We are pleased to announce that we have released general updates to ColdFusion (2023 release) Update 11 and ColdFusion (2021 release) Update 17. The updates include bug fixes and enhancements in Administrator, Language, CFSetup, Database, and other areas. They also contain library upgrades, such as netty, ehcache, etc. After applying the update, we recommend clearing the Felix cache as a workaround for installing the HTMLToPDF package and verifying the Oracle data source. The updates also contain enhancements to whitespace management and client variable support in CFPM. Where do I download the updates from Download the updates from the following locations: ColdFusion (2023 release) Updates ColdFusion (2021 release) Updates For more information, view the following tech notes: ColdFusion (2023 release) Update 11 ColdFusion (2021 release) Update 17 Known issues in the update The PDF Services page in ColdFusion Administrator does not load even with the HTMLToPDF package installed. As a workaround, follow the steps: Uninstall the HTMLToPDF package. Stop ColdFusion. Clear the Felix cache (<cf_home>/cfusion/bin/felix-cache). Restart ColdFusion. Install the HTMLToPDF package. After installing the latest update, the Oracle DataSource verification fails. To work around this, clear the Felix cache and restart ColdFusion. An exception occurs when indexing Open Document Format files, such as those with a .odt extension. Are the Docker images available The images are available on the Docker hub and ECR. Is CFFiddle updated with the changes CFFiddle is updated with the changes. Please update your ColdFusion versions and provide your valuable feedback.

Community Manager

Question

NOW LIVE! Adobe ColdFusion 2023 and 2021 October 2024 updates

Forum|Forum|1 year ago
October 15, 2024
6 replies
9584 views

We are pleased to announce that we have released general updates to ColdFusion (2023 release) Update 11 and ColdFusion (2021 release) Update 17.

The updates include bug fixes and enhancements in Administrator, Language, CFSetup, Database, and other areas. They also contain library upgrades, such as netty, ehcache, etc.

After applying the update, we recommend clearing the Felix cache as a workaround for installing the HTMLToPDF package and verifying the Oracle data source.

The updates also contain enhancements to whitespace management and client variable support in CFPM.

Where do I download the updates from

Download the updates from the following locations:

For more information, view the following tech notes:

Known issues in the update

The PDF Services page in ColdFusion Administrator does not load even with the HTMLToPDF package installed. As a workaround, follow the steps:
- Uninstall the HTMLToPDF package.
- Stop ColdFusion.
- Clear the Felix cache (<cf_home>/cfusion/bin/felix-cache).
- Restart ColdFusion.
- Install the HTMLToPDF package.
After installing the latest update, the Oracle DataSource verification fails. To work around this, clear the Felix cache and restart ColdFusion.
An exception occurs when indexing Open Document Format files, such as those with a .odt extension.

Are the Docker images available

The images are available on the Docker hub and ECR.

Is CFFiddle updated with the changes

CFFiddle is updated with the changes.

Please update your ColdFusion versions and provide your valuable feedback.

This topic has been closed for replies.

S

Sireex

Participating Frequently

Running Server 2019, CF2021 Standard edition.

Seems that something has changed with cfhtmltopdf after updating CF2021 from Update 16 to 17.

After updating, PDF's no longer show attached pictures or stylesheets.

First, I did as instructed after installing Update 17:

Uninstall the HTMLToPDF package.
Stop ColdFusion.
Clear the Felix cache (<cf_home>/cfusion/bin/felix-cache).
Restart ColdFusion.

After this, none of our PDF reports show images or register any attached CSS stylesheets.

We did a simple test. Images and stylesheets are in the same folder as the cfm page producing the PDF.

This is the test code:

<cfhtmltopdf pagetype="A4">
<cfoutput>
<!DOCTYPE html>
<html>
<head>
<link rel="stylesheet" href="stylesheet_C2_v2.25.css">
</head>
<title>HTML Tutorial</title>
<body>
<img src="image.png" alt="test">
<h1>This is a heading</h1>
<p>This is a paragraph.</p>

</body>
</html>
</cfoutput>
</cfhtmltopdf>

On the server where Update 16 is installed, we can see that everything is Ok:

But after updating two of our test servers with Update 17 and running the same code, both are showing:

D

Dave Watts

Community Expert

I don't know the answer to your question. But here are some things I'd try. First, what happens if you make the paths absolute instead of relative?

Second, what happens if you run this on a licensed production server where you don't get the "developer/trial" watermark?

Dave Watts, Eidolon LLC

E

Eugene318956046e6u

Participant

I recently attempted to install manually ColdFusion 2023 Update 11 on two CF servers: one was a developer version and the other an Enterprise version. The operating system in both cases is Windows Server 2022 Standard, and in both cases the CF version is run as a standalone server. Adobe’s instructions to update offline manually include the note to “Ensure that the JRE bundled with ColdFusion is used for executing the downloaded JAR. For standalone ColdFusion, this must be at, <cf_root>/jre/bin.” This is what I did.

However after executing the instructions for a manual installation, I received the message reading, “Error: A JNI error has occurred, please check your installation and try again Exception in thread "main" java.lang.UnsupportedClassVersionError: install has been compiled by a more recent version of the Java Runtime (class file version 55.0), this version of the Java Runtime only recognizes class file versions up to 52.0” The Java version on my ColdFusion installations is 17.0.6. It is my understanding this always will be the case for the version installed at <cf_root>/jre/bin/ even if I were to upgrade my Java version.

After failing to install Update 11 manually, I next tried to install Update 11 via the ColdFusion Administrator. This worked on “Machine 1.”

So on my next machine, “Machine 2,” I proceeded directly to the CF Administrator to install Update 11. The attempt failed. The install appeared to freeze, and I simply exited the CF Administrator. I next attempted a manual installation on Machine 2. That also failed yielding the same message as indicated above (on Machine 1). Playing a hunch, I tried one more time to install Update 11 via the CF Administrator. This time, the installation succeeded.

I have one more machine on which to install Update 11 (let’s call it “Machine 3”), but I hesitate to do so because my “successes” so far have been kludgey. Also, I assume the JNI error that I experienced recently will continue to occur with future attempts to install updates manually. Upgrading to a newer version of Java does not seem likely to resolve the issue since I need to point to the current/older version of Java located at <cf_root>/jre/bin/ during the manual install. Also, I have had problems installing updates via the CF Admin, which is my reason for perferring manual installs for years. Why is this occurring now—when I never experienced this problem employing manual installations with previous versions of CF, and how do I remedy it?

Priyank Shrivastava.

Community Manager

Hi @Eugene318956046e6u ,

can we connect on a screen share to check the issue. I will send you the details over the DM.

Thanks, Priyank Shrivastava

BKBK

Community Expert

Hi @Eugene318956046e6u ,

can we connect on a screen share to check the issue. I will send you the details over the DM.

By @Priyank Shrivastava.

Love the service.

DevScreen

Inspiring

Currently on ColdFusion Server Enterprise - Version: 2023,0,11,330706

Previous version was Update 10.

Windows Server 2019

I am having an FTP issue immediately after updating to the latest patch. The error message I am starting to get while attempting to connect to a remote server is:

Algorithm negotiation fail: algorithmName="server_host_key" jschProposal="ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-512,rsa-sha2-256" serverProposal="ssh-rsa"

My best guess is that remote server is proposing "ssh-rsa" which the latest patch may have disabled? How can I get this issue resolved? I cannot control the remote server, so we will have to make adjustments on our side.

Thanks!

M

megha1997

Adobe Employee

Hi @DevScreen

You can add this flag : -Dcoldfusion.sftp.enable-ssh-rsa=TRUE to enable the ssh-rsa algorithm.

Please refer to https://helpx.adobe.com/coldfusion/kb/coldfusion-2023-update-11.html for more information on the fix done for https://tracker.adobe.com/#/view/CF-4221161

DevScreen

Inspiring

Hi Megha, Thank you very much for your quick reply. I will give that flag a try. I appreciate your help!

L

Legorol

Participating Frequently

The MD5 checksums are wrong for ColdFusion 2023 update 11, as of 21 Oct 2024.

hotfix-packages-cf2023-011-330706.zip downloaded just now (several times) has MD5 2b4c02eb54d4e241f582b3349dfbfd5e
https://helpx.adobe.com/coldfusion/kb/coldfusion-2023-updates.html (US page) shows:
Hotfix and packages repository: Link (MD5: 0b54bddb19880cba1980450394ddd5cf)
https://helpx.adobe.com/uk/coldfusion/kb/coldfusion-2023-updates.html (UK page) shows
Hotfix and packages repository: Link (MD5: 4c02eb54d4e241f582b3349dfbfd5e)

This is very concerning, I had to point out incorrect MD5s last time as well. Not only is the MD5 of the actual download not matching what's state on the page, why are the two localisations showing different checkums?

Priyank Shrivastava.

Community Manager

@Legorol We have corrected this for the North America instance however, proper sync didn't happen for other regions. We have refreshed again and it will be fixed soon.

Thanks, Priyank Shrivastava

L

Legorol

Participating Frequently

@Priyank Shrivastava. thanks for responding. Unfortunately I'm confused by your reply. Differences in localisation (UK) aside, the main problem is that the checksum on the US page doesn't match the file itself.

To reitarte, when I download hotfix-packages-cf2023-011-330706.zip from https://cfdownload.adobe.com/pub/adobe/coldfusion/2023/packages/hotfix-packages-cf2023-011-330706.zip, its MD5 is 2b4c02eb54d4e241f582b3349dfbfd5e.

However, the US page (https://helpx.adobe.com/coldfusion/kb/coldfusion-2023-updates.html) shows an MD5 of 0b54bddb19880cba1980450394ddd5cf.

This doesn't seem to be fixed.

X

xfreeman89x

Inspiring

Hi Charlie,

here the answers to your questions point by point:
1) cf2023
2) update 10 before this
3) Windows Server 2022
4) CF start normally but every page and also the administrator has 500 error
5) I have this error in server.log "Error","Thread-18","10/16/24","13:00:18","","The ClientScope service is not available. This exception is usually caused by service startup failure. Check your server configuration." and this error in application.log: "Error","http-nio-8501-exec-3","10/16/24","13:00:05","","Could not initialize class coldfusion.runtime.AppHelper The specific sequence of files included or processed is: C:\ColdFusion2023\cfusion\wwwroot\CFIDE\administrator\index.cfm, line: 24"
6) uninstalling the update makes ColdFusion server working again

Yes, I had to uninstall the update by command line.

Salvatore Cerruto

Charlie Arehart

Community Expert

Thanks. First, glad you were able to recover with the uninstall. Second, as for point 5, that's the same info you'd offered before. I asked if there was OTHER info--before that.

But now I'd turn our attention to what info you see also in the update log. That, too, is in the hf-updates folder for the update you applied. I suspect you had errors DURING the install of the update. There can be many causes of that. I discuss it more in a blog post of some years ago, still relevant (How to solve common problems with applying ColdFusion updates), but I don't know if it will be necessary for you to read it.

One key point I make there, and another question for you: when you applied the update manually, did you use "run as admin" when opening the command line?

Finally, there's one more question I should have asked: what Java version does your cf admin now show that you have running under cf? (Don't judge from the command line. That could be different from what cf uses. See the "settings summary" page in the admin, which is the last link at the top of the "server settings" section. Then see about 10 lines down.)

Since you're on cf2023, it should be some Java 17. But (since applying the update 10 you're on) did you perhaps change the jvm cf uses to use Java 17.0.8 or later? If so, you may be hitting an issue I discuss in a blog post from a year ago (this week, in fact)

https://www.carehart.org/blog/2023/10/10/solving_problems_applying_latest_cf_updates

The tldr at the top of the post maybe all you need. In fact Adobe mentions it in the technotes for yesterday's update: you may need to add another jvm arg to the manual command line update you did. You'd want to add:

-Djdk.util.zip.disableZip64ExtraFieldValidation=true

on the "java -jar " command, with that placed BEFORE the -jar arg).

I elaborate in the post on HOW to do it if the technote's suggestion isn't enough. I also mention this in my own blog post from last night about yesterday's update, FWIW:

https://www.carehart.org/blog/2024/10/16/ColdFusion_updates_released_Oct_15_2024

Let us know if any of this gets you going.

I'll add that as I also mention in those posts, I can certainly help folks directly, via remote screenshare, often solving such things quite quickly (consider how readily all this info on share comes to mind for me). Of course, different people have different problems. I try in these online resources to guide you based on what info you offer. I also write to benefit ANYONE who may be following along. In a session together, we'd obviously be targeted to your specific needs and what you know/don't know. More at carehart.org/consulting.

But I hope I've given you (and others here) enough to hopefully get you going on your own.

/Charlie (troubleshooter, carehart. org)

X

xfreeman89x

Inspiring

The update break the server. I tried to install it also manually but nothing to do.
This is what I see from the logs:

javax.servlet.ServletException: ROOT CAUSE: 
coldfusion.server.ServiceFactory$ServiceNotAvailableException: The ClientScope service is not available.
    at coldfusion.server.ServiceFactory.getClientScopeService(ServiceFactory.java:702)
    at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:32)
    at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38)
    at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:60)
    at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38)
    at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22)
    at coldfusion.filter.CachingFilter.invoke(CachingFilter.java:62)

Do I miss something?

Salvatore Cerruto

Charlie Arehart

Community Expert

While you await a reply from Adobe, I'll report that I did not get that error in applying the update. You could help us help you by answering a few questions:

Was this cf2023 or 2021?
What update were you on before this?
What OS?
Are you saying cf now won't start?
Is there perhaps more info in the cf logs, before that one, during startup?
Have you tried uninstalling the update?

Even if you "can't access the cf admin to do that", note that you can do it from the command line--like the manual install you attempted. See the cfusion/hf-updates folder whose name includes the number of the update you did. That has an uninstall folder in it, and that has an uninstall .bat or .sh to run.

Or again, perhaps Adobe or someone else may chime in with news that they've seen this before and/or have different info to suggest.

/Charlie (troubleshooter, carehart. org)

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded