Cold fusion servers have frequent security patches and should be kept up to date to keep systems safe from devious people.
The latest ColdFusion hotfix is APSB13-19.
Adobe APSB13-19 Documentation.
Prerequistes:
Administration Url
Admin Password
Start and Stop Aliases
Patch 3329722.zip
Test urls
Root Access
Commands:
stop_<instance1>cf
start_<instance1>cf
stop_<instance2>cf
start_<instance2>cf
stop_cf
start_cf
Create the following aliases to speed start and stop operation and standardize start and stop method
alias start_all='start_<instance1>web; start_cf; start_<instance1>cf'
alias start_cf='/opt/jrun4/bin/jrun -nohup -start cfusion'
alias start_<instance1>cf='/opt/jrun4/bin/jrun -nohup -start -config /opt/jrun4/bin/<instance1>.jvm.config -childVM <instance1>'
alias start_<instance1>web='/usr/sbin/httpd -k start -f /etc/<instance1>-httpd/conf/httpd.conf'
alias stop_all='stop_<instance1>web; stop_cf; stop_<instance1>cf'
alias stop_cf='/opt/jrun4/bin/jrun -stop cfusion'
alias stop_<instance1>cf='/opt/jrun4/bin/jrun -stop -childVM <instance1>'
alias stop_<instance1>web='/usr/sbin/httpd -k stop -f /etc/<instance1>-httpd/conf/httpd.conf'
Patch Instructions:
Notes: This patch set is a fairly straight forward patchset, with just some file replacements, in some patch sets you will need to deploy jar files as well.
1. Take a back up of the entire cf multiserver home
sudo su – root
cd /opt
export mytimestamp=`date +%F-%H%M%S`
export mydate=`date +%F`
echo $mytimestamp
echo $mydate
tar -czvf jrun4.$mytimestamp.tgz jrun4
mkdir /appbackup/backup.$mydate/cfusion/ -p
mv jrun4.$mytimestamp.tgz /appbackup/backup.$mydate/cfusion/
ls -l /appbackup/backup.$mydate/cfusion/
Step 2. Extract Patchset
cd /software/coldfusion/patches/apsb13-19
unzip 3329722.zip
cd 3329722
cp jrun-hotfix-3329722.jar
cp jrun-hotfix-3329722.jar /opt/jrun4/servers/lib
ls -l /opt/jrun4/servers/lib
Step 3. Restart server instances
stop_cf
stop_<instance1>cf
stop_<instance2>cf
start_cf
start_<instance1>cf
start_<instance2>cf
Step 4. Verify Patchset
Test urls
