ColdFusion (2023 release) updates

This article lists all released ColdFusion (2023 release) updates. 

ColdFusion (2023 release) Update 12 (release date, December 23, 2024) resolves a critical vulnerability that could lead to arbitrary file system read.

View the security bulletin, APSB24-107, for more information.

For more details, see this article.

Type: Security

File: ColdFusion (2023 release) Update 12 (MD5: cab3018d9c64cdf578bdf2de28746889)

Hotfix and packages repository: Link (MD5: f766e21b0152afce46923be9da730c90)

Build Number: 2023,0,12,330713

ColdFusion (2023 release) Update 11 (release date, October 15, 2024)  includes bug fixes and enhancements in Administrator, Language, CFSetup, Database, and other areas. The update also contains library upgrades, such as Jackson-data-bind, netty, ehcache, etc.

For more details, see this article.

Type: General

File: ColdFusion (2023 release) Update 11 (MD5: 43cb92b3eb072f68cf55e6c8994de0e2)

Hotfix and packages repository: Link (MD5: 2b4c02eb54d4e241f582b3349dfbfd5e)

Build Number: 2023,0,11,330706

ColdFusion (2023 release) Update 10 (release date, September 10, 2024) resolves a critical vulnerability that could lead to the deserialization of untrusted data. View the security bulletin, APSB24-71, for more information.

For more details, see this article.

Type: Security

File: ColdFusion (2023 release) Update 10 (MD5: 4482a8591ac41012864a21cab8019561)

Hotfix and packages repository: Link (MD5:a1823b038e68ff9221a351c6a7c17779)

Build Number: 2023,0,10,330680

In ColdFusion (2023 release) Update 9 (release date, August 20, 2024), we’ve upgraded Tomcat from version 9.0.85 to version 9.0.93.

For more details, see this article.

Type: General

File: ColdFusion (2023 release) Update 9 (MD5: 4c2ab5341cea786aabfe1716db2c262f)

Hotfix and packages repository: Link (MD5: 90881a521fd0e6f3ddd25b38ac12d2a2)

Build Number: 2023,0,9,330677

ColdFusion (2023 release) Update 8 (release date, June 11, 2024) addresses vulnerabilities mentioned in the security bulletin, APSB24-41.

For more details, see this article.

Type: Security

File: ColdFusion (2023 release) Update 8 (MD5: eb83e37a682f02ad9ba8e4cfddb32b13)

Hotfix and packages repository: Link (MD5: 1b2c8711197f932a994b5280492ccb7d)

Build Number: 2023,0,8,330668

ColdFusion (2023 release) Update 7 (release date, 12 March, 2024) addresses vulnerabilities mentioned in the security bulletin, APSB24-14.

For more details, see this article.

Type: Security

File: ColdFusion (2023 release) Update 7 (MD5: 2b0f5588a81851f1e7bf874dd60bae8e)

Hotfix and packages repository: Link (MD5: 0a643cc62929976f6cc880ed2c3ccbf5)

Build Number: 2023,0,7,330663

ColdFusion (2023 release) Update 6 (release date, 14 November, 2023) addresses vulnerabilities that are mentioned in the security bulletin, APSB23-52.

For more details, see this article.

Type: Security

File: ColdFusion (2023 release) Update 6 (MD5: 1d7a8944c790da9d093a8ec81a8c7156)

Hotfix and packages repository: Link (MD5: ce94dbe4b7477e011dc01d825570dba8)

Build Number: 2023,0,6,330617

ColdFusion (2023 release) Update 5 (release date: October 5, 2023) includes bug fixes and enhancements in Administrator, Installer, Migration, Package manager, Database, and other areas. The update contains upgrades to Tomcat (v9.0.78) and other libraries, such as jackson-databind, Netty, etc. Note that this update is cumulative and includes fixes from the previous updates. 

For more details, see this article.

Type: General

File: ColdFusion (2023 release) Update 5 (MD5: 149975e2324eda2c9fb4c17506ba0fc6)

Hotfix and packages repository: Link (MD5: 45faef8b991db1925265cfcf410d9f20)

Build Number: 2023,0,5,330608

ColdFusion (2023 release) Update 4 (release date, 17 August, 2023) introduces the ColdFusion serial filter that can be used to allow or disallow Java classes or packages for the deserialization of Wddx packets.

For more details, see this article.

Type: General

File: ColdFusion (2023 release) Update 4 (MD5: d32b2d16ed4b5d8689f1db234d924318)

Hotfix and packages repository: Link (MD5: c89329ab072cf3f5a513dd6fc91ab2b1)

Build Number: 2023,0,4,330500

ColdFusion (2023 release) Update 3 (release date, 19 July, 2023) addresses vulnerabilities that are mentioned in the security bulletin, APSB23-47.

For more details, see this article.

Type: Security

File: ColdFusion (2023 release) Update 3 (MD5: 723c3351b4921db90adf66cd8056df45)

Hotfix and packages repository: Link (MD5: dd87c0ca90d049834b1ab450a994eb6a)

Build Number: 2023,0,3,330486

ColdFusion (2023 release) Update 2 (release date, 14 July, 2023) addresses vulnerabilities that are mentioned in the security bulletin, APSB23-41.

For more details, see this article.

Type: Security

File: ColdFusion (2023 release) Update 2 (MD5: 078a2e6b63f4ee0cca3c4aabfdf3666c)

Build Number: 2023,0,2,330482

ColdFusion (2023 release) Update 1 (release date, 11 July, 2023) addresses vulnerabilities that are mentioned in the security bulletin, APSB23-40.

For more details, see this article.

Type: General

File: ColdFusion (2023 release) Update 1 (MD5: 8e631f96ead408740a46b0f5c66706be)

Build Number: 2023,0,1,330480