Recent Adobe ColdFusion hotfixes

by kai on 11/03/2013

A few days ago, Adobe released a set of hotfixes for the currently supported versions of ColdFusion (9 and 10). Those hotfixes cater for a variety of things, among others – support for Java 7.

ColdFusion 9 and 9.0.1

Unfortunately things are not as easy as they could have been. On Feb 27, 2103 Adobe released the following hotfixes for the various CF 9 releases:

CF9.0.1 CHF3:
CF9.0.2 CHF1:

The hotfixes for CF9 and CF9.0.1 had a few issues and introduced new bugs to the product, so Adobe subsequently released patches for those on Mar 8, 2013:

CF9.0.1 CHF4:

The recommendation is to NOT installed CF9 CHF2 or CF9.0.1 CHF3 but to rather go with CF9 CHF3 and CF9.0.1 CHF4 directly.

ColdFusion 9.0.2

It gets worse. The CF9.0.2 CHF1 had an issue as well and was “refreshed” behind the scenes:

ColdFusion 9.0.2 Cumulative Hot fix 1 was refreshed on March 1 2013 at 6 AM Eastern time to fix an issue (Bug# 3508603) in the Google Maps JavaScript API. If you have already applied Cumulative Hot fix 1, and are using the Google Maps JavaScript API or intend to use this feature, Adobe recommends that you download file again. Make a backup of the CFIDE folder before extracting the files in file to the web root directory with the {CFIDE-HOME} folder.

What does this mean? If you were an early adopter of CHF1 for CF9.0.2 you might have to re-patch. I don’t get why Adobe haven’t released CF9.0.2 CFH2, it’s imho a BIG, BIG, BIG no-no to unexpectedly “refresh” an already released hotfix.

ColdFusion 10

CF10 update 8:

Patches for ColdFusion 10 are distributed through the built-in updater in the CF Administrator. On Feb 27, 2013 – together with the first batch of CF9 hotfixes – Adobe released CF10 updater 8 via this channel. This update contained an issue as well and was “refreshed” the day after the initial release. Adobe has unfortunately decided to NOT release the fix as CF10 update 9, but to “refresh” update 8 behind the scenes as they did with CF9.0.2 (see above). I think that’s a very bad idea that will lead to confusion and all kinds of issues, but please be aware of this (and read the full technote):

ColdFusion 10 Update 8 was refreshed on February 28 2013 at 12 PM Eastern to fix an issue (Bug# 3508603) in the Google Maps JavaScript API. If you have installed this update before it was refreshed (your build number is, then uninstall and reinstall the refreshed Update 8. If you are using the Google Maps JavaScript API or intend to use this feature, Adobe recommends that you apply the refreshed Update 8. The new build number of the refreshed Update 8 is

Adam Cameron March 11, 2013 at 10:34 pm

G’day Kai
I’m glad someone else posted something along these lines: that Adobe kinda dropped the ball with their approach to doing these patches.

I had a similar rant the other day (… I’m not suggesting yours is a rant, but mine certainly was. And wasn’t too sure whether other people just accept this odd behaviour, or whether I was on the right track to call them out.

At the end of the day I guess it’s not a major issue, but it’s a bit disheartening nevertheless.



Andrew Scott March 14, 2013 at 7:53 pm

Kai. I am a little confused. The update 8 for ColdFusion 10 was released on the 7th of March, or at least that is what my information in ColdFusion 10 is telling me. So does that mean that is the correct update, or you have the dates a little out?

Kai March 15, 2013 at 8:02 am

Andrew, I got my dates from the technotes and official Adobe notifications. If you downloaded/installed update 8 for CF 10 on the 7th of March, I would assume it’s up to date.

Comments on this entry are closed.

Previous post:

Next post: