Puppet Core 8.18.0

Released April 2026. This version of Puppet Core includes support for macOS 15, Debian 13, Fedora 41, macOS 26, Microsoft Windows Server 2025, and RHEL 10. It also includes improvements to help prevent security vulnerabilities.

New features and enhancements

Agent platforms added

This release adds support for the Puppet agent on the following operating system platforms:

• macOS 15 (x86_64, ARM) PA-6741, PA-6767

• macOS 26 (x86_64, ARM) PA-8219

• Debian 13 (aarch64, x86_64) PA-7962, PA-7995

• Fedora 41 (x86_64) PA-6600

• Microsoft Windows Server 2025 PA-7229

• RHEL 10 (x86_64, ARM64, ppc64le) PA-7229

Security updates

Update libxml2

Libxml2 was updated to 2.15.2 to address CVE-2026-0989, CVE-2026-0990, CVE-2026-0992, and CVE-2026-1757. PA-8125

Update zlib gem

The zlib gem was updated to 3.0.1 to address CVE-2026-27820. PA-8321

Update curl

Curl was updated to 8.19.0 to address CVE-2026-1965, CVE-2026-3783, CVE-2026-3784, and CVE-2026-3805. PA-8330