Adobe ColdFusion Changelog

What's new in Adobe ColdFusion 2023.0.0.330468

May 17, 2023
  • Adobe ColdFusion (2023 release) offers a modular, secure, and containerized approach to building applications that can run across multiple cloud providers or on-premises. You can now switch between cloud service providers without having to rewrite your application.

New in Adobe ColdFusion 2018.0.2.313961 (Feb 13, 2019)

  • ColdFusion 2018 Update 2 introduces support for Java 11 and fixes more than 50 external bugs in Security, Language, Document Management, AJAX and several other areas. It addresses the vulnerabilities mentioned in the security bulletin APSB19-10. It also upgrades several libraries and includes support for new platforms and database versions.

New in Adobe ColdFusion 2018.0.0.0 (Aug 14, 2018)

  • Adobe ColdFusion 2018 Standard Edition
  • For CF developers who need basic amenities, ColdFusion 2018 Standard version is the way to go. ColdFusion 18 carries over all of the options from previous editions and improves upon them. It also comes with a plethora of new features designed to maximize the performance of the platform. Here are just a few:
  • Asynchronous Programming
  • With synchronous programming, your program is executed one line at a time going line by line. Although thorough, this particular way of programming has its flaws. If entering a time consuming execution, synchronous programming becomes very tedious. There is no way to stop the process once started.
  • Now with ColdFusion’s new asynchronous programming, that particular bottleneck can be avoided. You can now enhance the performance of your application by transferring resource-heavy code segments to a secondary thread. Use the new RUNASYNC function to properly execute code without having to manage multiple threads.
  • REST Playground
  • Create and control all of your REST services from one convenient application. What are REST services? REST stand for Representational State Transfer. These services include, but are not limited to the following:
  • Representations
  • Messages
  • URIs
  • Uniform Interface
  • Links between Resources
  • Caching
  • Adobe’s new UI makes it simple to validate the accuracy of all your REST APIs. You can also make changes to your APIs without having to restart the application.

New in Adobe ColdFusion 2016.0.06.308055 Update (Apr 24, 2018)

  • ColdFusion (2016 release) Update 6 (release date, 10 April 2018) includes the following changes:
  • Several important bug fixes for security, mail, and ColdFusion Administrator.
  • Addresses security vulnerabilities as mentioned in the security bulletin APSB18-14.
  • Tomcat is upgraded to version 8.5.28 and OpenSSL is upgraded to 1.0.2n.

New in Adobe ColdFusion 2016.0.05.303689 (Sep 13, 2017)

  • In addition to addressing the vulnerabilities in the security bulletin APSB17-30 this update includes 13 bug fixes in language, database and AJAX some other areas. For the installation instructions and details on the bugs fixed, refer to the technote at https://helpx.adobe.com/coldfusion/kb/coldfusion-2016-update-5.html.
  • Bug fixes:
  • CF-4198947: CFGrid scripting options do not work as expected.:
  • CF-4198855: cfquery requests result in the following error message:Access denied ("java.io.FilePermission" "C:ColdFusion2016cfusionwwwrootWEB-INFclassesmacromediasqlserverutiluserDefaults.properties" "read")
  • CF-4198854: A piechart does not get displayed with only one item (100%).
  • CF-4198761: On a Linux OS, cfdocument does not generate chart in a pdf.
  • CF-4198817: cfquery returns cached results even when the cachedafter date is updated to be after the date of the original cached query date, but is still a past date.:
  • CF-4198816: Changes to cached query results are persisted back into cache.
  • CF-4198764: When loading the template for the first time, the template displays the CFTOKEN, however, with the second refresh the token disappears.
  • CF-4198589: Method invocation through ajaxproxy fails even if the required arguments are passed.
  • CF-4198570: The datefield attribute in cfinput does not display the value of the attribute.
  • CF-4198559: The Elvis operator fails when used with argument scope.
  • CF-4198513: The cache does not get updated as expected.
  • CF-4195407: cfinput type="datefield" generates invalid HTML code.
  • CF-4182090: When Sandbox security is enabled, you are unable to connect to SQL Server.

New in Adobe ColdFusion 2016.0.03.301771 (Apr 26, 2017)

  • ColdFusion 2016 upgrades Tomcat to version 8.5.11.0 and fixes 115 bugs (including 52 external bugs) in areas such as Security, Language, Charting and Performance. This update also addresses vulnerabilities mentioned in the security bulletin APSB17-14.

New in Adobe ColdFusion 2016.0.0.298512 Update (May 12, 2016)

  • New version of Tomcat:
  • Apache Tomcat has been upgraded to version 8.0.32.
  • Updates to Security Analyzer:
  • The update 1 consists of significant enhancements and fixes to Security Code Analyzer that was introduced in ColdFusion (2016 release).
  • Security Analyzer enables developers to avoid common security pitfalls and vulnerabilities, such as, SQL Injection and XSS attacks while writing code.
  • The updates to Security Analyzer are as follows:
  • ColdFusion Builder constantly polls for the current scan status from the server and displays a progress bar. The progress bar reflects the percentage of completion of the current scan.
  • You can cancel a current scan and run a new one. Click Cancel to terminate the current scan.
  • You can choose multiple files or folders and scan specific files in a directory instead of scanning the entire directory.
  • There is a new tab Unscanned Files that displays a list of encrypted files and files with syntax errors.
  • Security Analyzer relies on asynchronous calls to the server, which results in better performance during scans and avoid RDS timeouts
  • The status command now returns the following fields
  • percentage: Shows the percentage of scan completed
  • totalfiles: Number of files to be scanned
  • scannedfiles: Number of files scanned so far
  • lastupdated: Timestamp of the last scanned file

New in Adobe ColdFusion 2016.0.0.298074 (Feb 27, 2016)

  • The only change between the old and new installers is the refresh of certain branding assets (no change in the underlying code).

New in Adobe ColdFusion 11 Update 7 (Nov 19, 2015)

  • ColdFusion 11 Update 7 includes support for Windows 10. Tomcat has been upgraded to version 7.0.64. This update addresses a vulnerability mentioned in the security bulletin APSB15-29 and also includes bug fixes related to connector, database, language, caching and certain other areas.

New in Adobe ColdFusion 11 Update 6 (Aug 28, 2015)

  • This Update addresses a vulnerability mentioned in the security bulletin APSB15-21.

New in Adobe ColdFusion 11 Update 5 (Mar 10, 2015)

  • Unhandled error in CFAdmin Error in AdminAPI
  • Error when deploying a ColdFusion application as J2EE Archive on JBOSS Application server (7.1.1)
  • CF System Probe: unable to set the file overwrite check option to false.
  • Issue while creating instances of ColdFusion using startInstance API
  • Install CF 11 on Mac, and click updates under Server Update in CF Administrator
  • Conditions:Empty input in CFINPUT, causes the CFLAYAOUTAREA to duplicate itself.
  • Tool-tip does not appear on the first click.
  • bind field is updated
  • Incorrect Serialization of dates
  • CFContent tag working differently in CF 11
  • properties with default values not accessible outside init function
  • contains comma
  • Exchange 2010: unable to set the task status to "Completed" with cfexchangetask action="modify".
  • Exchange 2010: The organizer is not correctly set in cfexchangecalendar Event struct.
  • Exchange 2010/2013) cfexchangetask action="modify" : setting the percentcompleted to 100 or DateCompleted to a past date, does not change the task status to Completed.
  • cfinput onChange event not firering
  • ANeff] Bug for: cfform vs form wrt default action at SES URL
  • CFChartSeries Attribute "Colorlist" No Longer Works CFChart : provide value to legend attribute when showlegend="no" shows legend box
  • VALUE$ , $ITEMLABEL$ and $SERIESLABEL$ for attribute URL of CFCHART only work with PNG/JPG and not FLASH/HTML
  • With ENABLECFOUTPUTONLY turned on, CFCHART
  • in Flash or HTML format do not render, only PNG/JPG
  • 3859531 CFChart style attribute errors when passing json string 3860808 Flash/HTML format CFCHARTs will generate
  • unexpected URLs if attribute "URL" is set to "" or " " 3554224 Amazon S3 Support with DirectoryList
  • 3634391 null pointer exception thrown every now and then 3801082 Email validation using IsValid
  • 3849152 [ANeff] Bug for: CF sessions vs J2EE sessions (session
  • loss) when using urlSessionFormat()
  • 3916188 Updater 15 changes/breaks behavior of deleting
  • cookie.cfid/cftoken
  • 3512854 Error connecting to Oracle servers using Oracle
  • Advanced Security
  • 3818587 Incorrect cast when iterating over an array of elements
  • containing values from a query object.
  • 3849591 Issue while creating application-specific data source
  • using lowercase alphabet only in format.
  • 3851961 [ANeff] Bug for: abort throws exception within iteration
  • member function UDFs
  • array, one must specify the row/column values 3158250 CFSPREADSHEET .spreadSheetFormatRow not re-
  • setting bold and italic to no/false
  • but saves all worksheets when writing.
  • 3821299 Proxy Attributes on CFDocument Tag are ignored... formatting attributes are not interpreted correctly.
  • 3846110 cfhtmltopdfitem errors when inside CFLOOP
  • 3858416 Error occurred while generating PDF using cfhtmltopdf
  • 3923995 spreadsheetAddRows: When passing arrays (without passing the row/col attribs) the order of the array elements is not correctly written in the spreadsheet.
  • back to server
  • 3043111 Content-Type is not set appropriately when writing to S3 3043657 Cannot merge multiple PDFs from ram:// to ram:// 3114274 file uploaded by CFFILE action "upload" inherits
  • ColdFusion Temp Directory permission, instead of upload destination directory permission CFFILE action "write" doesn't have this problem
  • 3148657 fileUpload() not ignoring empty string for filefield 3226380 StoreGetMetadata - Amazon S3 Metadata Caching
  • Problem / Requires Restart (CF 9.0.1 and CF10) 3695879 The accept attribute of cffile doesn't work with Microsoft
  • Word DOCX files
  • 3739708 Coldfusion 10 / Windows 2012 R2 server and large file
  • upload into a network directory
  • 3829498 FileOpen/fileWrite functions fails when filename
  • contains a % character
  • 3848011 [ANeff] Bug for: does not recurse
  • 3720764 Error message with cfindex not detailed enough. 3818732 setDomainCookies="true" does not set domain cookies
  • in websites like... http://example.com
  • 3320414 Un-installer unable to remove Hotfix from all the
  • Instances onto which it was applied
  • 3358792 WSConfig does not back up all the config files it
  • changes
  • 3742083 CGI.PATH_INFO not null when default documents are
  • served on IIS
  • 3758070 CGI.HTTP_URL Missing when using IIS
  • successfully completed
  • 3853490 error when using the cfcompile.bat
  • 3923565 J2EE Session Vars Break ColdFusion on Win 2012 EC2 3776450 reloadOnChange causes issue with classPath
  • 3863517 [Escalation] Generated EAR through J2EE Archive giving error on accessing settings summary and scheduled tasks
  • 3041684 The "includeEmptyValues" of listRest() appears not to work
  • 3700163 The function gethttpRequestData() fails when form posted with encType="multipart/form-data"
  • 3750733 listFilter() doesn't correctly handle multi-char delimiters 3765527 for loop var not available in struct literal for arrayAppend
  • if not wrapped in { }
  • 3774074 Mixed-in functions cannot access SUPER "scope" on
  • first hit to a function
  • 3791747 each() does not support ordered arguments 3792283 Calling Randomize() with the SHA1PRNG does not
  • create "repeatable number patterns".
  • arrayFilter() /filter() callback needs to be passed element, index and array
  • 3818767 Serialization of query does not respect case
  • incorrect value
  • 3836820 queryExecute in a thread is broken
  • 3840570 null coalescing operator sometimes incorrectly returns
  • the second operand
  • 3842326 encrypt() key passed as a string vs. as a variable
  • renders a different result
  • 3845979 form scope can't be emptied by calling structClear 3851982 [ANeff] Bug for: structFilter/struct.filter() UDF arguments
  • missing struct
  • function accepts 1 parameters."
  • 3854303 Bug for: isValid() inconsistent handling of NULL for
  • eurodate and USdate
  • integer
  • 3861371 Start time and endTime in cfloop prints 12.00 AM
  • always
  • 3861391 CFClient support for arraysort() as member funtion 3909694 The function gethttpRequestData() fails when form
  • posted with encType="application/octet-stream" 3926197 "includeEmptyValues" of listRest() when passed with a
  • list containing a single element is not returning an empty
  • string which is the expected behaviour.
  • 3846187 [ANeff] Bug for: writeLog/cflog does not log application
  • name when called within onApplicationEnd()
  • 3401939 [cfclient] refind - multiple line mode not supported from
  • string in regular expressions in javascript like it is
  • supported in java
  • 3731533 [Regression] : CFCLIENT: Date : diff: returns month
  • difference as 1 when difference is less than a month 3732088 String : Wrap : Functions gives unexpected output in
  • one scenario
  • 3737513 Functions: cJustify : second parameter when given
  • decimal value is ceil
  • 3737514 Functions : Function ljustify, rjustify gives error when
  • number is passed as a first argument
  • 3737517 datastructure: functions: ReFind : Using ReFind for
  • regex having groups gives unexpected output 3738552 structure: copy : get copy of struct(having array as
  • element) through StructCopy and modifying the array in?the copied struct is reflecting the array of copy struct 3738564 Data structure: structFindValue : structFindValue
  • functions returns an array of struct, path value of this
  • struct shows array index of 2 when it should be 3 3738742 data structures: struct : structget : Using array inside the
  • structget method does not create it
  • 3739355 dateFormat : format does not work when used without
  • any delimited in between
  • 3740223 reReplace : function does not work as expected 3859184 [Regression] Series of cfm references in cfclient code
  • does not get converted to "html" during packaging, single reference does
  • cfclient device file APIs do not work for packaged
  • application
  • 3043375 When doing a chttp POST with a ~ (tilde) in the URL,
  • the ~ always gets URLENCODED 3369472 CFMAIL Keep sessions alive
  • 3673298 Cfftp action putfile failing after processing for secure FTP server
  • 3847737 [ANeff] Bug for: cfimap action=getall removes brackets from attachment names
  • 3041790 In ORMExecuteQuery() method when you pass the queryOption argument, the unique argument is ignored 3044064 IsValid("url", ...) and IsValid("email", ...) do not correctly
  • validate values that use IPv6-based addresses 3858866 Rendering report using cfreport throws
  • MalformedReportException on Mac platform
  • 3858955 [ANeff] Bug for: REST CFC function names must be 3+
  • characters
  • 3151872 exception.log not updated when eventhandler=""
  • attribute is specified and task throws exception 3854891 SerializeJSON on a Java object causes service restart 3702938 ColdFusion instances not showing up in Windows
  • Performance Monitor
  • 3534348 Typographical errors in $cfroot/cfusion/bin/cf-init.sh
  • 3853535 cfcontent sends corrupt binary data when query string is present with CF11s isapi_redirect.dll
  • 3910257 Instances in a cluster do not start after updating to 11.0.3
  • 3695114 AXIS Version 1 WSDL Generation Very Slow using JRE 1.7
  • 3832635 WSDL auto-generation seems in-correct
  • WebService display name is already used

New in Adobe ColdFusion 11 Update 4 (Feb 19, 2015)

  • This update includes bug fixes related to JSON, Imaging, Websockets, Charting, Language and Database.

New in Adobe ColdFusion 11 Update 3 (Jan 28, 2015)

  • Added support for PhoneGap 3.5

New in Adobe ColdFusion 11 Update 2 (Oct 16, 2014)

  • This update contains fixes for vulnerabilites mentioned in the security bulletin APSB14-23:
  • These hotfixes resolve a cross-site request forgery vulnerability (CVE-2014-0570).
  • These hotfixes resolve a cross-site scripting vulnerability (CVE-2014-0571).
  • These hotfixes resolve a security permissions issue that could be exploited by an unauthenticated local user to bypass IP address access control restrictions (CVE-2014-0572).
  • With Update 14 for ColdFusion 10 and Update 2 for ColdFusion 11 Java 8 is supported.
  • If you are using ColdFusion Web services you will have to do a one-time change manually.
  • You should copy tools.jar manually from {JDK8_Home}/lib to {cf_install_home}/cfusion/lib/. ColdFusion Web Services will fail if this is not done. Only JDK contains tools.jar not the jre. You don't have to install JDK on the machine where ColdFusion is installed. You can just have jre 8 on this machine and get tools.jar from any other machine's JDK installation.
  • And also make sure that the earlier stubs are cleared fom {cf_install_home}/cfusion/stubs/ to get the newly compiled classes.
  • There can be only one version on tools.jar with ColdFusion. So, through the updater process we have not done as you may wish to be either on Java 7 or Java 8.

New in Adobe ColdFusion 11 Update 1 (Sep 23, 2014)

  • Issues Fixed:
  • IIS worker process hangs when IIS website configuration is changed.
  • First request slow on IIS8 (Windows 8 and Server 2012).
  • In certain scenarios, when ColdFusion server is hosted behind a firewall, ColdFusion application service does not start.
  • CFSTOREDPROC is slow when returning many null values.
  • ODBC Socket Data Source cannot be added on Windows.
  • Geography/Geometry/HierarchyID data types are not supported.
  • Assigning null to boolean property throws an error while saving the object.

New in Adobe ColdFusion 11 (Sep 23, 2014)

  • Mobile Application Development Workflow:
  • ColdFusion 11 along with ColdFusion Builder 3 gives you a unique end-to-end workflow for mobile application development addressing the challenges associated with building, testing, debugging and deploying enterprise class mobile applications - both web based as well as installed mobile apps.
  • Language Enhancements:
  • While there are a range of enhancements made to the language, some of the features that can be called out are full CFSCRIPT support, support for Member Functions and JSON enhancements.
  • PDF Functionality:
  • ColdFusion 11 now leverages a new engine for HTML to PDF conversion that does an almost perfect job of converting most HTML/CSS to its corresponding PDFs pixel-to-pixel. Along with the new engine, CFPDF has additional functionality to support digital signatures and archiving PDFs.
  • Security:
  • ColdFusion 11 has a built-in mechanism to prevent access of Administrator or its components from external access. ColdFusion 11 has additional built-in functions to prevent XSS, thus allowing concurrent logins through CFLOGIN. ColdFusion also supports mail encryption through CFMAIL.
  • ColdFusion Builder 3 bundled with ColdFusion 11:
  • ColdFusion 11 Standard and ColdFusion 11 Enterprise is bundled with copy (ies) of ColdFusion Builder 3. With one copy of ColdFusion Standard, you get one license of ColdFusion Builder 3 and with one copy of ColdFusion Enterprise, you get three copies of ColdFusion Builder 3.
  • Java 7 Update 55:
  • As you may be aware, Java has come up with an update (Java 7 Update 55) with critical security fixes. This update was released on 15th of April. ColdFusion 11, ColdFusion 10 and ColdFusion 9 have already been certified on Java 7 Update 55.
  • For ColdFusion 11, all attempts were made to include this update as part of the final CF11 installers though this was very close to our launch date. We ran into an issue with the installer with a third-party platform used by ColdFusion, on Java 7 Update 55. We have escalated this issue with the vendor and are working with them for a fix. For now, the Java version bundled with the final installers of ColdFusion 11 is Java 7 Update 51.
  • But we fully understand the importance of Java 7 Update 55 and want to assure the ColdFusion community that we are committed to fixing this issue. We are also planning to replace all the ColdFusion 11 installers to include Java 7 Update 55 as soon as we are able to obtain a fix from the vendor.
  • However, as always you can use Java 7 Update 55 with ColdFusion 11, ColdFusion 10 and ColdFusion 9 by pointing to an external Java location.

New in Adobe ColdFusion 10 Beta 1 (Feb 21, 2012)

  • Replacement of JRun with Tomcat
  • Security enhancements
  • ColdFusion WebSocket
  • Language enhancements
  • ColdFusion closures
  • Enhanced Java integration
  • ColdFusion ORM search
  • Solr enhancements
  • Scheduler enhancements
  • Integration with Microsoft Exchange Server 2010
  • Lazy loading across client and server
  • Web service enhancements
  • RESTful Web Services in ColdFusion
  • Media Player enhancements
  • Displaying geolocation
  • Client-side charting
  • Caching enhancements
  • Server update using ColdFusion Administrator

New in Adobe ColdFusion 9 (Centaur) Beta (Jul 13, 2009)

  • ColdFusion 9 Beta is an early glimpse of the ColdFusion 9 release. Some of the key features of this release include:
  • ColdFusion Object Relational Mapping (ColdFusion ORM) - a powerful Rapid Application Development (RAD) solution for building data-centric applications
  • Offline application support for AIR applications
  • Enhanced Flash remoting capabilities
  • A broader set of Ajax controls that leverage the new Ext JS 3.0 library
  • Improved PDF functionality
  • Integration with other products and technologies such as Microsoft SharePoint and OpenOffice
  • Server Manager - an AIR-based desktop application to centrally manage multiple ColdFusion servers from a single location
  • Powerful search capabilities using Solr, an open-source enterprise search server based on the Lucene Java search library
  • In addition, we have introduced database enhancements and significant performance enhancements such as, granular control over caching, in-memory file capabilities, and improved clustering. And of course, we have added many language and CFC enhancements to ensure that ColdFusion continues to remain unmatched for its ease-of-use and technical capabilities.
  • These are just a few examples of the advancements made so far with this release.
  • The goal of the ColdFusion 9 Beta release is to give the community an opportunity to test and provide feedback on the new features. So, please use this opportunity to explore the new features and communicate your feedback. However, since it is Beta software, please do remember that there may be bugs, performance issues, incomplete features, and documentation issues.
  • Note: Although we do believe this release to be extremely stable, because this is a Beta release, we strongly recommend that you install the software on development and testing servers only.