ColdFusion 2021 Hotfix 12 Breaks ColdFusion

[cfwhisperer]

We are having considerable difficulty applying Hotfix 12 to ColdFusion 2021.  We have tried 3 different times, firstly via CF Admin then twice manually from the CMD run as administrator.  I am attaching the log files which are recording the errors.

[Charlie Arehart]

Yes, this is a known problem, though there's understandable confusion about it. Bottom line, add this argument to the cmd line install :

-Djdk.util.zip.disableZip64ExtraFieldValidation=true

For more, see my posts about the issue, including this from October:

https://www.carehart.org/blog/2023/10/10/solving_problems_applying_latest_cf_updates

And for more specifically on how it remains with update 12 for those coming from update 10 or earlier (despite what the update technotes say), see my November post here:

https://www.carehart.org/blog/2023/11/14/cf_security_updates_nov_2023

And if you may wonder how I can be so confident that this is your problem, it's this key error in the update install log you offered:

java.util.zip.ZipException: Invalid CEN header (invalid zip64 extra data field size)

Finally, this issue applies to cf2023 as well, and is all down to your (understandably) having changed cf to use a JVM from July 2023 or later, when this issue was introduced. (I have an initial post from then, as well.)

Let us know if this gets you going.

Also, is this Mike Brunt? Or someone else who has joined here recently using that moniker he used for so many years? Just curious, not policing. 🙂