http://coldfusion.com logo
Join Slack
Powered by
# adobe
  • s

    Sammy Saeed

    03/17/2025, 3:51 PM
    Hi all, does anyone know if this impacts ACF? https://nvd.nist.gov/vuln/detail/CVE-2025-24813 https://www.bleepingcomputer.com/news/security/critical-rce-flaw-in-apache-tomcat-actively-exploited-in-attacks/
    f
    • 2
    • 2
  • b

    brianklaas

    03/20/2025, 7:08 PM
    Hello ACF people! Is there a way to create a scheduled task in ACF that runs at an interval of less than one minute? I'm aware that Lucee can have scheduled tasks that run every 10 seconds. The ACF Administrator will only accept a minimum interval value of 1 minute. I read online that you can edit the ACF neo-cron.xml file and manually change the interval value for a given scheduled task, but there was also some debate as to whether or not this would work. Any guidance on this front would be appreciated!
    r
    j
    +3
    • 6
    • 10
  • x

    xByte Ryan

    03/21/2025, 7:29 PM
    I am heading to the North Carlonia Adobe ColdFusion Roadshow next week and want to help fill the building! If you are a CF-er and bring a non-CF friend, xByte Cloud will give you a $50 Amazon Gift Card. I heard we've had 50 people in the past. Let's break some records!!!! @Mark Takata (Adobe)
    j
    • 2
    • 4
  • t

    timmixell

    03/22/2025, 12:07 PM
    greetings! is anyone familiar with all the switches to flip so that CF's Java dependencies (like Ehcache -
    net.sf.ehcache
    ) are logged? I'm running ACF '23 and I have the following in my `cfusion/lib`: •
    log4j.properties
    •
    log4j2.properties
    •
    logging.properties
    •
    neo-logging.xml
    I'm fairly certain it's
    log4j2.properties
    , but the most I can get is a
    WARN
    when I have my log level set to
    TRACE
    . it's very bizarre to me, but I'm not in Java enough to know definitively what to do. I'd appreciate any insight you all might have. many thanks!
  • b

    BK BK

    03/22/2025, 2:06 PM
    I think your hunch is correct:
    log4j2.properties
    . •
    log4j.properties
    (and
    logger.xml
    ) settings are specific to log4j configuration; •
    logging.properties
    settings configure ColdFusion's default logging behaviour server-wide; •
    neo-logging.xml
    settings configure ColdFusion's own loggers; Using your Ehcache example, you should see the following setting in `log4j2.properties`:
    ###--------------- Ehcache Log Settings ------
    ### Set Ehcache log
    logger.ehcache =ERROR, CONSOLE
    logger.ehcache.name = net.sf.ehcache
    That said, it depends where you set the log level. ColdFusion might not log anything if, for example, a third-party Java application has the responsibility for logging Ehcache events. To see the list of all the loggers of ColdFusion's Java dependencies 1. add the flag
    -Dlog4j2.debug=true
    to the
    java.args
    property in `/bin/jvm.config`; 2. restart ColdFusion 2023; 3. open coldfusion-error.log in an editor and look for lines such as
    "DEBUG StatusLogger Registering MBean org.apache.logging.log4j2:type=7b676112,component=Loggers,name=xxx"
    t
    • 2
    • 44
  • j

    Jason Dean

    03/24/2025, 7:40 PM
    The JEE packager in ACF 2023 Enterprise is straight-up broken. It will NOT create a functioning war file. I have been going back-and-forth with Adobe support for a month and they still don't even understand the problem, let alone come anywhere close to fixing it.
    😢 1
    d
    m
    s
    • 4
    • 7
  • t

    Tim

    03/24/2025, 8:42 PM
    I'm writing a service that imports large spreadsheets into a database table. If I start with a CSV file, then I can use
    FileReadLine
    (with a bit of fancy handling) to process one row, without having to read the whole file into memory first. And then I can parallelize the row processing to speed the whole thing up. This part all works wonderfully. But now I'm trying to adjust it to handle xlsx files too. My basic plan was to convert the xlsx file to a csv via:
    Copy code
    cfspreadsheet(action: "read", src: filePath, format: "csv", name: "local.csvString");
    FileWrite(filePath, local.csvString);
    and then just pass the CSV file to my previously mentioned code. But what I'm finding is that ColdFusion is throwing an OutOfMemoryError. It's getting caught and logged by my onError function in Application.cfc. But I'm trying to figure out how to catch it before that, and give users a better error message. Wrapping the cfspreadsheet in a try/catch is not doing the trick. So is there something else I can try? I'm also willing to take ideas on how to more efficiently process these files.
    p
    m
    +2
    • 5
    • 6
  • m

    Mark Takata (Adobe)

    04/08/2025, 5:12 PM
    Adobe Security Bulletin: APSB25-15 https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html Adobe has released security updates for ColdFusion versions 2025, 2023 and 2021. These updates resolve critical and important vulnerabilities that could lead to arbitrary file system read, arbitrary code execution and security feature bypass. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates. * PLEASE READ THE ENTIRE BULLETIN AND BACK UP YOUR SERVERS PRIOR TO APPLYING *
    👍 2
    c
    p
    +9
    • 12
    • 66
  • j

    Jim Priest

    04/08/2025, 7:46 PM
    Is it me or do the checksums of the jar files not match (I'm on CF2021) ~/Downloads ❯ md5sum hotfix-019-330379.jar 9dc84ed20c7e9c896967466bd1b993d8 hotfix-019-330379.jar File: ColdFusion (2021 release) Update 19 (MD5: b9b3690c7829693325dba0ba037649db)
    Copy code
    <https://helpx.adobe.com/coldfusion/kb/coldfusion-2021-updates.html>
    p
    • 2
    • 10
  • m

    Mark Takata (Adobe)

    04/08/2025, 8:35 PM
    Hey all, apologies but I am dealing with a personal emergency. The amazing support team is here to take care of you
    🫂 7
    m
    • 2
    • 1
  • c

    cfvonner

    04/08/2025, 10:21 PM
    For September's CFSummit (Las Vegas), are there going to be two separate certification/exam days (one before and one after the main conference) or is the date just not nailed down yet to one or the other?
    m
    • 2
    • 3
  • j

    Jim Frankowski

    04/09/2025, 5:20 PM
    Here's a question that's been stuck in my head about doing manual updates. I always use a locally-hosted update-source site I created in IIS on my server, start that site in IIS, then I point the <packagesurl> value in the neo_updates.xml files to that local destination before doing my java -jar etc etc. Is it possible to use the actual Windows-based pathname to the bundlesdependency.json file (e.g., "X:\somedirectory\hotfix-packages-cf2021-019-330379\bundlesdependency.json") in the neo_updates.xml file instead?
    d
    h
    c
    • 4
    • 12
  • m

    Mike Greider

    04/10/2025, 3:19 PM
    Is there any reason why we could not remove the .java files in the CF23 example directories? For example, cfusion \ gateway \ src \ examples \ watcher. But there are scattered examples of .java in various example folders and the DoD STIG scanner is complaining about them.
    p
    b
    • 3
    • 10
  • m

    mithlond

    04/10/2025, 4:35 PM
    just a heads up - this page in the docs https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-functions/functions-s/spreadsheetremovecolumnbreak.html looks like it wants to be linked to from the left sidebar nav (under Coldfusion functions > Functions-s), but the link there is https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-functions/content/help/[…]coldfusion-functions/functions-s/spreadsheetremovecolumnbreak which 404s.
    s
    • 2
    • 1
  • a

    Angel Chrystian

    04/10/2025, 7:00 PM
    Hello, does anybody know why PDF services stop working after installing ACF2023 Updates?
    m
    b
    • 3
    • 4
  • t

    tonyjunkes

    04/14/2025, 4:24 PM
    Probably more a question for the Adobe folks... This bug ticket reported for CF2021 for weird spread operator results (https://tracker.adobe.com/#/view/CF-4219724) is marked as fixed in CF2023, but it definitely is not. Testing in CF2025, everything works as expected, but why note CF2023 if it wasn't included. Always great to see things get fixed, but we're not on CF2025.
    👍 1
    m
    p
    +2
    • 5
    • 13
  • p

    Patrick S

    04/15/2025, 2:55 PM
    Regarding ColdFusion 2021 Update 19: When our hosting company updated one of our servers to the latest patch, CFHTMLTOPDF stopped working, is it correct that it doesn't work with JDK 11.0.22? They said we'd have to downgrade Java or upgrade to at least ColdFusion 2023...
    p
    d
    +2
    • 5
    • 13
  • s

    Slackbot

    04/23/2025, 12:47 PM
    This message was deleted.
    p
    • 2
    • 1
  • c

    Chad Norris

    04/23/2025, 5:16 PM
    Has anyone encountered a bug with their CF logs that are showing %a or %z in them in columns that should have a proper value but don't anymore? Edit: Tracing back it looks like it happened after a server ran out of disk space and after clearing space and restarting CF it has been happening ever since, clearing the cfclasses and the felix cache has not resolve the issue.
    p
    • 2
    • 5
  • a

    alholden

    04/24/2025, 9:00 PM
    Here's a gem from CF11, the stack trace is all java, no cf files "Error","ajp-bio-8014-exec-129","04/24/25","131638",,"Application applinks could not be found. The specific sequence of files included or processed is: '''' " javax.servlet.ServletException: Application applinks could not be found.
    j
    b
    • 3
    • 8
  • a

    alholden

    04/24/2025, 9:00 PM
    Just give this server the ol' vulcan neck pinch?
  • a

    alholden

    04/24/2025, 11:34 PM
    I perfectly understand that /flex2gateway/ has been deprecated in recent ACF versions, and that Flash is dead, yada yada. But I have a client here still running a desktop AIR executable which still uses it for data remoting. QUESTION: • Was CF2018 the last version to support the native /flex2gateway/ daemon? Lots of EOL posts, but not this answer to be found.
    😱 1
    b
    • 2
    • 2
  • k

    Ken Wilson

    04/25/2025, 3:14 PM
    Anyone else receive an email this morning with subject "Upcoming ColdFusion update - Pre-release announcement"? The link back to adobe.com goes to the prerelease forum but just says "Discussion Not Found" leaving my cynical mind to question it's legitimacy.
    b
    r
    • 3
    • 3
  • f

    fmdano

    04/25/2025, 6:42 PM
    hey all, trying to install the PMT I guess 2025 on a server where we are using CF2021....installed the PMT, then realized I had to add PMT extension in CFAdmin....did that. when in PMT it finds the CF Instance, when I try to enable in PMT, I get a message triangle which states i need to upgrade to newer version of PMT....how do I upgrade pmt if I can't get past the Setup dialog in PMT? Plus, I installed the version from the Website....any thoughts?
    s
    • 2
    • 4
  • f

    fmdano

    04/28/2025, 11:47 AM
    Hey all, after posting on her friday, I was able to install CF 2021 PMT....some css is weird in edge so i don't see the menu items, but can still click on the space and they work...weird. ANYWAY, I thought in PMT it tracked errors that happen in the code either reading an error log file, or something...am i incorrect, or maybe the system has not thrown an error yet...testing it on our test server so not as much traffic...Thanks for the info
    s
    • 2
    • 4
  • m

    Matt Jones

    04/29/2025, 1:56 PM
    is there a way to get the unscoped.log on 2025?
    s
    m
    +3
    • 6
    • 31
  • d

    Dave Merrill

    05/05/2025, 2:59 PM
    Is there a limit to the size of the unscoped variables log? In cf2021 specifically if that matters, which I doubt. Wondering if we need to make provision for that getting huge, and also how likely we are to lose data if there is a limit and it's reached.
  • j

    Jason Roozee

    05/05/2025, 3:54 PM
    Where do I report bugs? I'm using CF2023 latest patch level. This code is returning the wrong value...
    ceiling((val/4)*100)
    should be returning 7001 not 7002
    Copy code
    <cfset val = 280.04>
    
    val/4: #(val/4)#
    <br>
    (val/4)*100: #((val/4)*100)#
    <br>
    ceiling((val/4)*100): #(ceiling((val/4)*100))#
    <br>
    ceiling((val/4)*100)*100:#(ceiling((val/4)*100)/100)#
    m
    b
    +2
    • 5
    • 24
  • m

    Michael Owen

    05/07/2025, 3:23 PM
    During the 19 Nov Carahsoft Unveiling CF2025 webinar there was a mention(Q&A/chat?) of an update to the ColdFusion STIG? I'm interested in a couple things: • Who actual defines the guidelines? Is it authored by Adobe and approved by DOD? • Is there a method for obtaining draft versions or is there an RFC-type process? • Will the item regarding
    Disabling access to Internal ColdFusion Java components
    be loosened? Or can language features be added to provide access to useful object metadata or ColdFusion scopes without setting that switch, which is currently a non-starter in the enviroments we operate in. Thanks!
    p
    d
    j
    • 4
    • 7
  • j

    John Liljegren

    05/08/2025, 6:24 PM
    is there a trick to getting cfldap to use the CF's service logged in as account for the bind user? I'm not passing username/password but it's not working - are there jvm args i need to set or something like that? thanks!
    p
    • 2
    • 5