Is Puppet 3.8.7 patched?
Current stable (8.18.0): 77/100
3.8.7 has 2 open critical-or-high vulnerabilities. Run 2019.8.7 or later to clear them. See what 2019.8.7 fixes →
Summary iPlain-English security status for Puppet 3.8.7, built from its CVEs, active-exploitation data, end-of-life date and latest release.
Puppet 3.8.7 is part of the 3.8 release line. 7 known vulnerabilities affect it. The minimum safe version is 2019.8.7 — upgrade to it or later to clear the open critical/high issues. The latest supported Puppet release is 8.18.0.
Known issues affecting 3.8.7
Exploited first, then by exploitation probability.
CVE-2017-2295 HIGH EPSS 2% → see advisory CVE-2021-27021 HIGH EPSS 1% → fixed in 2021.2.0 CVE-2021-27025 MEDIUM EPSS 1% → fixed in 2021.4.0 CVE-2017-10690 MEDIUM EPSS 1% → fixed in 2017.3.4 CVE-2021-27022 MEDIUM EPSS 1% → fixed in 2021.3.0 CVE-2017-10689 MEDIUM EPSS 0% → fixed in 2017.3.4 CVE-2021-27026 MEDIUM EPSS 0% → fixed in 2021.4.0Other Puppet versions
Check another release line of Puppet.
Frequently asked
Is Puppet 3.8.7 patched?
Puppet 3.8.7 has 2 open critical-or-high vulnerabilities. The minimum safe version is 2019.8.7 — upgrade to 2019.8.7 or later to clear them.
What version should I upgrade Puppet 3.8.7 to?
Upgrade Puppet 3.8.7 to at least 2019.8.7 to clear its 2 open critical-or-high vulnerabilities.
What is the latest version of Puppet?
The latest supported Puppet release is 8.18.0.
Is Puppet 3.8.7 still receiving security updates?
Yes — the 3.8 line is still supported and receiving security updates. The latest release is 8.18.0.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Puppet's official advisory before you patch or upgrade — Puppet official site ↗