ColdFusion 10 Update 11 (release date, July 9 2013) includes support for 64-bit COM interoperability, Microsoft SQL Server 2012, and MySQL 5.6. It also has several important bug fixes. It includes all the bug fixes from previous updates of ColdFusion 10. This update also addresses a vulnerability mentioned in the security bulletin APSB13-19.

Note:

This update is specific to ColdFusion 10 only.

Issues fixed

Bug #

Title

Product Area

3331802

Error accessing Server Updates page in the ColdFusion Administrator after disabling "enable session variables"

Administrator

3338825

SerializeJSON casts multiple zero values as number instead of string

Ajax

3322342

SerializeJSON does not preserve case when using a mix of array notation and dot notation

Ajax

3148178

ColdFusion 10 does not maintain sessions when using the CFFILEUPLOAD action page

Ajax

3369530

Frequent key collisions result in ColdFusion returning an incorrect result-set when using a cached query with queryparams

Caching

3327626

Error on application startup when using ORM secondary cache

Caching

3503195

ColdFusion 9 watermark is shown for charts in ColdFusion 10 Developer edition

Charting/Graphing

3040504

COM Interoperability with ColdFusion on 64-bit Windows throws 32-bit DLL error

COM/DCOM

3506758

Unable to execute queries on MySQL 5.6

Database

3086162

Unable to read a file from RAM using CFSPREADSHEET tag

Document Management

3195198

CFDIRECTORY throws an exception when it encounters an inaccessible directory during a recursive list action.

File Management

3042909

CFSPREADSHEET action=”write” cannot be used to write files to the VFS

File Management

3568982

instances.xml picked from the wrong location for a noncfusion instance

Hot fix Installer

3519719

Users are notified in case a problem is encountered when applying an update using the ColdFusion Administrator

Hot fix Installer

3373350

Server Update Notification uses invalid “FROM” email address

Hot fix Installer

3367866

"Select all" option in ColdFusion updater doesn't work

Hot fix Installer

3564451

Error applying update on a noncfusion instance if cfusion instance is not selected.

Installation/Config

3340564

CGI.ALL_HTTP variable does not exist (IIS, all versions)

Installation/Config

3339175

"coldfusion status" command fails silently on Linux

Installation/Config

3482734

Bug in shorthand struct notation causes preceding statement to be skipped

Language

3347145

Extension to 3309220. Change of behavior from CF 9 when persisting UTC date/time

Language

3341284

When a struct is created by copying arguments using structCopy, any new key added to doesn't show up in the keylist or cfdump.

Language

3298179

ColdFusion 10 form variable functionality change relating to case of variables

Language

3175667

SerializeJSON() does not fully serialize array of entities from EntityLoad

Language

3583147

Issue with ORMREload() and Secondary Cache

ORM Support

3348839

Using RestInitApplication("/mymapping", "servicename") results in an exception in the ColdFusion Administrator after server restart

REST Services

3348054

RestInitApplication does not work in the case of multiple applications if application-specific mappings are used

REST Services

3342142

RESTful web services do not correctly handle character encoding

REST Services

3575825

Archive wizard displays an exception if an attempt is made to archive a task with an event handler but no defined URL.

Scheduler

3575011

Exception when application tasks are defined without an application name.

Scheduler

3366182

PauseAll/ResumeAll does not work when there are expired scheduled tasks are present

Scheduler

3364661

Calling the event handler for onMisfire does not work

Scheduler

3362794

cfschedule throws an error if list of dates in Exclude attribute contains spaces after the comma delimiter

Scheduler

3358899

Using CFSCHEDULE tag with action="PauseAll" causes an error if you have chained tasks at the server or application level

Scheduler

3335521

When an application-mode task is paused via the ColdFusion Administrator, its mode is changed to the application's name.

Scheduler

3218423

Migrated scheduled tasks show incorrect information

Scheduler

3194042

Inconsistent use of underscores in CFSCHEDULES’s result fields and attribute values

Scheduler

3194041

Task names become UPPERCASE upon .CAR deploy or server restart

Scheduler

3179290

CAR wizard only archives tasks if mode="server" and group="default"

Scheduler

3178809

Paused tasks misfire upon .CAR deploy

Scheduler

3167859

If a task name begins with a special character (ex: space) editing the task gives an error error" on editing the task.

Scheduler

3141655

Paused tasks are misfired on restart of ColdFusion.

Scheduler

APSB13-19

Security hot fix addresses a vulnerability that could permit an attacker to call public methods on ColdFusion Components (CFC) using WebSockets

Security

3488063

IIS 404 custom error handler URLs that are .CFM files do not consistently return entire document

Web Container (Tomcat)

3493943

Adding an instance corrupts commons-daemon-native.tar.gz

Web Container (Tomcat)

3426811

CGI.server_port information incorrect when using any type of port forwarding

Web Container (Tomcat)

3531653

ColdFusion 10 web services fail in IIS virtual folders

Web Services

3344353

Web services aren"t served from https with stock ColdFusion 10 install

Web Services

3342995

[ANeff] Bug for: typo in WSPublish() exception

Web Socket

3342991

[ANeff] Bug for: typo subscribercount_callbackHanlders (dl, not ld) in cfwebsocketChannel.js

Web Socket

3330785

CGI Scope getting reset by websocket handler

Web Socket

3587627

Error when using Web Socket to call a CFC function that returns the CGI scope

Web Socket

Prerequisites

  1. If you have not already applied ColdFusion 10 Mandatory Update, apply it first. This step is not required if you have ColdFusion 10 Update 8 or above.
  2. On 64-bit computer, use 32-bit JRE for 32-bit ColdFusion and 64-bit JRE for 64-bit ColdFusion.
  3. If the ColdFusion server is behind a proxy, specify the proxy settings for the server to get the update notification and download the updates. Specify proxy settings using the system properties below in the jvm.config for a stand-alone installation, or corresponding script file for JEE installation.
    • http.proxyHost
    • http.proxyPort
    • http.proxyUser
    • http.proxyPassword
  4. For ColdFusion running on JEE application servers, stop all application server instances before installing the update.

Installation

For instructions on how to install this update, see Server Update section.

  • Microsoft Windows 7, Windows 8, Windows Server 2008, Windows Server 2008 R2, and Windows Server 2012 users must use the “Run as Administrator” option.
  • The update can be installed from the Administrator of a ColdFusion instance or through the command-line option (For further details, see the link above).
  • Windows users can launch the ColdFusion Administrator using Start > All Programs > Adobe > Coldfusion 10 > Administrator.
  • After applying the update, reconfigure the connectors using wsconfig tool. It is available at {cf_install_home}/{instance_name}/runtime/bin. On Windows, It can be launched  by choosing Start > All Programs > Adobe > ColdFusion 10 > Web Server Configuration Tool. However, you can choose to ignore this step if you are on ColdFusion 10 Update 5 or later.
  • You can encounter a Signature Verification Failed error when downloading and installing this update. To resolve this issue, download and install the ColdFusion 10 Mandatory Update first, before installing ColdFusion 10 Update 11. For more information, see this article. If this error persists, then download ColdFusion 10 Update 11, afresh. This error is primarily due to certain issues with download.
  • If you get the following error when installing the update using the Download and Install option, ensure that the folder {cf_install_home}/{instance_name}/hf_updates has write permission: "An error occurred when performing a file operation write on file {cf_install_home}/{instance_name}/hf-updates/hotfix_011.properties"
  • Connector would need to be reconfigured if a fix for bug #3488063 is required. It is applicable only, when connector is configured with IIS.

Uninstallation

To uninstall the update, do one of the following:

  • In ColdFusion Administrator, click Uninstall in Server Update > Updates > Installed Updates.
  • Run the uninstaller for the update from the command prompt. For example, java -jar {cf_install_home}/{instance_home}/hf_updates/hf-10-00011/uninstall /uninstaller.jar

If you can't uninstall using the above-mentioned uninstall options, the uninstaller could be corrupted. However, you can manually uninstall the update by doing the following:

  1. Delete the update jar from {cf_install_home}/{instance_name}/lib/updates.
  2. Copy all folders from {cf_install_home}/{instance_name}/hf-updates/{hf-10-00011}/backup directory to {cf_install_home}/{instance_name}/

Remember

  1. In the ColdFusion Administrator, if you see the update listed in both Available Updates and Installed Updates, it could be a caching issue. Do the following:
    1. Navigate to Server Update > Updates > Available Updates and click Check For Updates.
    2. Press Ctrl+F5 to remove the bulb notification from the top banner of the ColdFusion Administrator.
  2. If ColdFusion server doesn't start automatically (ps -ef | grep -i coldfusion command indicates ColdFusion is running, but the ColdFusion Administrator cannot be accessed), restart the server manually after applying the update. This issue is rare and occurs on few Unix or Linux-based operating systems (when buffer allocation size of the machine console is almost zero).

This work is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License  Twitter™ and Facebook posts are not covered under the terms of Creative Commons.

Legal Notices   |   Online Privacy Policy