Announcing ColdFusion updates of Jun 9 2026 - p1 security update - thoughts and resources
In brief, this update is classed by Adobe as a P1 (Priority 1, "Critical") security update. Then again, the security bulletin (link below) indicates as of today that, "Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates."
The update also includes a still-more recent update to the version of Tomcat embedded within each CF version than previous CF updates. To be clear, there are no other changes, bug fixes, or known issues indicated for this update.
FWIW, some may know that Adobe released an update just last month--which was ONLY for CF2025, as I discussed in a post that day, May 20. That DID include many new features and changes (including changed behaviors), so note that if you are on CF2025 and are skipping from update 7 or earlier, look to that post for more before proceeding.
And like with each CF update, I share the details about the update (from Adobe and from others) as well as additional info you may want to consider before (or after) doing the update.
For more, read on.
LocalVariableTable name index programming error: max 65,536 > 65,535
LocalVariableTable name index programming error: max 65,536 > 65,535
Not able to find the answer.
But assuming those prove not to explain or resolve your problem, here's what I'd recommend you try next.
First, try editing the file in question (just making an innocuous change like adding a new blank line), then save and run it. Does that help? If so I'll share more. Bottom line this will force recompilation of the template. No, it shouldn't be necessary. Let's just see first if it helps.
But then if that doesn't work (and I can imagine why it might not, despite being close to the solution), try this instead:
- stop cf
- delete the cfusion/wwwroot/WEB-INF/cfclasses folder (not its sibling "classes" folder)
- then restart cf
That will remove the saved compilation of all cfm and cfc files. Again, we should not NEED to do it, but let's see if it it helps here. Note I said to do it while stopped. That's very important. (using the "clear template cache" button in the cf admin does NOT do this.)
Let us know if it helps. If so, I'll share more. If not, at least confirm you've done all 4 things above (check log, delete felix-cache, edit file, clear cfclasses).
FYI I have skipped update 8, I went from update 7 to update 9
before I posted my comment, I did delete compiled cfclasses, also made changes to the file and didn't work. going to try felix-cache and see if it works.
LocalVariableTable name index programming error: max 65,536 > 65,535 The specific sequence of files included or processed is: {fileLocation}, line: xx"
java.lang.IllegalArgumentException: LocalVariableTable name index programming error: max 65,536 > 65,535
at org.apache.bcel.util.Args.requireU2(Args.java:81)
at org.apache.bcel.classfile.Attribute.<init>(Attribute.java:269)
at org.apache.bcel.classfile.LocalVariableTable.<init>(LocalVariableTable.java:67)
at org.apache.bcel.generic.MethodGen.getLocalVariableTable(MethodGen.java:770)
at org.apache.bcel.generic.MethodGen.getMethod(MethodGen.java:809)
at coldfusion.bytecode.JavaAssembler.getBytes(JavaAssembler.java:445)
at coldfusion.compiler.TemplateAssembler.assemble(TemplateAssembler.java:166)
at coldfusion.compiler.NeoTranslator.translateJava(NeoTranslator.java:410)
at coldfusion.compiler.NeoTranslator.translateJava(NeoTranslator.java:155)
at coldfusion.runtime.TemplateClassLoader$TemplateCache$1.fetch(TemplateClassLoader.java:525)
at coldfusion.util.LruCache.get(LruCache.java:180)
at coldfusion.runtime.TemplateClassLoader$TemplateCache.fetchSerial(TemplateClassLoader.java:451)
at coldfusion.util.AbstractCache.fetch(AbstractCache.java:58)
at coldfusion.util.SoftCache.get_statsOff(SoftCache.java:153)
at coldfusion.util.SoftCache.get(SoftCache.java:92)
at coldfusion.runtime.TemplateClassLoader.findClass(TemplateClassLoader.java:712)
at coldfusion.runtime.RuntimeServiceImpl.getFile(RuntimeServiceImpl.java:1175)
at coldfusion.runtime.RuntimeServiceImpl.resolveTemplatePath(RuntimeServiceImpl.java:1159)
at coldfusion.tagext.lang.IncludeTag.setTemplate(IncludeTag.java:438)
if I comment out that include from {fileLocation}, it is working.
I realize it may seem you have "simply found a bug". (It would not be clear if it's in update 9 or 8, since you came from 7.) And you may therefore want to just file a bug report with Adobe at tracker.adobe.com. If you do, let us know the ticket so readers can follow along. I've not heard of this from anyone else, but it could be some wider issue.
All that said, it may prove challenging for Adobe to recreate your problem. If you are interested in seeing if there may be something else we may discover, I can think of a few other things to consider (and even to double check regarding what you'd done, as there are reasons your efforts might not have affected what they should.)
It would take way too much time and space here to lay out all the possible things to consider, how to, then how to respond with permutations based on what may be found for any one. So if you are indeed interested to pursue this beyond just filing a ticket with them, we could arrange time today, tomorrow, or next week for a remote consulting session (could be less than an hour, perhaps even far less).
.
For more on my rates, approach, satisfaction guarantee, online calendar, email, phone, and more, see the consulting page at carehart.org.
Either way, looking forward to hearing how things turn out for you. And thanks for bringing the matter up, in case someone else may benefit (or might even offer another suggestion for you).
We have reduced the page size(removed lot of code which was not used), down to around 4980 lines and everything seems to be working now.
at coldfusion.runtime.CfJspPage._get(CfJspPage.java:417)
at coldfusion.runtime.CfJspPage._get(CfJspPage.java:373)
at coldfusion.runtime.CfJspPage._get(CfJspPage.java:354)
at coldfusion.runtime.CfJspPage._autoscalarize(CfJspPage.java:2287)
at cfwebservices2ecfm1322521185._factor7(/CFIDE/administrator/extensions/webservices.cfm:298)" This is not the entire error. This problem only occurs on the two servers that i updated. Could this be a bug in the update or is there another explanation? I see this error in the Coldfusion-out.log during the install: "Error [Thread-13] - Connect to 127.0.0.1:8997 [/127.0.0.1] failed: Connection refused: getsockopt http://127.0.0.1:8997/PDFgServlet/" These servers are isolated and the install is done manually.
Also, though I sound like a broken record (saying this in my replies to folks here), you should file a bug report at tracker.adobe.com, and share the ticket here.
Adobe folks have virtually never responded here to matters that I or others have raised here. BTW, I just accept that and write anyway for everyone else, as well as perhaps those at Adobe who read but for whatever reasons can't or won't respond here.
Finally, to your point about the socket error in the cf startup log lines regarding pdfg, that's wholly unrelated to web services, being instead about the cf add-on service that serves any use of the cfhtmltopdf tag.