DEV Community

Cover image for Puppet Core 8.18.0 is out: macOS 15 support and key security updates
Jason St-Cyr for puppet

Posted on

Puppet Core 8.18.0 is out: macOS 15 support and key security updates

You can now download Puppet Core 8.18.0! This update adds support for macOS 15 and includes several important security updates to help keep your infrastructure protected.

As always, Puppet Core releases focus on stability, platform support, and staying ahead of reported vulnerabilities.

👉 Official Puppet Core 8.18 release notes


What’s new in Puppet Core 8.18.0

  • Support for macOS 15: Puppet Core now supports macOS 15 on both x86_64 and ARM architectures. This enables continued management of macOS systems using the same automation controls and policies you already rely on.

Security focused dependency updates

Security remains a top priority in every Puppet Core release. This release includes updates to several bundled components to address recently disclosed security vulnerabilities. By delivering these updates as part of hardened Puppet Core builds, you reduce dependency risk without tracking, validating, or rebuilding components independently.

🔐 libxml2 updated

  • libxml2 has been updated to version 2.15.2
  • Addresses the following CVEs:
    • CVE-2026-0989
    • CVE-2026-0990
    • CVE-2026-0992
    • CVE-2026-1757

🔐 zlib gem updated

  • zlib gem updated to version 3.0.1
  • Addresses:
    • CVE-2026-27820

🔐 curl updated

  • curl updated to version 8.19.0
  • Addresses:
    • CVE-2026-1965
    • CVE-2026-3783
    • CVE-2026-3784
    • CVE-2026-3805

If you rely on Puppet Core in security‑sensitive or regulated environments, this release is strongly recommended.


Getting Puppet Core 8.18.0

You can upgrade to Puppet Core 8.18.0 using your existing Puppet Core repositories and standard upgrade workflows. Upgrading to Puppet Core 8.18.0 helps you take advantage of the latest platform support, reduce exposure to dependency related security risk, and rely on vendor-tested packages instead of managing updates yourself.

As always:

  • Test upgrades in a staging environment first
  • Review the full release notes for platform‑specific details
  • Roll out broadly once validated

📄 Puppet Core Installation Docs:

Let us know how it goes

If you’re upgrading to 8.18.0, running Puppet Core on macOS 15, or have feedback on this release, let us know in the comments. Your input helps shape future updates.

Happy puppeting!

Top comments (0)