diff --git a/rudder-agent/SOURCES/Makefile b/rudder-agent/SOURCES/Makefile
index 0793a6a74..0a7954637 100644
--- a/rudder-agent/SOURCES/Makefile
+++ b/rudder-agent/SOURCES/Makefile
@@ -24,8 +24,8 @@ RUDDER_MAJOR_VERSION := $(shell echo ${RUDDER_VERSION_TO_PACKAGE} | cut -d'.' -f
 
 FUSION_RELEASE = 2.4.3
 FUSION_SHA1 = 66d6e699575e98a6c050b39ca27c72a20f5569c3
-CFENGINE_RELEASE = 3.12.3
-CFENGINE_SHA1 = 435183c47f5c95a9fe9aba0c9d4cb5b2826c0eb4
+CFENGINE_RELEASE = 3.12.4
+CFENGINE_SHA1 = f7103c636dc006a5081bf11c2f5a09c7e1f99fbf
 LMDB_RELEASE = 0.9.22
 LMDB_SHA1 = 5d62d4c7527f3474f60a0d87db2bfd539e6493eb
 # Default openssl version to use