Announcing ColdFusion updates released Nov 14 2023 - security update

Hi Charlie, I just read your email about this and decided to update CF2023 to Update 6 and now I have a server-wide 500 Internal Server Error that I can't resolve.

The log says:

Installation: Unsuccessful.

145 Successes
2 Warnings
2 NonFatalErrors
2 FatalErrors

Action Notes:

Failed to copy hotfix files:C:\Users\Administrator\250372.tmp\dist\updates: Failed to copy the hotfix files to the target location. Retry installation after ensuring that the server is not running or files are not locked by the server.

Failed to copy hotfix files:C:\Users\Administrator\250372.tmp\dist\wwwroot: Failed to copy the hotfix files to the target location. Retry installation after ensuring that the server is not running or files are not locked by the server.

I have tried to uninstall using CMD and it says invalid or corrupt JAR file for the uninstaller.jar

I have reinstalled the update, several times, manually stopped all Coldfusion services before doing it and it's still stuck in this state.

I'm out of ideas of where to go from here - any help would be much appreciated.

Thanks for your reply Charlie. I did read your article but as I'm on the version of Java that I believed wasn't affected by it and it was supposed to be fixed for Update 6, I ignored it - my mistake.

I have now managed to install updated 5 with the extra argument and it went through ok. However, I now have a new problem that I can see in FusionReactor which is that it says 'java.lang.NoSuchFieldError: preserveCase'.

I can open the Administrator but Coldfusion is failing to process any application.cfc on my server because of it but I don't have any code that references preserveCase. I don't know if that's a Java problem or a corrupted Coldfusion file problem.

Thank you - you are a lifesaver. I did as you suggested and it has resolved the issue.

I wish Adobe support was as reactive and helpful.

Thanks again.

I was on Update 3. I hope it helps others too. Your other posts have certainly helped me many times previously over the years.

I just want to second the statement that you are a lifesaver. I've gotten so much help from your blog regarding the security updates.

@Phil, thanks for the clarification that it seems related to the Report package/module . (FWIW, I had in fact proposed (in comment here on 11/14) that doing so was the seeming solution, and that it seemed to be an issue as of update 5.) Also, I have tweaked your comment. I'm pretty sure you meant to say cfclasses rather than class (a very important distinction).

@S Daugherty, thanks for your kind regards here. Sorry I missed that back in November.