July 11, 2023
ColdFusion 2023, 2021, and 2018 July 2023 Security Updates
Comments
(1)
July 11, 2023
ColdFusion 2023, 2021, and 2018 July 2023 Security Updates
Staff 43 posts
Followers: 36 people
(1)

We are pleased to announce that we have released the updates for the following ColdFusion versions:

In these updates, we’ve fixed a few security bugs mentioned in the security bulletin, APSB23-40.

We’ve also refreshed ColdFusion lockdown installers. You can find the refreshed installers on the ColdFusion downloads page.

For more information, see the tech notes below:

The Docker images will be hosted shortly on Docker Hub.

Please update your ColdFusion versions and provide us your valuable feedback.

1 Comment
2023-08-09 10:55:00
2023-08-09 10:55:00

There are a couple of issues with the refreshed lockdown installers:

The Windows version of the refreshed CF 2018 lockdown installer (ColdFusion_2018_Lockdown_WWEJ_win64.exe, MD5: ce20cb6fa3a0dcb641ac3032e6e7a6db ) has no digital signature. All previous versions of the lockdown installer were digitally signed, so please sign this one as well.

The Windows version of the CF 2023 lockdown installer doesn’t seem to be refreshed (ColdFusion_2023_Lockdown_WWEJ_win64.exe, MD5: 8a593c8b3e0d629ea8af81a49427352e ). The file is unchanged from its original release in May 2023.

Could you please address these issues?

 

Like
Add Comment