CFEngine version 3.24.6 and 3.27.3 have been released! These patch releases contain dependency updates to address the recently announced PHP vulnerabilities. For more information about the vulnerabilities, see this blog post:
https://cfengine.com/blog/2026/php-cves-cve-2026-109618-and-cve-2026-109619/
Changelogs
Changelogs are available in our documentation:
- 3.27.3 changelog for CFEngine Community
- 3.27.3 changelog for CFEngine Enterprise
- 3.27.3 changelog for Masterfiles Policy Framework
- 3.24.6 changelog for CFEngine Community
- 3.24.6 changelog for CFEngine Enterprise
- 3.24.6 changelog for Masterfiles Policy Framework
Dependency upgrades
We have updated the following dependencies:
| CFEngine version | 3.24.5 | 3.24.6 | 3.27.2 | 3.27.3 |
|---|---|---|---|---|
| Apache | 2.4.69 | 2.4.69 | 2.4.69 | 2.4.69 |
| APR | 1.7.6 | 1.7.6 | 1.7.6 | 1.7.6 |
| apr-util | 1.6.5 | 1.6.5 | 1.6.5 | 1.6.5 |
| diffutils | 3.12 | 3.12 | 3.12 | 3.12 |
| Git | 2.56.0 | 2.56.0 | 2.56.0 | 2.56.0 |
| leech | - | - | 0.2.0 | 0.2.0 |
| libacl | 2.4.0 | 2.4.0 | 2.4.0 | 2.4.0 |
| libattr | 2.6.0 | 2.6.0 | 2.6.0 | 2.6.0 |
| libcurl | 8.22.0 | 8.23.0 | 8.22.0 | 8.23.0 |
| libcurl-hub | 8.22.0 | 8.23.0 | 8.22.0 | 8.23.0 |
| libexpat | 2.9.0 | 2.9.0 | 2.9.0 | 2.9.0 |
| libgnurx | 2.5.1 | 2.5.1 | 2.5.1 | 2.5.1 |
| libiconv | 1.19 | 1.19 | 1.19 | 1.19 |
| librsync | - | - | 2.3.4 | 2.3.4 |
| libxml2 | 2.15.4 | 2.15.4 | 2.15.4 | 2.15.4 |
| LibYAML | 0.2.5 | 0.2.5 | 0.2.5 | 0.2.5 |
| LMDB | 0.9.36 | 0.9.36 | 0.9.36 | 0.9.36 |
| nghttp2 | - | - | 1.70.0 | 1.70.0 |
| OpenLDAP | 2.7.1 | 2.7.1 | 2.7.1 | 2.7.1 |
| OpenSSL | 3.6.5 | 3.6.5 | 3.6.5 | 3.6.5 |
| PCRE2 | 10.49 | 10.49 | 10.49 | 10.49 |
| PHP | 8.3.35 | 8.3.36 | 8.5.11 | 8.5.12 |
| PostgreSQL | 16.15 | 16.15 | 18.6 | 18.6 |
| pthreads-w32 | 2-9-1 | 2-9-1 | 2-9-1 | 2-9-1 |
| rsync | 3.5.1 | 3.5.1 | 3.5.1 | 3.5.1 |
| SASL2 | 2.1.28 | 2.1.28 | 2.1.28 | 2.1.28 |
| zlib | 1.3.2 | 1.3.2 | 1.3.2 | 1.3.2 |
For a complete overview of all dependencies used in CFEngine and their licenses, please see the Legal and licenses part of our documentation.
Thank you to the developers, maintainers, and contributors to open source software which makes CFEngine possible.
Downloads
CFEngine Enterprise is free for up to 25 hosts, click here to go to the download pages with new packages.
At the time of writing, version 3.27.3 is currently the latest available LTS release, it will be the default version picked by cf-remote and the Quick install script.
If you are using cf-remote, you can target versions like this:
cf-remote --version 3.24.6 listcf-remote --version 3.27.3 listVersion selection works for list, download, and install commands.
Read more about cf-remote here.
Contributions
We encourage all of our users to get involved in the community and contribute. Feel free to use one of the following channels:
- Explore CFEngine Build for modules made by the CFEngine team and community, and share your own modules
- Ask for help, share an idea, or start a discussion on GitHub Discussions
- Submit a bug report or feature request in our issue tracker
- Look through our curated list of issues for new contributors
- Browse the code or submit a pull request through GitHub
- Improve the documentation by fixing typos, adding examples, or explaining things you found difficult
