You may have noticed that Adobe released yet another set of updates on Friday, Mar 1, for CF11, 2016, and 2018. This update addresses a specific security risk (marked priority 1, urgent by Adobe). If you may like more info on that update, I can help.
I have a pair of blog posts, on my own site, discussing this update, what it’s about, who may be affected, what protections it adds, and more:
Urgent CF security update released March 1 2019, for CF11/2016/2018, Part 1
CF security update (March 1 2019), part 2: further details, prevention, and more
I also discuss there how to deal with the potential vulnerability if you may not be able to apply the most recent update, or if you are on CF10 or earlier, which are no longer updated.
I know that people may be gun-shy about applying updates after the problems with the Feb 12 updates which affected CF 11 and 2016. Those each received an update to replace that on Feb 25. I would point out that if you have in place already the most recent updates to each (CF2018 update 2 from Feb 12, or CF2016 update 9 or CF11 update 17 from Feb 25), then this latest update ONLY adds support for this security fix, not any other new or changed features.
That said, if you had not applied those prior updates, then yes as always the updates are cumulative and you will get this security fix and all the previous security fixes and feature changes of those prior updates. You should always view the technotes for previous updates you may be skipping, to see what they include. I did a blog post here in the portal:
Finding more about applying ColdFusion updates
In that post I offer links to the technotes for all the prior updates, and I also share a link to my own post with more info if you may experience trouble applying CF updates. Usually it goes smoothly, but things can go amiss, and I help in resolving such common problems.
The post More info on the CF Security Update included in the March 1 CF updates for CF11, 2016, and 2018 appeared first on ColdFusion.