[Looking for Charlie's main web site?]

Announcing ColdFusion updates of Sep 9 2025 - p1 security update - thoughts and resources

An update for ColdFusion has been released, Sep 9 2025, for each of cf2025 (update 4), cf2023 (update 16) and cf2021 (update 22). In brief, it addresses a single P1 (Priority 1, "Critical") security vulnerabilities, along with an indicated update to the "feed" package (used by cffeed). Note that Adobe is also reporting currently that, "Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates." More below.

As usual, there are a number of things you should consider before (or after) doing the update, with some discussed in Adobe's resources on the update (there are more than one), and some info that I share below based on my experience helping people apply this and past updates.

In this post, I share the details about the update (from Adobe and from others). I can report I have installed the update for each release on multiple machines and operating systems without any major incidents. As for challenges (common to recent releases) and lessons learned (about this update), read on.

[....Continue Reading....]

Announcing Java updates of Jul 15 2025 - thoughts and resources

It's that time again: there are new Oracle JVM updates released today (Jul 15, 2025) for the current long-term support (LTS) releases of Oracle Java, 8, 11, 17, and 21, as well as the new short-term release 24. (The previous short-term release, Java 23, is no longer updated.)

TLDR: The new updates are 1.8.0_461 (aka 8u461), 11.0.28, 17.0.16, 21.0.8, and 24.0.2, respectively. More on the updates below, including links to more info on each of them including what changed, bug fixes, and the security fixes each version contains. (I also offer a quick assessment of the updates with respect to my primary audience, users of CFML engines.)

[....Continue Reading....]

Announcing ColdFusion updates of July 8 2025 - p1 security update and more

An update for ColdFusion has been released, July 8 2025, for each of cf2025 (update 3), cf2023 (update 15) and cf2021 (update 21). In brief, it addresses a number of P1 (Priority 1, "Critical") security vulnerabilities and more, including bug fixes and some modest feature changes.

As usual, there are a number of things you should consider before (or after) doing the update, with some discussed in Adobe's resources on the update (more than one), and some that I share below based on my experience helping people apply this and past updates. Finally, the update corrects some issues introduced in the previous updates, released in May.

In this post, I share the details about the update (from Adobe and from others). I can report I have installed the update for each release on multiple machines and operating systems without any major incidents. As for challenges (common to recent releases) and lessons learned (about this update), read on.

[....Continue Reading....]

Presenting "Debugging & Error Handling in ColdFusion" today, online for CF DevWeek

Today begins the first of several live hour-long presentations over the next few days as part of Adobe ColdFusion Dev Week. I blogged more about the week-long event on the Adobe CF portal, including listing all the topics, times, and presenters (and those are offered on the Adobe devweek page linked to above, of course--though the UI is a bit of a challenge, with each day in a different tab you must select).

I want to announce in particular here that I'll be offering the first talk of the week: "Debugging and Error Handling in ColdFusion". Read on for more.

[....Continue Reading....]

Announcing ColdFusion updates of May 13 2025 - p1 security update - thoughts and resources

An update for ColdFusion has been released, May 13, 2025, for both cf2025 (update 2), cf2023 (update 14) and cf2021 (update 20). In brief, it addresses a P1 (Priority 1, "Critical") security vulnerability, as indicated in the associated ASPB (security bulletin) for the update.

The update also incorporates potentially breaking changes (with Adobe trading compatibility for security), while it also includes configurable options to undo those changes (if you prefer to trade away security for compatibility). Finally, the update corrects some issues introduced in the previous updates, released in April.

In this post, I share the details about the update (from Adobe and from others). I can report I have installed both updates on multiple machines and operating systems without incident. As for challenges or lessons learned, I may do a follow-up post as I/we all learn more.

For more details, read on.

[....Continue Reading....]

Presenting "Solving Common Problems with CF Updates" today, online

Have you had problems installing CF updates, whether the most recent or past ones?

I'll be presenting a talk on this topic, online today, at noon US Eastern, on the CFMeetup Youtube livestream (which will be recorded). Folks who are members of the Online ColdFusion Meetup will have already gotten email notification about this, including the meeting URL, but for those who are not members here are the details:

[....Continue Reading....]

Announcing Java updates of Apr 15, 2025 - thoughts and resources

It's that time again: there are new JVM updates released today (Apr 15, 2025) for the current long-term support (LTS) releases of Oracle Java, 8, 11, 17, and 21, as well as the new short-term release 24. (The previous short-term release, Java 23, is no longer updated.)

TLDR: The new updates are 1.8.0_451 (aka 8u451), 11.0.27, 17.0.15, 21.0.7, and 24.0.1, respectively. Crazy that there are now 5 current Java releases, I do realize. More below, including links to more on each of them including what changed, bug fixes, and the security fixes each version contains, which are offered in Oracle resources I list below.

[....Continue Reading....]

Delighted to be speaking at Into the Box 2025, in early May

I'm delighted to announce that I've been selected to speak at the upcoming Into the Box event (in DC in early May), where I'll be presenting "Hidden Gems in FusionReactor: for BoxLang, ACF, and Lucee Users".

This should not be confused of course with the "Hidden Gems in CF2025" talk which I also just announced that I'd be presenting at the upcoming CF Summit East (next week in DC) and CFCamp (in Munich in late May). It'll be a busy few weeks! :-)

As with them, it's always a thrill to attend this annual event. Following is the topic description and more.

[....Continue Reading....]

Presenting "Hidden Gems in CF2025" at CF Summit East in March, CFCamp in May

I'm delighted to announce that I've been selected to present my "Hidden Gems in ColdFusion 2025" talk at both the upcoming Adobe ColdFusion Summit East event (in DC in March), as well as the CFCamp conference (in Germany in late May).

It's always a thrill returning to these annual events. Following is the topic description and more.

[....Continue Reading....]

A table of Java versions supported by given ColdFusion versions

[Posted originally in Mar 2025, updated in May 2026)

Now that CF2025 has come out, supporting Java 21--and as ColdFusion and Java versions continue to evolve--you may wonder which version(s) of Java you can use with your current (or a given) version of ColdFusion.

You can't just use "any" jvm version with CF: it depends on first on what version of CF you are using, and then may even depend on what CF update has been applied to that CF version. (You also can't use Java from any vendor: Adobe supports only use of Oracle Java, and they license it for our use, as I discuss later.) And to be clear, currently ONLY CF2025 supports Java 21. (And though Java 25 came out in Sep 2025 as the latest LTS or "long-term support" Java releases, note that NO CF version currently supports that--as of an updated check in May 2026.)

So in this post, I offer a table that clarifies things, listing the various recent CF versions (even those no longer supported) and what (LTS) Java versions they supported, including if some CF update of a version changes the Java version supported.

[....Continue Reading....]

More Entries

Copyright ©2026 Charlie Arehart
Carehart Logo
BlogCFC was created by Raymond Camden. This blog is running version 5.005.
(Want to validate the HTML in this page?)

Managed Hosting Services provided by
xByte cloud Hosting