CFEngine 3.12.6 and 3.15.3 released

Posted by:

10 Nov 2020

We are pleased to announce two new patch releases for CFEngine, version 3.12.6 and 3.15.3! These releases mainly contain bug fixes and dependency updates, but in 3.15.3 there are also some new enhancements in Mission Portal. The new cf-secret binary is also included in 3.15.3 packages.

New in Mission Portal 3.15.3

Synchronizing roles between Mission Portal and Active Directory

When using LDAP for authentication, Mission Portal can now automatically grant roles based on the tags received from your LDAP server (for example Active Directory). This means that new users can start using Mission Portal immediately, without having to wait for an administrator to grant the appropriate roles manually. Enable this in Mission Portal Authentication Settings:

Ansible compatible hosts API

The new hosts-by-class API provides lists of hosts, grouped by classes. This allows you to use CFEngine reporting data within an Ansible playbook. Nick Anderson shows how in this demonstration:

Extending the information shown on the Host Info Page

The Host Info Page shows a lot of useful information out of the box, like OS, hostname, IP address, CFEngine version, etc. You can now extend what is shown, by pinning CFEngine inventory, variables, or classes. Pinned items will show up on all host info pages:

(Click to enlarge)

Copy-to-clipboard buttons

New clipboard buttons in the host info page allow you to easily copy things like IP addresses or hostnames:

CFEngine 3.12 LTS end of life

CFEngine 3.12 series is scheduled to reach end of life in approximately 1 year (winter 2021). There will be 1 more release before then (CFEngine 3.12.7 in summer 2021). If you are still using CFEngine 3.12, you should consider upgrading to the 3.15 series. Please reach out to CFEngine Enterprise Support if you have any questions about upgrading, or need assistance with the process.


As always, you can see a full list of changes and improvements in our changelogs:

(Please note that the Enterprise changelogs contain only changes specific to enterprise. To get a full overview of all changes in a version, read all 3 changelogs.)

Dependency updates

The following dependencies were updated, see respective project websites for more information about the changes in those projects.

CFEngine 3.12.5 3.12.6 3.15.2 3.15.3
Apache 2.4.43 2.4.46 2.4.43 2.4.46
Git 2.26.2 2.28.0 2.26.2 2.28.0
libcurl 7.70.0 7.72.0 7.70.0 7.72.0
libyaml 0.2.4 0.2.5 0.2.4 0.2.5
LMDB 0.9.24 0.9.26 0.9.24 0.9.26
OpenLDAP 2.4.50 2.4.53 2.4.50 2.4.53
PHP 7.2.30 7.2.34 7.4.5 7.4.10
PostgreSQL 10.12 10.14 12.2 12.4
rsync 3.1.3 3.2.3 3.1.3 3.2.3

Thank you to all the developers and maintainers of Open Source Software which make CFEngine possible!


We encourage all of our users to get involved in the community and contribute. Feel free to use one of the following channels:

Ole Herman Elgesem

CFEngine Product Manager