Detailed feature release notes are