ColdFusion 10 Update 11 (release date, July 9 2013) includes support for 64-bit COM interoperability, Microsoft SQL Server 2012, and MySQL 5.6. It also has several important bug fixes. It includes all the bug fixes from previous updates of ColdFusion 10. This update also addresses a vulnerability mentioned in the security bulletin APSB13-19.
This update is specific to ColdFusion 10 only.
Issues fixed
Bug # |
Title |
Product Area |
Error accessing Server Updates page in the ColdFusion Administrator after disabling "enable session variables" |
Administrator |
|
SerializeJSON casts multiple zero values as number instead of string |
Ajax |
|
SerializeJSON does not preserve case when using a mix of array notation and dot notation |
Ajax |
|
ColdFusion 10 does not maintain sessions when using the CFFILEUPLOAD action page |
Ajax |
|
Frequent key collisions result in ColdFusion returning an incorrect result-set when using a cached query with queryparams |
Caching |
|
Error on application startup when using ORM secondary cache |
Caching |
|
ColdFusion 9 watermark is shown for charts in ColdFusion 10 Developer edition |
Charting/Graphing |
|
COM Interoperability with ColdFusion on 64-bit Windows throws 32-bit DLL error |
COM/DCOM |
|
Unable to execute queries on MySQL 5.6 |
Database |
|
Unable to read a file from RAM using CFSPREADSHEET tag |
Document Management |
|
CFDIRECTORY throws an exception when it encounters an inaccessible directory during a recursive list action. |
File Management |
|
CFSPREADSHEET action=”write” cannot be used to write files to the VFS |
File Management |
|
instances.xml picked from the wrong location for a noncfusion instance |
Hot fix Installer |
|
Users are notified in case a problem is encountered when applying an update using the ColdFusion Administrator |
Hot fix Installer |
|
Server Update Notification uses invalid “FROM” email address |
Hot fix Installer |
|
"Select all" option in ColdFusion updater doesn't work |
Hot fix Installer |
|
Error applying update on a noncfusion instance if cfusion instance is not selected. |
Installation/Config |
|
CGI.ALL_HTTP variable does not exist (IIS, all versions) |
Installation/Config |
|
"coldfusion status" command fails silently on Linux |
Installation/Config |
|
Bug in shorthand struct notation causes preceding statement to be skipped |
Language |
|
Extension to 3309220. Change of behavior from CF 9 when persisting UTC date/time |
Language |
|
When a struct is created by copying arguments using structCopy, any new key added to doesn't show up in the keylist or cfdump. |
Language |
|
ColdFusion 10 form variable functionality change relating to case of variables |
Language |
|
SerializeJSON() does not fully serialize array of entities from EntityLoad |
Language |
|
Issue with ORMREload() and Secondary Cache |
ORM Support | |
Using RestInitApplication("/mymapping", "servicename") results in an exception in the ColdFusion Administrator after server restart |
REST Services |
|
RestInitApplication does not work in the case of multiple applications if application-specific mappings are used |
REST Services |
|
RESTful web services do not correctly handle character encoding |
REST Services |
|
Archive wizard displays an exception if an attempt is made to archive a task with an event handler but no defined URL. |
Scheduler |
|
Exception when application tasks are defined without an application name. |
Scheduler |
|
PauseAll/ResumeAll does not work when there are expired scheduled tasks are present |
Scheduler |
|
Calling the event handler for onMisfire does not work |
Scheduler |
|
cfschedule throws an error if list of dates in Exclude attribute contains spaces after the comma delimiter |
Scheduler |
|
Using CFSCHEDULE tag with action="PauseAll" causes an error if you have chained tasks at the server or application level |
Scheduler |
|
When an application-mode task is paused via the ColdFusion Administrator, its mode is changed to the application's name. |
Scheduler |
|
Migrated scheduled tasks show incorrect information |
Scheduler |
|
Inconsistent use of underscores in CFSCHEDULES’s result fields and attribute values |
Scheduler |
|
Task names become UPPERCASE upon .CAR deploy or server restart |
Scheduler |
|
CAR wizard only archives tasks if mode="server" and group="default" |
Scheduler |
|
Paused tasks misfire upon .CAR deploy |
Scheduler |
|
If a task name begins with a special character (ex: space) editing the task gives an error error" on editing the task. |
Scheduler |
|
Paused tasks are misfired on restart of ColdFusion. |
Scheduler |
|
Security hot fix addresses a vulnerability that could permit an attacker to call public methods on ColdFusion Components (CFC) using WebSockets |
Security | |
IIS 404 custom error handler URLs that are .CFM files do not consistently return entire document |
Web Container (Tomcat) |
|
Adding an instance corrupts commons-daemon-native.tar.gz |
Web Container (Tomcat) | |
CGI.server_port information incorrect when using any type of port forwarding |
Web Container (Tomcat) |
|
ColdFusion 10 web services fail in IIS virtual folders |
Web Services |
|
Web services aren"t served from https with stock ColdFusion 10 install |
Web Services |
|
[ANeff] Bug for: typo in WSPublish() exception |
Web Socket |
|
[ANeff] Bug for: typo subscribercount_callbackHanlders (dl, not ld) in cfwebsocketChannel.js |
Web Socket |
|
CGI Scope getting reset by websocket handler |
Web Socket | |
Error when using Web Socket to call a CFC function that returns the CGI scope |
Web Socket |
Prerequisites
- If you have not already applied ColdFusion 10 Mandatory Update, apply it first. This step is not required if you have ColdFusion 10 Update 8 or above.
- On 64-bit computer, use 32-bit JRE for 32-bit ColdFusion and 64-bit JRE for 64-bit ColdFusion.
- If the ColdFusion server is behind a proxy, specify the proxy settings for the server to get the update notification and download the updates. Specify proxy settings using the system properties below in the jvm.config for a stand-alone installation, or corresponding script file for JEE installation.
- http.proxyHost
- http.proxyPort
- http.proxyUser
- http.proxyPassword
- For ColdFusion running on JEE application servers, stop all application server instances before installing the update.
Installation
For instructions on how to install this update, see Server Update section.
- Microsoft Windows 7, Windows 8, Windows Server 2008, Windows Server 2008 R2, and Windows Server 2012 users must use the “Run as Administrator” option.
- The update can be installed from the Administrator of a ColdFusion instance or through the command-line option (For further details, see the link above).
- Windows users can launch the ColdFusion Administrator using Start > All Programs > Adobe > Coldfusion 10 > Administrator.
- After applying the update, reconfigure the connectors using wsconfig tool. It is available at {cf_install_home}/{instance_name}/runtime/bin. On Windows, It can be launched by choosing Start > All Programs > Adobe > ColdFusion 10 > Web Server Configuration Tool. However, you can choose to ignore this step if you are on ColdFusion 10 Update 5 or later.
- You can encounter a Signature Verification Failed error when downloading and installing this update. To resolve this issue, download and install the ColdFusion 10 Mandatory Update first, before installing ColdFusion 10 Update 11. For more information, see this article. If this error persists, then download ColdFusion 10 Update 11, afresh. This error is primarily due to certain issues with download.
- If you get the following error when installing the update using the Download and Install option, ensure that the folder {cf_install_home}/{instance_name}/hf_updates has write permission: "An error occurred when performing a file operation write on file {cf_install_home}/{instance_name}/hf-updates/hotfix_011.properties"
- Connector would need to be reconfigured if a fix for bug #3488063 is required. It is applicable only, when connector is configured with IIS.
Uninstallation
To uninstall the update, do one of the following:
- In ColdFusion Administrator, click Uninstall in Server Update > Updates > Installed Updates.
- Run the uninstaller for the update from the command prompt. For example, java -jar {cf_install_home}/{instance_home}/hf_updates/hf-10-00011/uninstall /uninstaller.jar
If you can't uninstall using the above-mentioned uninstall options, the uninstaller could be corrupted. However, you can manually uninstall the update by doing the following:
- Delete the update jar from {cf_install_home}/{instance_name}/lib/updates.
- Copy all folders from {cf_install_home}/{instance_name}/hf-updates/{hf-10-00011}/backup directory to {cf_install_home}/{instance_name}/
Remember
- In the ColdFusion Administrator, if you see the update listed in both Available Updates and Installed Updates, it could be a caching issue. Do the following:
- Navigate to Server Update > Updates > Available Updates and click Check For Updates.
- Press Ctrl+F5 to remove the bulb notification from the top banner of the ColdFusion Administrator.
- If ColdFusion server doesn't start automatically (ps -ef | grep -i coldfusion command indicates ColdFusion is running, but the ColdFusion Administrator cannot be accessed), restart the server manually after applying the update. This issue is rare and occurs on few Unix or Linux-based operating systems (when buffer allocation size of the machine console is almost zero).
