Java January 2018 Security Fixes

  • Posted January 31, 2018

  • Assessed Risk Level: High

In January, 2018 Oracle announced several vulnerabilities for Java. Puppet Enterprise prior to 2016.4.10 and 2017.3.3 shipped with a vulnerable version of Java. Puppet Enterprise 2016.4.10 and 2017.3.3 include updates to Java to address these vulnerabilities.

For more information about this vulnerability, refer to the Oracle’s security announcement (


Affected software versions:

  • Puppet Enterprise versions prior to 2016.4.10
  • Puppet Enterprise versions prior to 2017.3.3

Resolved in:

  • Puppet Enterprise 2016.4.10
  • Puppet Enterprise 2017.3.3
Puppet sites use proprietary and third-party cookies. By using our sites, you agree to our cookie policy.