Questions

We are pleased to announce the availability of ColdFusion (2023 release) Update 4 and ColdFusion (2021 release) Update 10. These updates introduce the ColdFusion serial filter that can be used to allow or disallow Java classes or packages for the deserialization of Wddx packets.   What is ColdFusion serial filter?  The cfserialfilter.txt file ensures protection against insecure Wddx deserialization attacks. On the other hand, the already existing serialfilter.txt blocks Java deserialization by disallowing certain Java classes or packages.   How do I download the updates? Head over to the update pages to download the updates: ColdFusion (2023 release) updates ColdFusion (2021 release) updates   What do these updates contain? Learn more about these updates from the following tech notes: ColdFusion (2023 release) Update 4 ColdFusion (2021 release) Update 10   What else? Docker images for ColdFusion 2021 and 2023 will be pushed to AWS ECR and Docker

I will preface this with full disclosure. I know as much about ColdFusion as Jon Snow (I am basically the CF Admin when there is a problem or an upgrade, so once every year or two). I am not sure what was changed, but I get an error logging into the Administrator, takes me to a page, enter.cfm (log below). What I can say is that this was working a few weeks back, and I presume a monthly reboot for Windows updates made some change take place, but there is no record of said change (we have outside parties updating an application). So a stretch, but I was thinking if I could find the Java settings/arguments, I could compare them to our working Test instance. Have not been able to manually fund this, nor a post with this information, and could be the wrong direction anyway. Any thoughts?   Oh, and this is not impacting our application/site, just seemingly the Administrator.  Sep 11, 2023 22:00:01 PM Error [http-nio-8500-exec-1] - Could not initialize class net.sf.e

(CF2016) I need to run a task on the schedule on exactly the same day of the each month. I can set the start date this month, and lower down set MONTHLY, but does that mean it will litereally run on the same day of the month each day, it's not clear that will be the case Thanks.,

While upgrading to CF7 from CF5, I am creating the new collections from Cf Admin. After creating, I indexed it from cf admin and then trying to search for the documents in that collection, and i am getting the following error. This was working yesterday. I have cheched the logs etc and nothing seems helpful in discovering what the issue is.Document count is 11,745 and the size is 25,948 kb, which is not too much for a collection. I have tried to restart Cold Fusion Search Services and then ColdFusion Application services, but all in vain.Any help on this would be greatly appreciated.DetailThe collection you specified does not exists or is not registered with the ColdFusion Search Service.MessageThe collection rc_collectiom does not exist.StackTracecoldfusion.tagext.search.CollectionDoesNotExistException: The collection rc_collectiom does not exist. at coldfusion.tagext.search.SearchTag.verifyLocale(SearchTag.java:819) at coldfusion.tagext.search.SearchTag.doSearch(SearchTag.java:200) a

I have been migrating some old ColdFusion MX 7 applications to CF2016. I am currently stuck on a code which is calling a webservice. It works without any error in MX7 but fails to find the Web service operation in CF2016.Below is how the code is written in MX7:<cfscript>//Printer validationprintername = structNew() ;printername.pid = "1221";//printername.command = "PRINTERS"&#url.branch_loc#;printername.command ="PRINTERS185";//printername.command = "PRINTERSALL"; printername.locale = "en-CA"; Application.UserWebService = CreateObject("webservice","http://weburl:9115/wsdl/WWS001.wsdl"); printerdtls  = Application.UserWebService.WWS001Operation(printername);printerdtlsreq  = printerdtls.TABLEOUT; isprntrvalid="no";for(i=1;i LTE ArrayLen(printerdtlsreq);i=i+1){tempprntrData = UCase(printerdtlsreq[i].TNAME);//writeOutput(tempprntrData & "<bR />"); }writeoutput(#ArrayLen(printerdtlsreq)#);END;</cfscript>I get list of Printer

We are setting up an SFTP connection via cfftp, and are currently receiving the following error:"Error: Session.connect: java.io.IOException: End of IO Stream Read."We have narrowed it down to the version of JSch, which is currently jsch-0.1.54. This will work if we use diffie-hellman-group-exchange-sha1 algorithm, but we need to use diffie-hellman-group-exchange-sha256, which produces the above error. Testing this outside of CF, we have managed to prove that it works successfully using  jsch-0.1.55, while returning the same error above using jsch-0.1.54.So we have been trying to update the CF FTP package to jsch-0.1.55, using the approach detailed here: https://helpx.adobe.com/nz/coldfusion/kb/apply-custom-patch-coldfusion-2021.htmlWhich somewhat usefully has this exact update as it's example. It installs without issue (and we can see the dependency shown as jsch-0.1.55 in the FTP package in the administrator), but it still continues to pick up

I'm running Windows10Pro on my development server with IIS 8.  I'm wanting to run ColdFusion server on this machine.  The site running on it will have a CF application with an Access database behind it.  Eventually, when it goes Production on another machine, the database will be MSSQL.Which version of CFusion should I install?CheersRoy 

I am curring running cf 2021, lockdown tool and performance monitoringI now want to upgrade to 2023 and keep all my settings and it looks a bit scary. Can anyone recommend the best path forward? Do I need to uninstall the 2021 lockdown and pef mon tools as there are 2023 versions of them? will they update along with the core cf install/ And what about migrating all settings? They show multiple ways so just trying to figure out what works the best. I figure they would give you the option to just migrate everything from the old.  Any advice in advance would be great. 

Hi,I was looking at some performance issues on a test server and I came across the following: Tip: Our research has shown that in some versions of ColdFusion, leaving Report Execution Times enabled while Enable Request Debugging Output was disabled would still cause ColdFusion to perform excessive background processing on every request, leading to significant overhead. It is highly recommended to disable Report Execution Times regardless of the Enable Request Debugging Output setting in your production environment. I noticed we had Report Execution Times enabled. We are using CF2018. Can anyone confirm if there is additional overhead having this enabled and should I disable it or does it not matter?Thanks

Using cf2018.The coldfusion service start, stop option are in disabled mode now and hence cf not working suddenly  Checked cf logs coldfusion out log and sever.log, but couldn't find any trace.Is there any options other than reinstall?Any help is appreciated. 

Hi,While using Select scripts in cfquery records get limited to print 9999 records only when we dump it with cfdump. We are using the below code<cfoutput> CF-MSSQL-Select scripts </cfoutput>            <cfquery name="list_customer" datasource="ohub">            Select top 10020 custid from customers        </cfquery><cfdump var="#list_customer#" label="list_customer"> When we execute this code in cfdump only lists 9999 records.Is there any way to increase the data limit to 50,000 plus?Please see the below screenshot attached. Please advise.Thank youJibin

Here is my code to encrypt and decrypt. When i change my key to decrpt ( 'Mykey1234') i stil can decrypt the string i just encrypted. The key i used to encrypt i 'Mykey12345678'. Any one can explain why this happen? <cfoutput>Encrypt : #encrypt('This string will be encrypted (you can replace it with more typing).', 'Mykey12345678', 'CFMX_COMPAT','Base64')#<cfset new_encrypt = encrypt('This string will be encrypted (you can replace it with more typing).', 'Mykey12345678', 'CFMX_COMPAT','Base64')> <br>Decrypt : #decrypt(new_encrypt, 'Mykey1234', 'CFMX_COMPAT','Base64')#</cfoutput>

Receiving vulnerability scan issue with SOLR version in ColdFusion 2022.  Seems to be 5. version and current version is SOLR 8.11Is there a way to upgrade or will Adobe add it to next CF hotfix scan showsApache Solr < 8.4.0 Remote Code Execution

Using coldfusion 2018 . The application service start,stop,restart options became in disabled mode now.Checked coldfusion out log and sever log files, but couldn't figure out why suddenly stopped. Had configured System password in its property from service. The system password is changed now.

Hi, Using cf10 and sqlserverbackend. Have around 1 lakh record to process from a table A.  Need to compare data is present in another table B in another server .If not present need to update few columns of record in table A. Looping and processing is giving timeout. Try to take valuelist for id list and do the process in 10 batch using query of query. It is giving error as parameter cannot contain more than 2100 . Please suggest better way to process one lakh record in Coldfusion  

Hi,I have Coldfusion installed on linuxOS  (as a code) on AWS instance. Trying to upgrade Coldfusion from 2018 to 2021 with the same working setting/code.After upgrade, Schedule tasks is not working. When tried to manually run a task with output file, it doesnt run at all, and no logs are captured on scheduled tasks.Scheduler package has been reinstalled, still not working.In http logs, could see entries - which means it is not permission issue.And the URL used in the task is HTTP - so not key issues. Any idea on this issue ? 

Could anybody help me with this. I have a various strings that should (unless it is passed incorrectly which is possible) contain a number at the end, but may also have numbers at the start and/orwithin the string . Example:somestring4567some123string4567123some123string4567123somestring4567 I need to split it so that I end up with the number at the end, so in the examples above the 4567 I could probably do it with a loop but I'm guessing there is a slicker more efficient way of doing it Thanks

Hi,Using coldfusion 10. Have one table insertion from Table A to Table B in a loopWith a flag=0 in TABLE B.A scheduler is running at 5 minute interval reading data in a batch of 2000  from Table B and processing it.After process, update Flag =1. When there was around 20,000 data in Table A, it inserted only around 16,000 records and stopped. Is it because of simultaneously read and write operations?What is the ideal way to avoid partial insertion?   

Hello.  I'm hoping someone can help me convert some PHP hash code to CF (2018).  I'm confused by PHPs hash_init, hash_hmac, hash_update and hash_final.  // PHP $sha256_hash = hash_init("sha256",HASH_HMAC,$secret); hash_update($sha256_hash,$hash_string); $signature = hash_final($sha256_hash);I'm having a hard time wrapping my head around the three steps being done here and what the HASH_HMAC contstant is in PHP (yes, I've Googled...).I've taken a few stabs at it in CF with HASH and HMAC but am coming up empty.<CFSET signature = lcase(hmac(hash_string, secret, "HMACSHA256")) >Any thoughts?      Thanks,      John.     

i am trying to connect mysql database using my coldfusion admin. But I am getting this error. I am new to using docker with coldfusion but i think coldfusion container does not have necessary permissions to connect to database. 

We have noticed the below error is thrown IF there is a Java object initialisation error during boot of our CF server: "loader constraint violation: when resolving method  org.slf4j.impl.StaticLoggerBinder.getLoggerFactory()Lorg/slf4j/ILoggerFactory;" the class loader (instance of coldfusion/runtime/java/JavaDynamicClassLoader) of the current class, org/slf4j/LoggerFactory, and the class loader (instance of coldfusion/bootstrap/BootstrapClassLoader) for the method's defining class, org/slf4j/impl/StaticLoggerBinder, have different Class objects for the type org/slf4j/ILoggerFactory used in the signature"Which looks as if the Java exception is trying to use log4j to log details.The odd thing is that this Java exception clears after an application refresh and the underlying CF exception is revealed. We use commandbox in a 'Dev' environment so it's a war cf server deployment of an FW1/Coldspring application.It's hardly critical, but got me wondering how CF/Java classes get

Hi,I am having a problem with establishing Coldfusion 2023 connector to Apache 2.4.52 on Ubuntu 22. I got this error message when I started Apache2 service.apache2: Syntax error on line 228 of /etc/apache2/apache2.conf: Syntax error on line 4 of /etc/apache2/mod_jk.conf: Cannot load /etc/apache2/mod_jk.so into server: /etc/apache2/mod_jk.so: cannot open shared object file: No such file or directory All configuration and existence is checked nothing is wrong but the Apache won't start.Please help. Thanks.

Hi All,I am trying to run a ksh file with cfexecute tag. I am getting an error for no such file or directory: An exception occurred when invoking an external process. The cause of this exception was that: java.io.IOException: Cannot run program "/opt/web/apache2/htdocs/esdConfigTool/artifactorySoftware/REST/runJFrog.ksh": error=2, No such file or directory.This is the path for ksh file that i need to run:/opt/web/apache2/htdocs/esdConfigTool/artifactorySoftware/REST/runJFrog.kshThe code for cfexecute is this: <cfexecute    name="#VARIABLES.jFrogLocation#/runJFrog.ksh"    arguments='"#application.toolartifactorySoftTempabspath#" "#VARIABLES.jFrogLocation#/jfrogEsd" "#fileLocation#" "#VARIABLES.fileFolderLocation#/#arguments.file_name#"'        timeout="3000"        variable="downloadResult"        errorVariable="downloadErrorResult" />this is the stack trace of error: java.io.IOException

I have a simple query that pulls one record from a table based on a varchar(50) uesrname: select top 1 as hasunreadmessagesfrom usermessages um with (nolock)left outer join iepreferral on iepreferral.iepcaseid = um.iepcaseidwhere um.tousername = <cfqueryparam value="#client.userName#" CFSQLType="CF_SQL_VARCHAR">and um.isread = 0and um.isdeleted = 0and isnull(iepreferral.isDeleted, 0) = 0 My database monitor reports the folowing every time this query is run: This ad hoc statement had the following implicit conversions:The variable @7246612 has a data type of nvarchar which caused implicit conversion on the column [um].[ToUserName] with the value N'testusername'.?> This option in CF Administrator is NOT checked:String Format -- Enable High ASCII characters and Unicode for data sources configured for non-Latin characters Why does CF send the parameter as NVARCHAR?

I've installed CF 2023, the Add-on service is running.I can bring up the SOLR server admin page (in CFadmin)but when I click on Coldfusion collections I see this error message Unable to retrieve collections from the Search Services.Ensure that you have installed ColdFusion Search Service and it is running. the SOLR files appear to be all there under /cfusion/jettyThe install log says it installed without any errors  Summary-------Installation: Successful.897 Successes0 Warnings0 NonFatalErrors0 FatalErrorsAction Notes:NoneInstall Log Detail:Check Disk Space: C:\ColdFusionAdd-onServicesStatus: SUCCESSFULAdditional Notes: NOTE - Required Disk Space:755,448,814 Bytes Free Disk Space:62,365,196,288 Bytes  how do i fix this?