ColdFusion (2018 release) Update 6 and ColdFusion (2016 release) Update 13 released

[Saurav_Ghosh]

We are pleased to announce that we have released the updates for the following ColdFusion versions:

• ColdFusion (2018 release) Update 6
• ColdFusion (2016 release) Update 13

The updates fix bugs that were reported in the previous update release.

We had previously released the preview updates of these releases. If you had applied the preview updates, you can retain the preview builds. You must however revert the update URL to the default one to receive future updates.

IMPORTANT:

If you will be using the Administrator interface to perform the update, note that you must first update to Update 11 for ColdFusion (2016 release) or Update 4 for ColdFusion (2018 release) due to a recent change in code signing certificate, which is used for verifying the download of the update.

These are mandatory pre-requisites before updating, unless you download the update yourself and apply it manually.

We also recommend that you upgrade the web server connectors after applying these updates.

The following are links to the tech notes for each update:

• ColdFusion (2018 release) Update 6
• ColdFusion (2016 release) Update 13

What’s new in this update

We’ve fixed bugs related to core language, connectors, and other areas. For more information, see the list of bugs fixed:

• Bugs fixed in ColdFusion (2018 release) Update 6
• Bugs fixed in ColdFusion (2016 release) Update 13

Please update your ColdFusion versions today. Let us know if you face any issues while installing the updates. Your feedback is essential to further enhancing the product.

We thank you for your continuing support.

To report an issue with the update, file a bug using the public tracker https://tracker.adobe.com/ or send an email to cf.install@adobe.com.

[keving5765454]

Hi Saurav, 

Would we need to fix the Error after accessing ColdFusion Administrator using the connector port if we do this update? I know that in the previous update we had to reconfig the isapi_redirect.dll. 

[TolgarNYC]

After applying the update we could no longer connect to Amazon S3 in the standard format s3://accessKey:secretKey@somebucket/somefile.txt

It throws an error, "Attribute validation error for tag CFFILE...".

We needed to go back to CF 2018 update 5 to be able to work with Amazon S3 again. Is this a known bug?

[Charlie Arehart]

Tolgar, it's understandable to be left thinking, "the cf update broke cf" but that's rare, and it may not be what it seems to you. Here are a few thoughts that I hope may help:

• First and foremost, you may have simply had an error during the update. That's common for various reasons. See my post here for how to check and how to resolve that: https://coldfusion.adobe.com/2019/03/problems-applying-cf-update-check-first/
• Second, what update were you running before?
• You assert you were applying update 6 (from Nov 2019), as that is what is discussed here. But the latest is actually 7, released in Dec 2019. Had you tried that? 
• Finally, I do see you say you have to "go back to 5" (from Sep 2019) to get things working. That implies you were on 5, but for how long? Update 5 was indeed one of those rare updates that DID cause many people problems (along with cf2016 update 12, released with it in Sep). This Nov update mostly just corrected the problems in that Sep update. Were you running 5 for months with no problem, or perhaps an older update, before trying 6 (or 7)? 

So it would seem odd for this update 6 to have had the impact on s3 you were experiencing. Check first if you had 0 errors in the install log (see my post for where to look, which is not obvious). It will still be there after your reversion to 5. If you had any, see my post post for how to try again. Or try 7, and again confirm 0 errors after that. 

Then let us know where things stand or any other feedback you may have, while awaiting any other possible answer from Adobe or others here. 

[TolgarNYC]

Hi Charlie,

Thanks for your reply. I can confirm that the update to 7 is not to blame, it works fine and without any issues on other servers. I couldn't yet pinpoint why there is this problem with that one server, but obviously it's something specific to some other code specific to that server.

So thanks, the update 7 itself works fine.

[Charlie Arehart]

OK, but are you saying that you have one server where update 6 (and 7) still "do not work" for you? If so, did you consider the link I shared, for checking if anything went wrong in the update log? If I've misunderstood, please clarify the situation with the "one server" and whether you are wanting to resolve it.

[TolgarNYC]

Apologies for the late follow-up. While most scripts work fine, the following is where I think we might have bug?

Simple test:

1) Upload a test file to S3, call it "testfile.txt".

2) Try to run a simple: #fileExists(s3://[YOUR LOGIN]@[YOUR PATH]/testfile.txt)#

3) Reply states: YES (file does exist)

4) Try again, but rename file and code to "testfile+bug.txt"

5) Reply states: NO (file does not exist). This is wrong.

So as soon as a filename contains some common special characters like "+", "(", or ")", simple operations like fileExists using the built-in "s3://" protocol no longer work,

The same can be observed with CFFILE operations, like "copy", "move", "rename", "delete". The error messages vary here, but it's the same pattern. Any "s3://" operation works fine for most file names, but won't work with file names containing special characters like "+", "(" or ")". 

It also doesn't make a difference if I "encodeForURL()" the filename, or try other methods to encode the filename.

The above behavior can be replicated from CF2018 update 7 on up. The last version where it works fine seems to be CF2018 update 5.

[Charlie Arehart]

Tolgar, as you feel this is clearly a bug introduced by update 7 and above (based on your experience), you really should create a bug report at tracker.adobe.com. That's where Adobe tends to bugs (and they really do), whereas they don't tend to reply here. (Do be sure to confirm that it still happens on update 10, from last month, before reporting it.)

One thing in the meantime: there was a discussion by Ben Nadel several years ago on this topic, where he explained why just using urlencode was not enough to deal with such special chars in s3 object names. Maybe what he suggests could work for you while you wait for this to be resolved by Adobe.

[TolgarNYC]

That's great advice, I just submitted the bug report.

Thanks for all you do, Charlie! It's much appreciated.

[Charlie Arehart]

Tolgar, any thoughts? 

[Charlie Arehart]

See his response above (on Feb 10).

[TolgarNYC]

Update: Bug is verified (also for newer updates up to 10), to be fixed. https://tracker.adobe.com/#/view/CF-4209697