Amazon Linux 2 and 2023 kernels are out now. EKS and ECS AMIs dated 31 October carry the fix, Redshift follows on 2 November and RDS and Aurora on 3 November.
Cloudflare to stop new cloudflared builds for 32-bit Windows and Intel Macs from 2027
EditorialBy TrustList Editorial
Cloudflare's changelog (18 September) says that starting in 2027 it will deprecate 32-bit Windows and Intel macOS builds of cloudflared and stop publishing new releases for them. It has not given an exact date.
About Cloudflare to stop new cloudflared builds for 32-bit Windows and Intel Macs from 2027
Cloudflare to stop new cloudflared builds for 32-bit Windows and Intel Macs from 2027
22 September 2026: Cloudflare said in its developer changelog on 18 September 2026 that, starting in 2027, it will deprecate the 32-bit Windows and Intel-based macOS builds of cloudflared, the small program that connects servers and networks to Cloudflare Tunnel. Once the deprecation takes effect, Cloudflare will stop publishing new cloudflared releases for either platform. The post does not give an exact date or month in 2027.
Not yet independently verified. Rests on Cloudflare's own changelog, which gives no exact date beyond "starting in 2027"; no independent report was found. The point about support lapsing about a year after the last build is our reading of Cloudflare's general support policy, not a Cloudflare statement. We will update this when it can be confirmed, and remove this note.
The details
Cloudflare ties the change to operating-system support. It notes that Windows 10, the last Windows release to support 32-bit systems, reached end of support in October 2025. On the Apple side, macOS 26 Tahoe, released in September 2025, was the last version to support Intel-based Macs, and macOS 27, released in September 2026, does not support them.
Cloudflare's downloads page, last updated on 17 April 2026, still offers 32-bit and 64-bit Windows builds and both Apple silicon and Intel macOS builds. The announcement does not mention Linux; a 32-bit Linux build is also still listed.
Two details on the same downloads page matter for planning. First, Cloudflare supports cloudflared versions released within one year of the most recent release, and warns that breaking changes may affect anything older. Second, cloudflared does not update itself automatically on Windows, so those installs are only as current as the last manual update.
Read together with the deprecation, that policy suggests the final build for these platforms would fall out of support about a year after newer releases overtake it. Cloudflare has not said this directly.
Who is affected
The change touches organisations that run Tunnel connectors on older or 32-bit Windows machines, on Intel Mac minis used as small servers, or on staff Intel Macs used to reach internal services. The notice covers cloudflared only and says nothing about Cloudflare's other client software.
What to do
- Inventory every machine that runs cloudflared and record its architecture, looking for 32-bit (x86) Windows and Intel (amd64) macOS.
- Plan to move those connectors to 64-bit Windows, Apple silicon Macs, Linux or Cloudflare's Docker image before 2027.
- Bring Windows installs up to date now, since they do not update themselves, and set a process for regular manual updates.
- Include Intel Macs that cannot run macOS 27 in your hardware refresh plans, as they are losing both operating-system and cloudflared support.
- Ask managed service providers who run tunnels for you which platforms their connectors use.
- Watch the Cloudflare changelog for the exact date.
What the notice leaves out
The post does not say whether existing builds will keep connecting after the cut-off, whether security fixes will continue for a period, or how Cloudflare will warn affected users before the date.
Sources
- Cloudflare Changelog: cloudflared to deprecate 32-bit Windows and Intel-based macOS builds in 2027 - 18 September 2026
- Cloudflare Docs: Cloudflare Tunnel downloads - 17 April 2026
Categories & features
TrustList Weekly
The week in software and IT, in one email
The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.
You may be interested in
CVE-2026-112816 lets anyone who can reach the API and holds a trusted client's public certificate act as that client, up to root on the host. Fixed snaps went out on 29 October.
A race in IPv4 TCP connection setup frees socket options too early. The kernel CVE team scores it 9.8, distributions 5.9 to 8.1; Debian has fixed kernels, Ubuntu lists fixes in progress.
Two of the nine run code on a viewer that connects to a hostile machine or opens a crafted recording; six let a local user reach SYSTEM or root through the Monitoring and Patch Management add-ons.
Every musl release from 0.5.0 to 1.2.6 is affected. The maintainers ship a patch now and say 1.2.7 will follow; only programs that compile regular expressions from untrusted input are exposed.
Microsoft shipped .NET 8.0.33, 9.0.22, 10.0.14 and 11 RC3 outside the monthly cycle, and re-released two October fixes that did not fully work. Self-contained apps and containers must be rebuilt.
NLnet Labs fixed five CVEs in its recursive resolver five weeks after the September release that patched a critical one, so servers still on 1.26.1 are behind again. Debian shipped DSA-6581-1.
CVE-2026-111497 is rated 9.2 by Google and hits every Brotli release from 1.0.3 to 1.2.0. Envoy, the PyPI packages and Debian have shipped fixes; Ubuntu still ranks it medium.
More on TrustList
Everything here links back to the same verified catalogue. Pick your next stop.
- More LinuxThe ranking for this subject
- CompaniesAgencies, consultancies and IT service providers, ranked by verified reviews.
- ProductsSoftware and SaaS with pricing, features, integrations and alternatives.
- AwardsAnnual recognition decided by verified reviews and an independent jury.
- LaunchesNew products and releases, voted up by the community every day.
- AI ModelsBenchmark scores and community ratings for every major model.
- RequestsBuyers describe what they need; vendors respond directly.
- PeopleReviewers, authors and makers with public profiles.
- ComparePut up to four listings side by side before you shortlist.