This post is to announce the availability of new updates to ColdFusion 11 and ColdFusion 10.

ColdFusion 11 Update 3

Most awaited update of ColdFusion 11 is available now. It includes support for JDK 8, Tomcat 7.0.54 and other platforms/servers/databases besides ~195 bug fixes (internal and external) in AJAX, Charting, Caching, Database, Language, Mobile Support, Net Protocols, Security and other areas.

For more details, refer this article.

ColdFusion 10 Update 15

This update includes a fix for vulnerability mentioned in the security bulletin APSB14-29.

For more details, refer this article.

94 Comments to “ColdFusion 11 Update 3 and ColdFusion 10 Update 15 are available now”

  1. Adam Cameron
  2. James Schell
    unable to install the update, download and install does not work have to download and then install but will not install from cfadmin
  3. Henry Ho
  4. Priyank Shrivastava
  5. Anit Kumar Panda
    If "download and install" is not working, then after "download", reload the CFAdmin and click on "install". It will work.
  6. sandip halder
  7. Kaif Akbar
  8. Nimit Sharma
    @James: I am assuming you are talking about ColdFusion 11 Update 3. Correct me if I am wrong.

    Have you recently updated the Update Site URL in the CF Admin, because there was an issue with "Download" and "Download and Install" button which got fixed in ColdFusion 11 Update 3. Refer Bug
  9. Bernhard Döbler
    Does the CF 10 update contain a new isapi_redir.dll for Windows?
  10. Adam
    Just to verify before I upgrade my OS X from 10.9 to 10.10, cf11 update 3 will now work on it correct? I know the update was just released but on the website it doesn't have that listed yet and wanted to confirm.
  11. Anit Kumar Panda
    @Adam, yes, that is correct. Mac OS X v 10.10(Yosemite) is supported,
  12. Chris Tierney
    Just to reinforce the issue @Anit, "Download and Install" called download.cfc via the browser, but didn't do anything. "Download" worked, but then "install" didn't do anything at all. After a page refresh, "install" worked. Also one more thing, this update will not install if the lockdown guide is followed. The service must be set to "Service" login in order for the update to run.
  13. Chris Tierney
    Update to my last comment... Even installing using the service account, CF shows it installs the update on all three instances, however after service restarts it still says the update needs to be installed.
  14. Chris Tierney
    I was able to resolve my install update issue by giving the ColdFusion root directory full access to the SYSTEM user. (after I set the service to use user SYSTEM) (this is on Windows 2008 BTW)
  15. Christian
  16. Wil Genovese
    I ran into an issue on my local dev CF11 setup. I had the pre-release of update 3 installed. When I used the Uninstall option in the CF Admin it appeared to work, but when CF 11 restarted I all I got was a TomCat error. "failed: Connection refused: connect"";

    The only way I could fix this was to shut down all the CF11 services and manually copy the backup files from "{cfinstance}\hf-updates\hf-11-00003\backup" to the instance root and overwrite existing files. Once I did that CF11 worked again and I was able to successfully install Update 3.
  17. Dave Cordes
  18. Ron Stewart
  19. Ron Stewart
    I updated the first of my dev boxes, which is a Mac OS X 10.9.5 system running Java 1.7.0_72 with CF deployed via WAR on stock Apache Tomcat 7.0.57. I downloaded the CF10u15 updater from within the CF admin, then signed out of the admin, and stopped Tomcat and CF. Ran the updater from the command-line by

    $ cd {path-to}/webapps/ROOT/WEB-INF/cfusion/hf-updates
    $ java -jar ./hotfix_015.jar -i GUI

    Installer completed but indicated errors occurred. Looking at the install log in the hf-updates/hf-10-00015/ folder, I see the following down near the very bottom of the log file:

    Custom Action: com.adobe.utils.Logger
    Status: ERROR
    Additional Notes: ERROR - class com.adobe.utils.Logger.install() runtime exception:

    I can start CF w/o any problem, sign in on the CF admin, and I've verified that a few small CF files run as expected but have not done any significant testing yet.

    Questions for the Adobe CF team:
    (a) Is this cause for concern? Something clearly failed
    (b) Can I have someone from Adobe CF team take a look at the update log and let me know what's amiss?

  20. Jon
    Have the same error as Ron with CF10u15:

    Custom Action: com.adobe.utils.Logger
    Status: ERROR
    Additional Notes: ERROR - class com.adobe.utils.Logger.install() runtime exception:
  21. Nimit Sharma
    @Ron, @Jon: We are looking into it and will update on this issue shortly.
  22. TW
    Since installing this update (and reconfiguring web connectors) websockets doesnt appear to work at all. When going to the websocket settings in the administrator page a 500 error occurs and the following is displayed in the logs.

    ' The specific sequence of files included or processed is: C:\ColdFusion11\cfusion\wwwroot\CFIDE\administrator\settings\websocket.cfm, line: 71
  23. Thilo Hermann
    We also had some problems with the auto-update because of permission issues on a locked-down server.

    1. The installer just "hanged" after downloading the hotfix while displaying "Checking", which is not so nice for debugging.
    2. We finally found a workaround and applied the update via command line (which is kind of ugly, but at least seemed to work without problems). Those 2 blog posts helped with the manual installation:
  24. TW
    Just as a further note to my last comment. Seems this is the source of the problems when the CF server is restarted:

    Error [localhost-startStop-1] - Unable to initialise WebSocket service: coldfusion.server.ServiceException: Seed passed for encryption in null.
  25. Henry Gibson
    Regarding Yosemite support, just thought I'd flag for users thinking of upgrading their OS that there are some bugs and we've not been able to find the cause - you might want to hold off upgrading if you can.

    Certain image functions - such as writeToBrowser and imageRead - do not work, cause Java errors (java.lang.ClassNotFoundException: and fail silently. We also struggled to get it to work on any other JRE in Yosemite strangely.

    We spent a good amount of time looking into it yesterday but couldn't establish a cause. We have the same version of CF and Java running on a Mavericks machine without any problems, but every Yosemite machine has the same issue, so can only assume there is still a compatibility issue with Yosemite and CF.

    There is a bug entry which gives a bit more info - although actually this bug was flagged for Mavericks:

    Feels like this is solvable for someone with good Java knowledge as it seems it's a case of missing a link to some Java classes - most of CF works fine. Would be great to get some eyes on it ASAP. Thanks, H
  26. Tom Chiverton
    Where is the update connector source ?
    This was missing from previous updates, and there's no mention of it for this one either, and it's not present in wsconfig.jar
  27. Marc B
    Updater 15 is 44MB and Updater 14 was 70MB. Something must be wrong with this updater and missing now.
  28. Miguel-F
  29. Nimit Sharma
    We were shipping Microsoft VC++ Redistributable 2012 with Update 14 which is not required anymore. So, we have removed it from the hotfix installer. That is why, you are observing a huge difference in the installer size.
  30. Ken Wilson
  31. Michael M.
    Ran into issues re-configuring the JRun connector on both servers we attempted to install this on. After a combination of reboots and running WSCONFIG as Administrator we were able to get it to work on one of them, but no matter how we tried to run the tool on the second we got the infamous 500 error that TW ran into above. We're going to try again tonight. Anyone aware of any "gotchas" for running WSCONFIG that might help prevent the 500 error?
  32. Nimit Sharma
    @Ron, @Jon: The error message which you observed, was related to update un-installation process only on JEE platform and it should not affect current installation. However, we have refreshed the bits to fix this issue so that other users should not face this issue. Refer the technote for more details.
  33. Ron Stewart
    @Nimit: Thanks for the quick follow-up regarding the updater installation error. Much appreciated.
  34. Tom Chiverton
    was that issue on CF10 only ? Or CF11 as well ?
  35. Nimit Sharma
    @Tom: That issue was only on ColdFusion 10.
  36. Tom Chiverton
    Thanks for the quick reply; explains why my CF11 update 3 test box didn't see any new update.

    Any news on the lack of connector source ?
  37. TW
    @Nimit Any ideas about the issue with websockets as mentioned previous?
  38. Nimit Sharma
    @Tom: By any chance, Do you have CF11 Update 3 pre-release build installed on your test box?

    I will check about connector source and let you know.
  39. Nimit Sharma
    @TW:I am investigating about the websocket issue and will update you shortly.
  40. Tom Chiverton
    No, I never installed the CF11 update 3 preview, it only had CF11 update 2. But you've not updated the CF11 update 3 update so I wasn't expecting anything to appear there ?

    Thanks for looking into the connector source issue. FYI it was missing from CF11's release too and had to be supplied by the installation support team via cfinstal@ - I've already emailed them again but haven't even got an auto reply back yet.
  41. Chris Tierney
    @Michael M., CF10 and CF11 now use a Tomcat Connector, not JRun.
  42. Michael M.
    @Chris T - My bad. I meant Tomcat.
  43. Phil
  44. Wil Genovese
  45. Mike
    The Download and Download and Install buttons don't work?!? It throws a javascript error it appears. Just reloading from doesn't appear to help. Help!
  46. Mike
    Figured out the manual way of doing it. Even had to create the hf-updates folder. Annoying.
  47. charlie arehart
  48. Nimit Sharma
    @Mike: Can you share the javascript error at

    However, it should work after refreshing ColdFusion admin page. This was an issue which we addressed as part of CF 11 Update 3.
  49. Nando
  50. Jörg Zimmer
    I just recognized that on both ubuntu x64 machines the solr service did not start automatically after the Update 15 to CF10. I had to start cfjetty manually.
    As these are production machines, I cannot say more at the moment. But this never happened before...
  51. Vamsee
    @Jorg, we will check and confirm on the solr service behavior.
  52. Mike Greider
  53. Aaron Neff
  54. Piyush
    The updater should not have stopped the Solr service in the first place. There were no jetty related changes in Update 15. You can refer the list of modified files at <cf_root>/cfusion/hf-updates/hf-10-00015/hotfix_filelist.log.
    I have verified this behavior on Ubuntu 13.10 x64 with HF15.

    Is you Search service installed in the default location at <cf_root>/cfusion/jetty? The start.log file in the logs directory in same location should have recorded the time of the start/stop event. Can you check when it was stopped? Does that time correspond with the time of the update installation?

    Can you please also check the update install logs, at <cf_root>/cfusion/hf-updates/hf-10-00015, for errors.
  55. Aaron Neff
    Release Notes should document that "ColdFusion 11 Update 3 is embedded in the full installer".

    And, under the Installed Updates tab, this:

    Backup Directory: Update 3 Embedded. No uninstall or backup directory
    Uninstaller Location: Update 3 Embedded. No uninstall or backup directory \uninstall\uninstaller.jar
    Install Log: Update 3 Embedded. No uninstall or backup directory \hotfix_filelist.log

    Should probably be changed to this:

    Backup Directory: Update 3 Embedded. No uninstall or backup directory.
    Uninstaller Location: Update 3 Embedded. No uninstall or backup directory.
    Install Log: Update 3 Embedded. No uninstall or backup directory.

    1) the "\uninstall\uninstaller.jar" and "\hotfix_filelist.log" should be removed
    2) all lines should end w/ "."

    #2 is caused by updates.xml containing:
    <cfhf_backupdir>Update 3 Embedded. No uninstall or backup directory </cfhf_backupdir>

  56. Reto Aeberli
    Update 3 for ColdFusion 11 breaks DDX Functions. No isDDX() or cfpdf action="processddx" is working anymore. Even simple samples from the cf documentation aren't working anymore. Uninstalled CHF3 and everything working again.

    For future updates I would prefer that Adobe is releasing security hotfixes, like the one for CVE-2014-9166, independently from product updates. Installing CHF3 breaks our applications and not installing makes us vulnerable to attacks.

  57. Nando
    Reto's comment above :

    "For future updates I would prefer that Adobe is releasing security hotfixes, like the one for CVE-2014-9166, independently from product updates. Installing CHF3 breaks our applications and not installing makes us vulnerable to attacks. "

    also implies that we _need_ be able to apply updates selectively and independently. The latest update should not include all previous updates, as is now the practice.
  58. Tom Chiverton
    Being able to pick and choose at random from amongst the possible updates is a recipe for complexity nightmares I'd rather the CF team didn't worry about.

    What should happen is fixes come out in strict order, one at a time, that we you'd only need to apply updates from the current state as far as the CVE fix. You could hold off on the rest.

    But to do that you need more frequent smaller updates, which doesn't seem to be on the cards.
  59. Adam Cameron
    @Nando: that was one of my wishlist item for CF12 (or the general "future" for ColdFusion):

    Tom: other organisations seem to manage to release discrete, decoupled hotfixes quite happily. And users also seem to cope with this. I think you're imagining an issue that doesn't actually exist.

  60. Nando
    Perhaps you have a point. I don't have the experience to judge. But what happens if update 3 breaks your application and update 4 is an essential security update? Reto would be in the same position as he is today, stuck at update 2.
  61. Tom Chiverton
    Point taken, but you're going to end up with code littered with
    if update_47{
    }else if update 46{
  62. Aaron Neff
    @Reto, confirmed and voted.

    Adobe, can a patch please be issued for isDDX() so that users can install CF11 Update 3's security fix?

  63. Reto Aeberli
    @Aaron, Thanks for the vote. What do you have in your DDX? Mine has some commands that are restricted in std edition.
  64. Vamsee
    @Reto - We are having this checked. Will update soon.
  65. Aaron Neff
    @Reto, You're welcome. I've posted the repro code I was testing w/ to your ticket #3870997.

  66. Ron
    Installed the update and it works great! Checked the Build Number and we are definitely running CF11 Update 3 now.

    Just one issue. Update 3 still shows as "Available Updates" in CF Administrator Panel. Refreshed browser, cleared cache, still there.
  67. David E
  68. Nimit Sharma
    @Ron: Can you please share settings summary and updates.xml file at

    1. CF Admin > Server Settings > Settings Summary
    2. Updates.xml file located at <cf_install_root>\cfusion\hf-updates\
  69. Ron
    Nimit, information sent! Thanks for taking a look.
  70. Gary Palmer
    Update 3 for Coldfusion 11 breaks cfstoredproc tag and produces ODBC/JDBC error:
    "Error","ajp-bio-8014-exec-1","12/12/14","08:59:13","incinc","Error Executing Database Query.[Macromedia][SequeLink JDBC Driver][ODBC Socket][Oracle][ODBC]Syntax error or

    access violation.

    Uinstalled CFH3 and cfstoredproc tag use works fine. Running on Windows 2012 R2 and Apache 2.4.10. Anybody have similar problem?
  71. Nimit Sharma

    Is it possible if you can share the code which you are using?

    If you cannot share it here on the blog, then email it to me at

    Are you using "dbvarname" in the cfprocparam tag by any chance?
  72. Nimit Sharma
    @Ron: I have not received your email. Have you sent the content as zip file? If yes, then change its extension from zip to txt.
  73. Ron
    @Nimit Sharma: After running the update from the command prompt, the update installed and I'm running ColdFusion 11,0,03,292480.

    I removed and re-added the web server connector. Do you know a quick way I can ensure that we are, indeed, running Tomcat Tomcat 7.0.54? Thanks!
  74. Nimit Sharma

    You can check Tomcat version by clicking on System Info button in the top right corner.
  75. Dan G. Switzer, II
    What should be the file version of the mod_jk.conf under RHEL/CentOS 6.5?

    I'm showing Sep 5, 2014 for both Update 14 and Update 15 after running wsconfig.

    Did the connector change for Apache 2.2.15 in RHEL/CentOS 6.5?

  76. Immanuel Noel
    The mod_jk.conf file has not changed in update 15.

    The connectors though, are changed and would need reconfiguring.
    This is reflected in the file modified date for The connector version continues to be 1.2.40.
  77. Gary Palmer
    Trying to recreate the connector on CF11u3 and Windows 2012 R2/Apache 2.4.10, but it does not create the file.

    Here is command example (IPs changed):
    wsconfig.exe -ws Apache -dir "C:\Program Files\Apache Software Foundation\Apache2.4\conf" -bin "C:\Program Files\Apache Software Foundation\Apache2.4\bin\httpd.exe" -allowedIPList,,333.33.333.3,444.44.444.4

    This worked fine before the update.
  78. Immanuel Noel
    @Gary, the IPRestriction file has been removed.

    The best way to have IP restrictions in place, is to follow the "Access Control" workflows in Apache, and "IP Restrictions" in IIS.
  79. Jim Ward
    I just submitted bug# 3914301. There is a problem with cfform validation on a textarea in IE 9.
  80. Leith
    My concern with the removal of the IP restrictions file was the additional removal of what looked to be security related blocks that were in that file.


    I created a thread on the forum before I was pointed to this topic relating to this.
  81. Gary Palmer
    Regarding comment 68 and 69 above, @Nimit Sharma suggested I fix my syntax usage of 'dbvarname' to include a leading colon since I am calling an Oracle Stored Procedure and CF11u3 now enforces this syntax.

    This syntax does not seem to work when calling the Stored Procedure through an ODBC connection. An ODBC connection is my only option since I am running CF11 Standard. Since it won't work without the colon either, my workaround is to remove the use of 'dbvarname', calling the SP using positional parameters.

    Anybody else see this behavior?
  82. Tom Chiverton
    I wasn't aware CFSTOREDPROC wasn't available over JDBC etc in CF11 Standard.
    There's no hint of that on the compare site @
    Could you elaborate ?
  83. Adam Cameron
    @Tom: It's the Oracle drivers that aren't in standard, not CFSTOREDPROC.

    @Gary: ODBC is not your only option. Just grab some Oracle JDBC drivers from somewhere else. It's just that Adobe don't license *their* Oracle drivers on Std Ed.

  84. Gary Palmer
    CFSTOREDPROC is available, but using the dbvarname attribute of CFPROCPARAM (with or without prepended colon in the value for Oracle) produces the error noted in comment 68 above. But only through an ODBC connection, no problem when using the Oracle driver.


    <cfprocparam type="IN"
    . . .
  85. Adam Cameron
    @Gary: does ODBC supported named params?
  86. Gary Palmer
    Apparently not, just trying to confirm with others when using Oracle's ODBC driver. I guess I'll need to try the install Oracle JDBC route or just use positional param calls.
  87. Tom Chiverton
    ColdFusion lives on a J2EE platform. JDBC drivers should be your default choice, unless there are pressing reasons not to use them.
  88. Immanuel Noel
    @Leith, removal of the IP Restrictions file does not give rise to security concerns.
  89. Mark
    After installing the update, received CF error that the CFInstances method wasn't found. I reverted back, but am in a position where I can't update. I have a locked down CF11 update 2 box. Do I need to change service accounts? Do I need to go via the command-line? help please!
  90. Jim
    Had an issue with the CF 11 update 3 download (64-bit install for Windows). Couldn't restart the service after running the migration tool. Found this article which fixed the problem:
  91. Peter
    I am getting an error on the updates page in CF Admin.
    I copied the hotfix file from another server and installed it from the command line.
    The error on the updates page is:
    Element UPDATES is undefined in SESSION.

    The error occurred in _updates.cfm: line 283
    Called from index.cfm: line 150
    Called from index.cfm: line 143
    Called from index.cfm: line 52
    Called from index.cfm: line 51
    Called from index.cfm: line 1

    -1 : Unable to display error's location in a CFML template.
  92. Peter
    Prior post should have said it was on CF10 update 14.
  93. Peter
    I figured it out - It was a permissions issue
  94. Samson
    It would appear that Update 3 only fixes compatibility with RHEL 7.0, not 7.1 Granted, 7.1 was released March 5th.

Leave a Comment

Leave this field empty: