Skip to main content
S
Community Manager
Saurav_GhoshCommunity Manager
Community Manager
September 14, 2021
Question

ColdFusion (2021 release) and ColdFusion (2018 release) September updates

  • September 14, 2021
  • 11 replies
  • 11795 views

We are pleased to announce that we have released the updates for the following ColdFusion versions:

 

Note: The ColdFusion (2021 release) installers have also been refreshed with this update. The new server installers bundle Update 2 and JDK 11.0.11. The ColdFusion Add-Ons and other installers are bundled with JDK 11.0.11. The refreshed installers are available at ColdFusion downloads.

 

In these updates, we’ve fixed a few security bugs and some other bugs, which are mentioned in the tech notes.

 

These updates fix security vulnerabilities that are mentioned in the security bulletin,  APSB21-75.

In addition, Update 2 of ColdFusion 2021 features the following:

 

For more information, see the tech notes for ColdFusion 2021 Update 2.

 

The Docker images will be hosted shortly on Amazon ECR and Docker Hub.

 

Please update your ColdFusion versions and provide us your valuable feedback.

    This topic has been closed for replies.

    11 replies

    Charlie Arehart
    Community Expert
    Charlie ArehartCommunity Expert
    Community Expert
    June 29, 2022

    For those experiencing the qofq bug discussed here, see the hotfix available for it at https://tracker.adobe.com/#/view/CF-4212383. It's needed for cf2021 updates 2-4, and cf2018 updates 12-14.

     

    The bug started with the first of those updates and was fixed within a month of it with the provided hotfix ja , but sadly none of the next two updates included ANY hotfixes. Worse, they REMOVE any you may have put in.

     

    As for applying such special fixes, you may find value in a blog post I've done in the past, "How to implement a special hotfix that Adobe may give you". 

    /Charlie (troubleshooter, carehart. org)
    P
    petera43968492
    Participating Frequently
    August 19, 2022

    A further update on the QOQ problem in ColdFusion even with the patch applied.

    In the order by statement, if you use the numeric value of the field, it fails.

    If you use the field name, it works.

    Ie: if you have order by set to ‘5 DESC,fieldb, fieldc’ -  it fails

    If you have order by set to ‘fielda DESC, fieldb, fieldc’  - it works

     

    So QoQ appears to be allergic to using field numbers in the ORDER BY clause.

    It used to work to use the field numbers before these recent versions.

    BKBK
    Community Expert
    BKBKCommunity Expert
    Community Expert
    September 17, 2022

    Ie: if you have order by set to ‘5 DESC,fieldb, fieldc’ -  it fails

    If you have order by set to ‘fielda DESC, fieldb, fieldc’  - it works

     

    So QoQ appears to be allergic to using field numbers in the ORDER BY clause.

    It used to work to use the field numbers before these recent versions.


    By @petera43968492

     

    If so, file a bug report, requesting backward-compatibility.

    R
    rgjason2
    Participating Frequently
    December 18, 2021

    did this fix get removed from hotfix 3, becuase the error came back immediately after applying the fix.

     

    java.lang.UnsupportedOperationException: getColumnType() at coldfusion.sql.QueryTableMetaData.getColumnType(QueryTableMetaData.java:783

     

    <cfquery name="retVal.currSum" dbtype="query">
    SELECT rs_name,
    SUM(CAST(last_count AS INTEGER)) AS last_count,
    SUM(CAST(proj_amount AS DOUBLE)) AS PROJ_AMOUNT
    FROM retVal.Curr
    GROUP BY rs_name
    </cfquery>

    K
    kwilsonwfu
    Participating Frequently
    December 18, 2021

    From the Slack channel yesterday:

    priyank_adobe
    Yesterday at 10:18 AM

    This is purely security update, so any fix that you have applied ex QoQ needs to be applied again manually.
    R
    rgjason2
    Participating Frequently
    December 18, 2021

    Ahh, gotcha, okay i re-applied hotfix hf202100-4212383.jar and that fixed things.

     

    It would have been helpful if the Update3 install instructions noted that it would back out other previously installed hot-fixes.

      K
      KamHey
      Participating Frequently
      September 28, 2021

      This issue is caused by the patch 12. Not an application problem. Adobe should fix the problem instead of asking people to change their applications. Just not feasible 

      K
      kwilsonwfu
      Participating Frequently
      September 28, 2021

      Adobe has fixed it, though many of us resolved it via minor changes to our code before even reporting the problem.

       

      K
      KamHey
      Participating Frequently
      September 28, 2021

      Thanks, happened in too many places, big application, not feasible to make all changes and test.

      James Moberg
      James Moberg
      Inspiring
      September 16, 2021

      I attempted to upgrade 2021.0.01.325996 using the CFAdmin website interface and nothing happened when I clicked either "download" or "download and install". If I open F12 developer console, I see this jQuery error.

      Uncaught TypeError: Cannot read properties of undefined (reading 'cfhf_buildnumber')


      The documentation highlighted a new installer, so I redownloaded the newCF2021u2 "Trial" installer, selected "developer" and it states that it will only install in JEE EAR/WAR mode. (I want to install it on Windows to use in combination with IIS.)  The Adobe installer states to go to https://www.adobe.com/go/cfjee_deploy for a list of supported servers and deployment instructions, but that webpage is coming up "404 Not Found" for me.

      I finally followed the instructions to download the JAR and run it manually and that was successful and it's now reports v2021.0.02.328618.

       

       

      Charlie Arehart
      Community Expert
      Charlie ArehartCommunity Expert
      Community Expert
      September 16, 2021

      For those who may not dig down through all the comments, there are  some bugs in query of queries functionality, in both these updates.

       

      And Adobe has a fix. To obtain it, email them at cfsup@adobe.com, as indicated a nested comment below from Adobe,

       

      As for applying such special fixes, you may find value in a blog post I've done in the past, "How to implement a special hotfix that Adobe may give you". 

      /Charlie (troubleshooter, carehart. org)
        P
        petera43968492
        Participating Frequently
        September 15, 2021

        Email from support if you do not have internet connection to your server.

        Download the jar file

        ColdFusion (2021 release) Update 2 (adobe.com)

        You can download repository from below link
        https://cfdownload.adobe.com/pub/adobe/coldfusion/2021/packages/packages-cf2021-002-328618.zip

        P
        petera43968492
        Participating Frequently
        September 15, 2021

        Make a backup copy of your <ColdFusion2021Home>\bundles directory.

        Unzip the repository file and copy the files over the existing files in the bundles directory.

        After unziping I realized the jar file was also included in the repository.

        Run cmd as administrator and install the hot fix with java -jar hotfix-002-328618.jar.

        Then cd to <ColdFusion2021Home>\cfusion\bin and run cfpm install all.

        Priyank Shrivastava.
        Community Manager
        Priyank Shrivastava.Community Manager
        Community Manager
        September 16, 2021

        Hi Everyone, 

         

        We have a fix for QoQ issue for both CF2018 and CF2021. You can reach out to our team at cfsup@adobe.com if you need the fix.

         

        Thanks, Priyank Shrivastava
          P
          petera43968492
          Participating Frequently
          September 15, 2021

          Do you have a link for download of the corresponding zip file perhaps named cf2021-update2-328618-repo.zip for those of us with no internet connection?

          F
          FishDev
          Participating Frequently
          September 15, 2021

          I am having the same QoQ issue on ColdFusion 2018. Some further detail is that it only seems fails if you have an ORDER BY clause in your QoQ.

           

          This worked prior to the update:

          <cfquery name="myQuery" dbtype="query">
          SELECT * FROM query1
          UNION
          SELECT * FROM query2
          ORDER BY column
          </cfquery>

           

          After the update it results in the following error: getColumnType() null <br>The error occurred on line xxx.

           

          If you remove the order by clause this will resolve the error but obviously your query no longer be sorted 

          <cfquery name="myQuery" dbtype="query">
          SELECT * FROM query1
          UNION
          SELECT * FROM query2

          <!---ORDER BY column--->
          </cfquery>

           

          Looking at the patch notes I wonder if this is a bug from CF-4211538 Temporary columns in an ORDER BY clause will be randomly returned in QoQ result set even if they aren’t specified in a SELECT statement.

            DevScreen
            DevScreen
            Inspiring
            September 15, 2021

            I repored this error also, and both of our queries that errored so far have Order By in it.  It very well could be the cause for us too.

            RandJer
            RandJer
            Participant
            September 15, 2021

            Something else I'm noticing.

             

            If you are unioning two queries (QoQ) and one of those has a 0 recordcount, the union fails.

             

            <cfquery dbtype="query" name="c">
   Select this from  from c1    
    union
   Select this from  from c2
    order by this
</cfquery>

In this case C1 had about 6 records, but C2 return 2 (but was valid)

This worked in 16.11
            RandJer
            RandJer
            Participant
            September 15, 2021

            Edit: C2 returned 0 records.

            Charlie Arehart
            Community Expert
            Charlie ArehartCommunity Expert
            Community Expert
            September 14, 2021

            Besides my last comment about a need for the cffiddle.org site to be updated for the new updates, I will add here that I offered a few other comments to help folks considering this update (and questions for Adobe folks) in my comment on their blog post about this update, also posted today.

             

            Since some folks may only see this post by Saurav here, I wanted to point out those other things for consideration, but I don't want to duplicate them (and really, any responses to them ought to perhaps be made there rather than here, to avoid further cross-posting).

            /Charlie (troubleshooter, carehart. org)
            Show more replies
            Terms & ConditionsAccessibility statement
            Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices