megachangelog
Fix2026.7.1377.0

Cloudflare One Client for Linux 2026.7.1377.0

A new GA release is now available for the Linux Cloudflare One Client. This hotfix resolves an issue where a small but noticeable percentage of DNS queries were failing across platforms.

A new GA release for the Linux Cloudflare One Client is now available on the stable releases downloads page.

This hotfix resolves an issue where a small but noticeable percentage of DNS queries fail across platforms.

dnslinuxstabilityclient

Source: original entry ↗

More from Cloudflare

Follow Cloudflare to get its new changes in your feed and email digest.

Feature

Rules - Remove surrounding bytes with trim functions

Cloudflare Rules now supports three new functions—trim(), trim_start(), and trim_end()—to remove surrounding bytes from values before comparison. These functions work across all HTTP products on all plans and can remove ASCII whitespace by default or custom byte sets specified as an optional parameter.

ruleshttpapifunctionstext-processing
Feature

Infrastructure applications support configurable session duration

Infrastructure applications now support configurable session duration with a default of 24 hours, set via dashboard or API. When the session duration expires, active SSH connections are closed and users must reconnect, improving security and predictability compared to the previous behavior where sessions could persist unpredictably.

accessinfrastructuresshsession-managementsecurity
Security2026-10-14

Emergency WAF managed rule for active RCE vulnerability

Cloudflare released an emergency WAF update with a new managed rule to block exploitation of a critical remote code execution vulnerability in popular web frameworks. The Generic Rules - Remote Code Execution detection prevents attackers from executing arbitrary system commands via malicious input with invalid path sequences.

wafsecurityrcemanaged-rulesemergency
See all Cloudflare changes →