Recent updates introduce significant changes, particularly in handling scoped variables and the default algorithm for encryption functions. Here’s what you need to know and the steps required to keep your system up-to-date and secure.
Key Changes in the Latest Updates
ColdFusion now defaults to searchimplicitscopes=FALSE, requiring variable names to be explicitly prefixed with a scope identifier. Without these updates to your codebase, unscoped variable references will trigger errors. These changes are critical for improving both the performance and security of your applications.
For a detailed explanation of these changes, refer to our Detailed Documentation.
Update Options
You have two paths to start bringing your ColdFusion installation up to date:
- Apply the Next Incremental Update
- Upgrade to ColdFusion 2021 Update 13 or ColdFusion 2023 Update 7.
- Focus on addressing the Scope Variable changes.
- Note: This option does not include the latest security patches.
- Upgrade to the Latest Version
- Update directly to ColdFusion 2021 Update 17 or ColdFusion 2023 Update 11.
- Includes all critical security fixes alongside the Scope Variable changes and updates to the default encryption algorithms.
- Will require a review of the code base to ensure it’s compatible with code changes.
- Recommended to ensure full security compliance.
Your Next Steps
- Review Your Codebase
Examine your current code for any use of unscoped variables and update them to align with the new standards. - Plan Your Update Path
Decide which update path best fits your needs: incremental or full update. - Schedule the Update
Use the buttons below to schedule the incremental, or full update, for your servers. If you have staging servers, we recommend starting with those first.
Need xByte Cloud to handle your update?
You can schedule our team to perform the update during our available time slots. We’ll ensure that the update is installed and tested thoroughly. Simply click the appropriate button below to choose from the days and times our team is performing updates.
Incremental Update
Full Update
Stay Secure and Supported
Proactively addressing these updates is vital to maintaining your application’s integrity and performance. Should you have any questions or require guidance, please don’t hesitate to contact our team