PE 2025.6

Released September 2025

Puppet Enterprise^® (PE and PE Advanced) lifecycle update—Puppet is transitioning its Puppet Enterprise® software support offerings from the “Long Term Support” and “Short Term Support” model to the "Latest" and "Latest - 1" model.

Starting August 6, 2026, Puppet Enterprise^® will adopt a new software support model using the following nomenclature of “Latest” and “Latest - 1” that will accelerate product innovation and simplify the product lifecycle management.

What’s changing?

Under the new model:

“Latest” series: Receives full software support and maintenance (new features, fixes, security updates) for 12 months from the date of the latest major version release.
“Latest - 1” series: Receives limited software support and maintenance (security updates, defect fixes, and minor changes only) for an additional 12 months after being superseded by the “Latest” version of the Puppet Enterprise^® software.

The new model will replace the previous Long-Term Support (“LTS”) model, which offered up to twenty-four (24) months of limited software support and maintenance with limited feature delivery.

Impact on current release streams:

PE 2023.8.z series (LTS): This is the final series supported under the LTS support model. Maintenance releases will continue until August 2026, when the series reaches end of life (“EOL”). This timing coincides with the launch of the new software and support lifecycle model. Customers should begin planning upgrades to remain supported.
PE 2025.y series (Current “latest”): This series will continue receiving the latest updates until August 2026, when the next major PE version is released. At that point, 2025.y will transition to “Latest -1” and receive security updates, defect fixes, and minor changes only until its EOL in August 2027.

This change is designed to:

Deliver continuous access to new features
Improve security through more frequent updates and patches
Provide a predictable, simplified support timeline

Further documentation and upgrade guidance will be provided ahead of the August 2026 transition.

Puppet^® Continuous Delivery and Puppet Comply^® (also known as Puppet Security Compliance Management (“SCM”)) lifecycle updates:

For important information about the product lifecycle changes for Puppet^® Continuous Delivery and Puppet Comply^® /SCM, see:

Puppet Enterprise (PE) 2025 is our leading-edge PE release stream (also referred to as STS).

For important information about upgrading to 2025, see Upgrading Puppet Enterprise.
If you're on the LTS stream (2023.8), you'll find release notes and other information for that series in the 2023.8 documentation.
Customers on 2021.7.z, which is EOL, are encouraged to upgrade to 2023.8.z.
To access End-of-Life (EOL) dates and maintenance information, see PE End-of-Life (EOL).

To access the release notes for the Puppet^® platform, including Puppet agent, Puppet Server, Facter, and PuppetDB, see Platform release notes.

Features

Launch of Puppet Enterprise (PE) and Puppet Enterprise Advanced (PEA) add-on feature: Puppet Edge

Puppet Edge is designed to help you manage more devices on your network and provides you with access to the following capabilities:

Playbook Runner premium module: From the PE console, you can use Playbook Runner to run the following newly added tasks:
- Run Ansible^® playbook
- Run Ansible^® ad-hoc command
EdgeOps premium module: Provides tools for managing network devices with Puppet Enterprise.

For Puppet Enterprise Advanced customers, the Edge add-on includes access to the following additional capabilities:

Advanced Orchestration workflows on the PE console: Workflows are designed to help simplify development and execution of IT operations automation.
Infra Assistant: code assist: Support for code generation enabling you to use AI to generate content to manage your devices

Infra Assistant: code assist is not turned on by default; it is an opt in feature.

For information about purchasing a license with the Puppet Edge add-on, see Getting a license.

Advanced Patching: New PE console capabilities

From the PE console, Advanced Patching users can:

Edit a maintenance window
Edit a blackout window
Edit scheduled patch jobs

Advanced Patching API: New endpoints

PE 2025.6 includes the following new endpoints:

POST /v1/command/update-blackout-window: Edit an existing blackout window.
POST /v1/command/update-maintenance-window: Edit an existing maintenance window
POST /v1/command/update-patch-job: Edit an existing patch job.

Deprecations and removals

The following parameter has been deprecated:

Agent platforms removed

This release removes support for the following operating system platforms:

macOS 11 x86_64
macOS 12 x86_64
macOS12 ARM

Client tool platforms removed

This release removes support for the following client tool platforms:

macOS 11 x86_64
macOS 12 x86_64
macOS 12 ARM
macOS M1
macOS M2

PE console button removed

This release removes the following PE console button:

In PE 2025.6, the button to create network devices has been removed in the PE console. Due to the introduction of Puppet Edge, this feature has been removed in order to simplify the user interface.

Resolved issues

Puppet backup create/restore no longer fails when puppet_enterprise::puppetdb_port is changed

In PE 2023.7.7-2023.8.5 and 2025.0-2025.5, when the puppet_enterprise::puppetdb_port was changed to something other than 8081, backup create/restore failed. This issue has been fixed in PE 2023.8.6 and 2025.6.

Infra Assistant no longer fails to start up when replication is enabled

In PE 2025.5, Infra Assistant failed to start up when replication was enabled. This issue has been fixed in PE 2025.6.

Advanced Patching no longer fails to startup when replication is enabled

In PE 2025.5, Advanced Patching failed to startup when replication was enabled. This has been fixed in PE 2025.6.

Puppet::Network::Format error message is no longer missing actionable details

In PE 2025.0-2025.5 and 2023.8.1-2023.8.5, the error message logged by failed Puppet runs after upgrading provided no information on the source of the binary data. This has been fixed in PE 2025.6 and 2023.8.6.

Internal only tasks and plans no longer displayed

Previously, tasks and plans which were not intended to be run directly by users appeared in the UI, the command line, or when using the Orchestrator API. This has been fixed in PE-2025.6.

Plans fail to submit results if tasks are still running

Previously, if a plan was aborted while actions were executing on targets, the plan would stop but the actions would continue, and the plan would remain unmarked as failed. In PE 2025.6, the actions continue but the plan is marked as failed.

Security fixes

Addressed the following CVEs:

CVE-2021-27918
CVE-2021-33194
CVE-2021-33195
CVE-2021-33196
CVE-2021-33198
CVE-2021-38561
CVE-2021-39293
CVE-2021-41771
CVE-2021-41772
CVE-2021-44716
CVE-2022-23772
CVE-2022-23806
CVE-2022-24675
CVE-2022-24921
CVE-2022-27664
CVE-2022-28131
CVE-2022-28327
CVE-2022-2879
CVE-2022-2880
CVE-2022-29804
CVE-2022-30580
CVE-2022-30630
CVE-2022-30631
CVE-2022-30632
CVE-2022-30633
CVE-2022-30634
CVE-2022-30635
CVE-2022-32149
CVE-2022-32189
CVE-2022-41716
CVE-2022-41720
CVE-2022-41722
CVE-2022-41723
CVE-2022-41724
CVE-2022-41725
CVE-2023-24534
CVE-2023-24536
CVE-2023-24537
CVE-2023-24538
CVE-2023-24539
CVE-2023-24540
CVE-2023-29400
CVE-2023-29403
CVE-2023-39325
CVE-2023-45283
CVE-2023-45287
CVE-2023-45288
CVE-2024-24790
CVE-2024-34156

CVE-2025-4949
CVE-2025-5115
CVE-2025-58056
CVE-2025-10360
CVE-2025-8715
CVE-2025-8714
CVE-2025-8713