<?xml version="1.0"?>
<rss version="2.0">
  <channel>
    <title>ColdFusion 9 Updates</title>
    <link>http://www.merlinmanager.com/</link>
    <description>ColdFusion 9 Updates</description>
    <language>en-us</language>

	
    <item>
      <title>ColdFusion 9.0.2 Cumulative Hot Fix 1</title>
      <link>http://helpx.adobe.com/coldfusion/kb/cumulative-hotfix-1-coldfusion-902.html</link>
      <description><![CDATA[ColdFusion 9.0.2 Cumulative Hotfix 1 (Release Date: 27 Feb, 2013) includes support for Google Maps JavaScript API v3 and JDK 1.7 Update 15. This cumulative hotfix is specific to ColdFusion 9.0.2.]]></description>
	  <category>Manual</category>
	  <category>9.0.2</category>
      <pubDate>Thu, 28 Feb 2013 06:11:33 GMT</pubDate>
      <guid>http://helpx.adobe.com/coldfusion/kb/cumulative-hotfix-1-coldfusion-902.html</guid>
    </item>
	
    <item>
      <title>ColdFusion 9 Updater 2 (9.0.2)</title>
      <link>http://helpx.adobe.com/coldfusion/release-note/coldfusion-9-0-update-2.html</link>
      <description><![CDATA[ColdFusion 9.0.2 update is a summation of ColdFusion 9.0.1, ColdFusion 9.0.1 Cumulative HotFixes 1 & 2, all ColdFusion 9.0.1 Security HotFixes, but without Verity. Verity has been excluded from ColdFusion 9.0.2 and it is recommended that you use SOLR search engine as a replacement instead.]]></description>
	  <category>Manual</category>
	  <category>9.0.1</category>
      <pubDate>Wed, 12 Sep 2012 07:58:18 GMT</pubDate>
      <guid>http://helpx.adobe.com/coldfusion/release-note/coldfusion-9-0-update-2.html</guid>
    </item>
	
    <item>
      <title>APSB12-06 Hash Algorithm Vulnerability</title>
      <link>http://www.adobe.com/support/security/bulletins/apsb12-06.html</link>
      <description><![CDATA[This priority 2 update addresses an important vulnerability in ColdFusion 9.0.1 and earlier versions for Windows, Macintosh and UNIX. This vulnerability could lead to a denial of service attack using a hash algorithm collision.]]></description>
	  <category>Manual</category>
	  <category>9.0.1</category>
      <pubDate>Thu, 15 Mar 2012 09:51:13 GMT</pubDate>
      <guid>http://www.adobe.com/support/security/bulletins/apsb12-06.html</guid>
    </item>
	
    <item>
      <title>ColdFusion 9.0.1 Cumulative Hot Fix 2</title>
      <link>http://kb2.adobe.com/cps/918/cpsid_91836.html</link>
      <description><![CDATA[The following fixes are contained in ColdFusion 9.0.1 Cumulative Hot fix 2 (CHF2). Adobe recommends that you apply CHF2 to ColdFusion 9.0.1 only if you are experiencing one or more of the issues listed in the following table. This cumulative hot fix is specific to ColdFusion 9.0.1 and you should not to apply it to any other releases.�

ColdFusion 9.0.1 installed with Cumulative hotfix 2 supports Mac OSX Lion (10.7.x).�

Note - Cumulative Hotfix 2 consists of previously released fixes for the�Security issues mentioned in the bulletins�APSB11-04, APSB11-14,�APSB11-15 along with the�cumulative hotfix 1�and the new bug fixes. This cumulative hot fix also has the new session invalid fix added to the Security hot fix.�

APSB11-04
Security fix for cross-site scripting, session fixation, CRLF injection and information disclosure.

APSB11-14
Security fix for cross-site request forgery (CSRF) or a remote denial-of-service (DOS).

APSB11-15
Security fix for unrestricted class creation during AMF/AMFX deserialization and complex �object graph vulnerabilities.�

81110�
ColdFusion throws �org.apache.bcel.generic.ClassGenException: Invalid branch target position offset for goto� exception if there is a lot of code inside cfloop.

83094
ColdFusion throws�ArrayIndexOutofBounds exception when cfstoredproc returns multiple result sets and application code uses duplicate function against the result set.

83185�
CFFTP listDir action does not work with WFTPD ftp server.

83316�
Cfexchangemail getAttachments action does not work with Outlook email messages attached to the email. All the .msg attachments are droped. Issue is fixed only for Exchange 2003.

83425�
Cfcontent or Cfheader throws 404 error when the file size is larger than 300 MB.

83447
CFFile Upload action will not accept files of 2GB or greater regardless of value set for the �Maximum size of post data" in the administrator.

83474�
ColdFusion ORM does not maintain the column order correctly when the CFC extends a base cfc with an attribute mappedSuperclass set to true.

83514�
ColdFusion throws �java.lang.IllegalStateException: Session is invalid� exception randomly.

83693
ColdFusion throws an error during Solr indexing �org/apache/pdfbox/pdmodel/PDDocument null� whenever a file with .PDF extension is present in the path provided.

83772�
Repeated runs of RandRange function when using SHAIPRNG causes function performance degradation.

83980�
Intermittently cfmail tag does not set the MessageID correctly.

84277�
Cfdocument tag does not honor the query param specified in the source url.

84856�
Coldfusion does not honor gobal script protection if cfapplication tag is used and scriptprotection attribute is not set to true.

84949
ColdFusion throws variable ORGSPECDIR is undefined error when trying to register a remote instance with ColdFusion 9.0.1

85000�
The response header for a ColdFusion page always shows a content-length of 8192 irrespective of how much data is actually being served.

85086�
cfquery tag throws an error if both ormoptions and datasource attributes are set.

85099�
ColdFusion does not resolve the CFC�s fully qualified name correctly when a relative path is used in the application mapping.

85232�
In a Custom tag, cftransaction rollback action does not work when clientstorage is configured with the database.

86744�
Cfthread terminate action is not cleaning up the threads properly.

86898�
SpreadsheetFormatColumn() function does not apply the date format correctly.

86921
When using IBM's Db2 connect JDBC driver with ColdFusion, it throws a Null Pointer exception when executing an insert or update on a DB2 mainframe database

86992�
ColdFusion multiserver instance does not start properly on Mac OS X Lion (10.7.x).

87015�
cfspreadsheet tag does not evaluate Excel�s percentile function.

APSB10-18
Security Fix for the directory traversal vulnerability that could lead to information disclosure.

83598
Setting default locale to en_GB results in Invalid Date Format error when you run a scheduled task.

83638
serializeJSON converts integer to string.

83650
Submitting a form inside a cflayout type=�hbox|vbox� results in a JavaScript error.

83671
If named arguments with implicit structs and arrays use local variables, it results in �variable is undefined� error.

83689
cfdump does not display the changes to the functions for a CFC object.

83694
cfgrid sorting does not function as desired for static and dynamic data except when the data is retrieved from the database.

83725
If you send mails with inline images, the source image is deleted.

83747
ColdFusion ORM preUpdate event handler is called �twice when a persistent entity is updated within a cftransaction. 
Note: This issue has been fixed for one data source per request use-case.

83818
ColdFusion debugger can fail if the file being debugged is repeatedly revised.

83829
cfwindow�onShow�method is called twice.

83836
serializeJSON incorrectly serializes nested objects. Also, in the case of circular references, for example, when handling bidirectional ORM relationship, repeating entities are represented as empty strings instead of empty objects.]]></description>
	  <category>Manual</category>
	  <category>9.0.1</category>
      <pubDate>Fri, 16 Sep 2011 22:12:24 GMT</pubDate>
      <guid>http://kb2.adobe.com/cps/918/cpsid_91836.html</guid>
    </item>
	
    <item>
      <title>ColdFusion 9.0.1 Cumulative Hot Fix 1</title>
      <link>http://kb2.adobe.com/cps/862/cpsid_86263.html</link>
      <description><![CDATA[This particular update does include the recent security Fix for the directory traversal vulnerability. Adobe recommends that you apply CHF1 to ColdFusion 9.0.1 only if you are experiencing one or more of the issues listed in the following table. This cumulative hotfix is specific to ColdFusion 9.0.1 and need not be applied to any other releases.

APSB10-18
Security Fix for the directory traversal vulnerability that could lead to information disclosure.

83598
Setting default locale to en_GB results in Invalid Date Format error when you run a scheduled task.

83638
serializeJSON converts integer to string.

83650
Submitting a form inside a cflayout type=�hbox|vbox� results in a JavaScript error.

83671
If named arguments with implicit structs and arrays use local variables, it results in �variable is undefined� error.

83689
cfdump does not display the changes to the functions for a CFC object.

83694
cfgrid sorting does not function as desired for static and dynamic data except when the data is retrieved from the database.

83725
If you send mails with inline images, the source image is deleted.

83747
ColdFusion ORM preUpdate event handler is invoked twice when a persistent entity is updated within a cftransaction. Note: This issue has been fixed for one datasource per request use-case.

83818
ColdFusion debugger might fail if the file being debugged is repeatedly revised.

83829
cfwindow onShow method is invoked twice.

83836
serializeJSON incorrectly serializes nested objects. Also, in the case of circular references, for example, when handling bi-directional ORM relationship, repeating entities are represented as empty strings instead of empty objects.]]></description>
	  <category>Manual</category>
	  <category>9.0.1</category>
      <pubDate>Wed, 01 Sep 2010 22:00:00 GMT</pubDate>
      <guid>http://kb2.adobe.com/cps/862/cpsid_86263.html</guid>
    </item>
	
    <item>
      <title>ColdFusion 9 Updater 1 (9.0.1)</title>
      <link>http://kb2.adobe.com/cps/849/cpsid_84973.html</link>
      <description><![CDATA[The release highlights include:
-ORM support for multiple data sources
-Amazon S3 support
-Support for IIS 7
-New script functions implemented as CFCs
-Support for BlazeDS 4 and LCDS 3
-Configurable seed for password encryption
-Server monitoring enhancements to handle load conditions]]></description>
	  <category>Manual</category>
	  <category>9.0</category>
      <pubDate>Wed, 14 Jul 2010 14:17:27 GMT</pubDate>
      <guid>http://kb2.adobe.com/cps/849/cpsid_84973.html</guid>
    </item>
	
    <item>
      <title>Update for expired certificate on CFForm controls</title>
      <link>http://kb2.adobe.com/cps/845/cpsid_84585.html</link>
      <description><![CDATA[Adobe has created a hot fix to address the forthcoming expiry of the CFForm applets in ColdFusion MX 7, 8 and 9. When the certificate has expired, the user will receive a warning that the security certificate has expired, although if they click to ignore the warning the applet will continue to function. Replacing the existing applet with the one below will suppress this warning.  The current certificates are due to expire on the 20th May 2010 for ColdFusion MX 7 and the 21st May 2010 for ColdFusion 8 and 9.]]></description>
	  <category>Manual</category>
	  <category>9.0</category>
      <pubDate>Wed, 19 May 2010 14:00:00 GMT</pubDate>
      <guid>http://kb2.adobe.com/cps/845/cpsid_84585.html</guid>
    </item>
	
    <item>
      <title>Coldfusion 9 Cumulative Hot Fix 1</title>
      <link>http://kb2.adobe.com/cps/825/cpsid_82536/attachments/chf9000001.zip</link>
      <description><![CDATA[The following fixes are contained in ColdFusion 9 Cumulative Hot Fix 1 (CHF1). Adobe recommends that you apply CHF1 to ColdFusion 9 only if you are experiencing one or more of the issues listed below. This cumulative hot fix is specific to ColdFusion 9 and should not be applied to any other releases. \r\n\r\n80624 	Fix for the NullPointerException error thrown when deploying a car file from Coldfusion 7 containing datasources to Coldfusion 9\r\n\r\n80621 	Fix for the issue where Coldfusion was ignoring local variable assignment when the variable is assigned to a struct at runtime\r\n\r\n80601 	Fix for the �java.util.regex.PatternSyntaxException: Illegal repetition{}� error thrown when using {} as delimiter with the listtoarray function\r\n\r\n80429 	Fix for the issue where in any cfscript style function declarations, function parameter types were not accepting the dotted CFC type\r\n\r\n80412 	Fix for the issue where coldfusion deployed on Jboss was unable to render maps using cfmap\r\n\r\n80375 	Fix for the �Error casting an object of type java.lang.Double cannot be cast to  java.lang.String to an incompatible type� error thrown when calling a CFC remotely with returnFormat=json\r\n\r\n80335 	Fix for the issue where an implicit struct/array passed to a function call as a value is not working\r\n\r\n80231 	Fix for the issue where cfscript style function declaration was not accepting implicit struct/array as a default value for the second argument onward\r\n\r\n80230 	Fix for the �ashx image format is not supported on this operating system� error thrown when assigning an image returned from a .NET webservice to a CFImage tag\r\n\r\n79756 	Fix for the �Cannot drop the table <tableName>� error thrown when requesting the CFC for the first time with the ORM setting dbcreate set to dropcreate]]></description>
	  <category>Auto</category>
	  <category>9.0</category>
      <pubDate>Sun, 21 Feb 2010 00:13:49 GMT</pubDate>
      <guid>http://kb2.adobe.com/cps/825/cpsid_82536/attachments/chf9000001.zip</guid>
    </item>
	

  </channel>
</rss>
