Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

How to tell which hotfixes/patches have been applied to CF Server 9?

23 views
Skip to first unread message

Jack Drysdale Jr

unread,
Nov 25, 2013, 1:05:59 PM11/25/13
to
Hello, everyone.

I'm not a technician where I work, but I've been tapped to help the one who is, and I've got a question for anyone familiar enough with CFAdmin.

Out of six development systems, how can I tell which hotfixes and patches have and have not been applied to each system?

We want to apply the latest hotfix, but it has different instructions if previous fixes/patches have been applied vs. not applied.

Thank you,

JD

Acos

unread,
Nov 28, 2013, 11:22:21 PM11/28/13
to
If I remember correctly you can go to the admin page
http://{yourcfserver}/cfide/administrator and see the upper right
corner to the left of the 'logout' there are three icons, one of them
should tell you what patches you have installed.

If that doesn't work you may need a port depending on what was setup
originally to access the admin page.
Like http://localhost:8500/CFIDE/administrator/index.cfm (replace
"localhost" with your server if you aren't on the system itself)



You can try this page for udpates:
http://www.adobe.com/support/coldfusion/downloads_updates.html


If you are running version 8 or 9, maybe this tool can be of help:
http://www.uu-2.info/

grabbed this off the internet:
On both ColdFusion 8 and 9 hotfixes are installed to the
{coldfusion-install}/lib/updates directory. Hotfixes are identified in
the directory as hfvvv-xxxxx.jar where vvv is the version of
ColdFusion and xxxxx is a bugid for a specific fix. Security hotfixes
follow the same convention but the xxxxx is a sequential number.

Jack Drysdale Jr

unread,
Nov 29, 2013, 8:52:47 AM11/29/13
to
On Thursday, November 28, 2013 10:22:21 PM UTC-6, Acos wrote:
> If I remember correctly you can go to the admin page
>
> http://{yourcfserver}/cfide/administrator and see the upper right
>
> corner to the left of the 'logout' there are three icons, one of them
>
> should tell you what patches you have installed.
>
>
>
> If that doesn't work you may need a port depending on what was setup
>
> originally to access the admin page.
>
> Like http://localhost:8500/CFIDE/administrator/index.cfm (replace
>
> "localhost" with your server if you aren't on the system itself)
>
>
>
>
>
>
>
> You can try this page for udpates:
>
> http://www.adobe.com/support/coldfusion/downloads_updates.html
>
>
>
>
>
> If you are running version 8 or 9, maybe this tool can be of help:
>
> http://www.uu-2.info/
>
>
>
> grabbed this off the internet:
>
> On both ColdFusion 8 and 9 hotfixes are installed to the
>
> {coldfusion-install}/lib/updates directory. Hotfixes are identified in
>
> the directory as hfvvv-xxxxx.jar where vvv is the version of
>
> ColdFusion and xxxxx is a bugid for a specific fix. Security hotfixes
>
> follow the same convention but the xxxxx is a sequential number.
>
>
>
>
>
> On Mon, 25 Nov 2013 10:05:59 -0800 (PST), JD
>
> JD wrote:
>
>
>
> >Hello, everyone.
>
> >
>
> >I'm not a technician where I work, but I've been tapped to help the one who is, and I've got a question for anyone familiar enough with CFAdmin.
>
> >
>
> >Out of six development systems, how can I tell which hotfixes and patches have and have not been applied to each system?
>
> >
>
> >We want to apply the latest hotfix, but it has different instructions if previous fixes/patches have been applied vs. not applied.
>
> >
>
> >Thank you,
>
> >
>
> >JD

Hi, Acos,

Thanks for the reply. I did look around where you mentioned. The .jar file that is currently in place is hf902-00006.jar. Is that the most recent for 9.0.2?

Regards,

JD

Acos

unread,
Dec 1, 2013, 9:18:30 AM12/1/13
to
This page has a list of the patches, for 9.02 is up to update 4.
http://www.adobe.com/support/security/bulletins/apsb13-10.html

I'm not familiar with that jar file and updates so I don't know if it
is the latest.


On this page:
http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix-apsb13-10.html
scroll down to
ColdFusion 9

If you have applied the previous Security hot fix APSB13-03, see
Section 1. If you have not applied the previous Security hot fix
APSB13-03, see Section 2.


If you are running 9.0.2, beware before applying this update: the
cf902.zip file listed there is supposed to have a web-inf.zip within
it (as indicated in the instructions) at the beginning of 2013, they
might have fixed it by now.


And follow these instructions, (it has file names for an older hotfix
just replace it with your current one)


ColdFusion 9.0.2

1. Download CF902.zip and CFIDE-902.zip. Extract both zip files.

2.In ColdFusion Administrator, select System Information page by
clicking the icon "i" in the upper-right corner.

3. In the "Update File" text box, browse and select hf902-00003.jar
located under CF902/lib/updates.

4. Click Submit Changes.

5. Stop the ColdFusion instance.

6. Go to {ColdFusion-Home}/lib/updates (for Server installation) or
{ColdFusion-Home}/WEB-INF/cfusion/lib/updates (for Multiserver and
J2EE installations) directory. If hf902-00001.jar, hf902-00002.jar
exist, delete it. Otherwise, ignore this step.

7. Go to {CFIDE-HOME} and take a backup of CFIDE folder.

8. Extract all the files in CFIDE-902.zip to merge in the web root
directory that has {CFIDE-HOME} folder.

9. Start the ColdFusion Instance.

10. If there are multiple instances, repeat steps 2 through 9 for each
instance.
0 new messages