#Coldfusion 11 updates install#
#Coldfusion 11 updates update#
#Coldfusion 11 updates Patch#

#Coldfusion 11 updates install#

Personally I will not install Java 1.7 on a clients servers and sign off on it being 'secure'.

#Coldfusion 11 updates update#

Even though the Adobe instructions for this current security update states that you can run Java 1.7.0_131, I highly recommend upgrading to Java 1.8. Oracle is no longer supporting Java 1.7 and 1.7 is long past it's end of life. If you have ColdFusion 11 still running on Java 1.7 I highly recommend that Java be upgraded to Java 1.8. Adobe later re-released ColdFusion 11 with Java 1.8.0_25. *Note: ColdFusion 11 when it was first released came with a version of Java 1.7.0_nn. Our operations group is standing by 24/7 - give us a call at 40, or send a note to operations at.

#Coldfusion 11 updates Patch#

This is one more friendly reminder to make sure your ColdFusion servers are patched! Either patch them yourself, have your hosting provider patch them or if they are not familiar or knowledgeable with ColdFusion contact us at CF Webtools to patch your servers.

This update addresses a vulnerability mentioned in the security bulletin APSB15-29 and also includes bug fixes related to connector, database, language, caching and. Tomcat has been upgraded to version 7.0.64. ColdFusion 11 Update 7 ColdFusion 11 Update 7 includes support for Windows 10 and OS X 10.11. The security updates referenced in the above Tech Notes require JDK 8u121 or higher (for ColdFusion 2016) and JDK 7u131 or JDK 8u121 (for ColdFusion 11). This post is to announce the release of new updates for ColdFusion 11 and ColdFusion 10. This has been a growing issue as more and more companies replace plain text FTP servers with SFTP or FTPS servers that utilize stronger protocols.ДЇor ColdFusion 2016 this update upgrades Tomcat to version 8.5.28 and OpenSSL to version 1.0.2n.ДЇor ColdFusion 11 this update upgrades Tomcat to version 7.0.85 and OpenSSL to version 1.0.2n. When using CFFTP to connect to some S-FTP server, during connection, you can see an error message. For the list of bugs fixed in these updates, refer the following documents: Bugs fixed with Update 11 Bugs fixed with Update 22 Follow the steps below to apply the updates: Navigate to ColdFusion Administrator -> Server Updates. Update 11 and Update 22 fix approximately 164 and 45 bugs respectively. The SFTP/FTPS bug would not allow connections to secure FTP servers that utilized newer SSL protocols. This post is to announce the release of ColdFusion 11 Update 11 and ColdFusion 10 Update 22. I've blogged about this before and I was able to create a work around to resolve this issue until it was fixed by Adobe.

There is a bug of great importance to many that has finally been fixed. These updates also include a mitigation for a critical unsafe Java deserialization vulnerability (CVE-2018-4939) and a mitigation for a critical unsafe XML parsing vulnerability (CVE-2018-4942). These updates resolve an important insecure library loading vulnerability (CVE-2018-4938), an important cross-site scripting vulnerability that could lead to code injection (CVE-2018-4940) and an important cross-site scripting vulnerability that could lead to information disclosure (CVE-2018-4941). Adobe released important security updates and big fixes today, update 6 and update 14 for ColdFusion 2016 and ColdFusion 11 respectively.