[Looking for Charlie's main web site?]

ColdFusion updates for CF2023 and CF2021 released Aug 17 2023: resources and thoughts

Adobe has released today an important security update for each of ColdFusion 2023 and 2021. (Since CF2018 is end of life since July, there is no update for that version.) Note that while the technotes for the updates don't mention/link to any Adobe product security bulletin (APSB), this update is indeed an update that provides important security protections, as I discuss further below.

For more resources as well as some additional thoughts on the updates (including what security matter it entails as well as some lessons learned in applying the update--especially if you may update your Java to the JVM released last month), read on.

[....Continue Reading....]

Comments
So is the recommendation to stay on Java version 11.0.19 until we hear back from Adobe?
# Posted By Dave Cordes | 8/18/23 9:52 AM
No. It's AN option. I listed a few. There are certainly arguments some would make to ensure CF 2021 IS running on 11.0.20, as the latest java 11 version (and same for CF2023 with regard to Java 17).

See both my section on this above and my earlier post that I point to, for more on that debate.
Thank you for the informative post! One minor typo: the label on the link for the "Technote for CF2023 update 10" should be "Technote for CF2021 update 10".
# Posted By Carl Von Stetten | 8/18/23 11:31 AM
Thanks so much, Carl. Corrected. :-)
Copyright ©2024 Charlie Arehart
Carehart Logo
BlogCFC was created by Raymond Camden. This blog is running version 5.005.
(Want to validate the html in this page?)

Managed Hosting Services provided by
Managed Dedicated Hosting