Puppet 5.x — End of Life

EOL
EOL: Jan 1, 20211 release in this series0 CVEs

Puppet 5.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatus
5Jun 27, 2017Jan 1, 20215.5.22EOL

CVEs affecting Puppet 5.x (0)

No CVEs tracked for Puppet 5.x.

Puppet 5.x is EOL — migrate to Puppet 6.x

Puppet 6.x is the next major release. Plan your upgrade before Puppet 5.x stops receiving security patches.

See Puppet 6.x

Frequently asked questions

Is Puppet 5 end of life?

Yes. All Puppet 5.x releases have reached end of life and no longer receive security patches. Migrate to Puppet 6.x as soon as possible.

What CVEs affect Puppet 5?

No CVEs are currently tracked for Puppet 5.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.

What is the latest Puppet 5 version?

The latest Puppet 5.x patch release is 5.5.22, released on October 9, 2020. Always run the latest patch to benefit from all security fixes.

How to migrate from Puppet 5 to Puppet 6?

To migrate from Puppet 5 to Puppet 6: (1) review the official Puppet 6 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Puppet 5 in production?

No. Puppet 5 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA