Do you provide security updates for the software packages in Puppet Enterprise?
Definitely. Ensuring that our customers receive timely security updates is extremely important to us. We have a rigorous process for tracking potential security issues that encompasses not only our own code, but also upstream projects that Puppet Enterprise utilizes. In the event that vulnerabilities are discovered, we move quickly to fix or patch and provide a new, updated Puppet Enterprise release. In addition, we disclose the CVEs of vulnerabilities that are addressed in each release. See our Security page for our security policy and disclosures.