Skip to main content
A
arun937
Participant
January 9, 2014
Answered

ColdFusion 9.0.1 vs 9.0.2 from security standpoint - Is an upgrade required?

  • January 9, 2014
  • 1 reply
  • 701 views

Hello,

I have ColdFusion 9.0.1 (Enterprise edition) installed, with Cumulative Hotfix 4 and Security Patch APSB13 & 27 applied on it. The current version details look as below:

Version: 9,0,1,274733

Update Level: hf901-00010.jar 

My question is, is an update from 9.0.1 to 9.0.2 really required from a security standpoint? "Verity" is not a concern for me, since I do not think I use it, and the presence of Verity is not a problem either.

Are 9.0.1 with the above security updates, and 9.0.2 with security updates the same from a security standpoint, or do I gain any more security if I update to 9.0.2?

Thanks,

Arun

This topic has been closed for replies.
Correct answer vishu_13

Hi Arun,

There is no such mandate that you have to go to CF 9.0.2. As ColdFusion 9.0.2 update is a summation of ColdFusion 9.0.1, ColdFusion 9.0.1 Cumulative HotFixes 1 & 2, all ColdFusion 9.0.1 Security HotFixes,without verity so you are getting the same security updates in 9.0.2 which are there in 9.0.1 but without verity however there is an updated JVM

You can check the changes mentioned in the CF 9.0.2 release notes : http://helpx.adobe.com/coldfusion/release-note/coldfusion-9-0-update-2.html

There was a hotfix release for CF 9.0.2 which you cna check here : http://helpx.adobe.com/coldfusion/kb/cumulative-hotfix-1-coldfusion-902.html

The latest update for CF 9.0.1 is http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix-apsb13-27.html

Check this article as well : http://www.carehart.org/blog/client/index.cfm/2013/8/19/understanding_ColdFusion_9.0.2_a_FAQ You will find this article much helpful

HTH

Thanks

VJ

1 reply

vishu_13
vishu_13Correct answer
Inspiring
January 9, 2014

Hi Arun,

There is no such mandate that you have to go to CF 9.0.2. As ColdFusion 9.0.2 update is a summation of ColdFusion 9.0.1, ColdFusion 9.0.1 Cumulative HotFixes 1 & 2, all ColdFusion 9.0.1 Security HotFixes,without verity so you are getting the same security updates in 9.0.2 which are there in 9.0.1 but without verity however there is an updated JVM

You can check the changes mentioned in the CF 9.0.2 release notes : http://helpx.adobe.com/coldfusion/release-note/coldfusion-9-0-update-2.html

There was a hotfix release for CF 9.0.2 which you cna check here : http://helpx.adobe.com/coldfusion/kb/cumulative-hotfix-1-coldfusion-902.html

The latest update for CF 9.0.1 is http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix-apsb13-27.html

Check this article as well : http://www.carehart.org/blog/client/index.cfm/2013/8/19/understanding_ColdFusion_9.0.2_a_FAQ You will find this article much helpful

HTH

Thanks

VJ

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices