[Looking for Charlie's main web site?]

Announcing ColdFusion updates released Aug 20 2024: offers Tomcat upgrade

An update for ColdFusion has been released today for both cf2023 as update 9 and and cf2021 as update 15. In brief, the only change is an update to Tomcat, which underlies traditional CF installations (whether implemented with the ColdFusion installer or zip extraction process). I'll have more to share on the Tomcat aspects of the update below.

[UPDATE since original posting: it's turned out that there's a bug in update 15 of cf2021--which is NOT affecting cf2023 update 9--that causes unexpected remove of 5 packages. There's now a new "known issues" section at the top of update 15's technote discussing the matter, only briefly. The simple solution is to add back the missing packages. For more on the original discovery, see comments below starting Aug 23,three days after this post and the updates release. For more on the root cause and other more automated solutions, see my comments below those, as well as a subsequent post I created. Now, back to my original post's contents.]

In addition, before applying the update note that there are two other things to beware--related to recent previous CF updates, and that whether you are currently running the immediately preceding update (from June) or the one from March or earlier.

[....Continue Reading....]

Comments
Charlie, as always, thank you for digging into the details of this update and giving us the skinny on it.
# Posted By Rich Toomsen | 8/21/24 9:56 PM
Thanks very much, Rich. I just started considering more and more about the implications of this "Tomcat update", and soon I found I had a lot of info to synthesize and share. :-)

I do sincerely appreciate hearing if people find it beneficial!
Hi Charlie, Im having a strange issue updating our 2021 dev server from HF14 to HF15. Its uninstalling any packages which were updated to version 14 in the last update. In the HF update log I can see its trying to download updated packages-

Downloading the package document-2021.0.15.330303.jarhttps://cfmodules.ad... cannot be downloaded. Error : Not Found.
Downloading the dependent package report-2021.0.15.330303.jarhttps://cfmodules.ad... cannot be downloaded. Error : Not Found.
Downloading the package pdf-2021.0.15.330303.jarhttps://cfmodules.ad... cannot be downloaded. Error : Not Found.
Downloading the package htmltopdf-2021.0.15.330303.jarhttps://cfmodules.ad... cannot be downloaded. Error : Not Found.The package document is marked for uninstallation. Uninstallation will be done, on the next server start.

I've ran the update from the CF Admin website and also via the command line. I've tried setting the packagesurl in the neo_updates.xml to the online repository 'https://www.adobe.co...' and at the local bundlesdependency.json. Each time it attempts to download the version 15 packages listed above. Even though I know this HF doesn't have a package update, which I can see in the bundlesdependency.json.

You may recollect I had issues with the HF13 update removing packages, this turned out to be an issue at Adobe's end which was resolved. Im scratching my head why its trying to download version 15 packages during the update. I've logged the issue with CF Support and waiting to head back.
# Posted By MaxUK | 8/23/24 5:52 AM
I had a similar issue. Ran the update from command line and had the repository stored locally. "packagesurl" was pointed to the local copy. After the update, the 4 packages you mentioned were uninstalled. I had to put them back manually. Never had this issue with any of the past updates.
Do we fid it beneficial- YES.
MY SOP:
1. See there is an update update available.
2. Open the tech note link and read it.
3. Go see what Charlie has to say about it.
4. Plan for the upgrade.
# Posted By Susan | 8/23/24 11:22 AM
Susan, thanks so much. :-) I'm really glad to be able to help. That feedback is more valuable than many will realize. (It can feel like I'm a performer playing to an empty theater/stadium sometimes.)

Roberto and Max, I am working on your issue as well. Will report when I have findings/suggestions, hopefully soon.
Charlie you aren't performing to an empty theater. I do just as Susan said, I wait for your blog post before applying any CF updates... ;)
Thanks, Roberto. And I guess I was referring as much to other posts, rather than just these announcing updates. Always a balancing act, identifying what's worth writing about, how much, etc. As long as some folks do appreciate them, I'm happy to keep offering! :-)
Roberto and Max (and others seeing this), I've been able to recreate the problem you reported. And more than that, I think I can see what's happening. On the surface, it would seem to take a resolution from Adobe (certainly for everyone to benefit), but I (or someone else) may be able to create a modified update installer jar to resolve the problem.

What I've found is that buried deep (deep) inside the hotfix-015-330303.jar there is a bundlesdependency.json which is the crux of the problem. That file names the package updates with the 2021.0.15 name prefixes which really DO NOT exist.

As you note, update 15 had ZERO package updates--it was only this tomcat update, as I had confirmed conclusively in the post above. (If one was coming from an EARLIER update and the updates you skipped DID entail updated packages, then yes applying this update WOULD implement those.)

For Adobe or others, it's that the hotfix-015-330303.jar (which, as many know, is itself simply a compressed file), there is
a Disk1\InstData\ folder, and in THAT there has Resource1.zip, and inside THAT is a $IA_PROJECT_DIR$\hotfix\ folder. Then in THAT is an dist_zg_ia_sf.jar, and then finally it's inside THAT that there is a bundles folder, which has this bundlesdependency.json file.

And I can confirm that in the CF2023 update 9 jar (which doesn't have this problem--and also had NO package updates), this folder (deep inside THAT hotfix-009-330677.jar) has NO such file.

And that's why I'd think if one could delete just that file (but then repackage everything (with the jar inside the zip inside the zip...), perhaps the update would just work.

Or we wait for Adobe to hopefully find this and correct it with a new 2021 update 15 jar. It's happened before. (And I suspect that maybe there was a plan to incorporate package updates and then it was withheld, but this file was left there pointing to package updates that were never implemented in this update.)

We shall see.
Charlie, what you are saying makes complete sense. Thanks for looking into this and clarifying what went wrong!
Hi Charlie, many thanks for investigating this! Good to know its an issue with hotfix 15 for 2021 and hopefully Adobe will resolve soon. Would you mind if I add the details of your explanation to the case I have open? It may expedite a resolution.

As other have commented your blog is invaluable, its always my first port of call after a new update has been released.
# Posted By MaxUK | 8/24/24 2:29 AM
First, Max, thanks. Second, let us know what that ticket ID is. I don't see that you've mentioned it yet. Finally, I'd definitely want to share there what I've found. (And if you'd have offered the ticket I'd have done it already. :-( Or I could once you do.)

But if you would instead, you might want to keep it brief and point to the comment directly for more. For everyone's sake, let me note how the date/time below any comment here is in fact a link to that comment. So mine with the details on my findings is at:

https://www.carehart...
Hi Charlie, thanks. The ticket ID is 128872 and I've passed the blog page link onto CF support along with the date and time of each relevant comment.
# Posted By MaxUK | 8/25/24 3:18 AM
Thanks, Max. But there's no cf bug or feature request at the Adobe tracker site, if we use the standard CF- prefix, CF-128872, or the url:

https://tracker.adob...

And while sometimes that reported "no issue found" error happens for a private bug report, I don't think that's the problem as the number you show doesn't match that of the other cf issues filed there in August, all starting with CF-4223xxx.

I also searched all the other products, in case you somehow picked another. :-)

So can you give us the url to get to wherever it may be that you filed this? Others may want to add votes, subscribe, or just check it out.
Hi Charlie, I've logged my issue with ColdFusion Support via email at - [email protected]. I wasnt aware of the bug tracker site, however after seeing your message have also logged it there-

link https://tracker.adob...
# Posted By MaxUK | 8/26/24 1:48 AM
They now acknowledge that you may need to manually add back some packages. https://helpx.adobe....
Yes, I saw that. Thanks for pointing it out. A couple of things.

First, while there's value in their sharing that workaround (for those wiping up the mess). It doesn't fixing the "broken jar of milk" that's creating the mess, more specifically for others who may apply the update going forward (who often don't read the technotes completely, if at all, before applying an update). :-( And I'd been on client calls until now to address that.

1) So first, I have just emailed them to ask if they plan to solve the root cause problem, versus offering only this manual effort.

2) Even better, I've asked if they could at least show folks that if they go into the cfpm tool, where they can then just do:

install document, htmltopdf, pdf, presentation, print, report

3) That said, while the install command when run INSIDE the cfpm CLI DOES indeed let you specify more than one package to install, sadly there's a bug where if you try to do this from outside the CLI, such as:

C:\ColdFusion2021\cfusion\bin\cfpm install document, htmltopdf, pdf, presentation, print, report

it fails reporting "Invalid command. You have passed more parameters than required." (And the same is true about the "cfpm uninstall" command.)

I have just filed a bug report for that: https://tracker.adob...

Interested folks should add a vote (please).
And Max thanks for your sharing your news of the tracker bug report you created for the original issue being discussed here. I just added a vote AND I also updated it to point out this new info of the last couple of comments (for those who may see that ticket but not this blog post).
As an update to my first comment on 8/28 (on the problem with an imperative "cfpm install" of more than one package), I've learned that for now a workaround is to remove the space after the commas. And that's due to be fixed. Yay on both points. :-)
Copyright ©2025 Charlie Arehart
Carehart Logo
BlogCFC was created by Raymond Camden. This blog is running version 5.005.
(Want to validate the HTML in this page?)

Managed Hosting Services provided by
Managed Dedicated Hosting