Modernize or Die® - CFML News for July 21st, 2020 - Episode 62

<p><strong>2020-07-21 Weekly News - Episode 62</strong></p><p>Watch the video version on YouTube at <a href="https://youtu.be/YpYEy2sUw18">https://youtu.be/YpYEy2sUw18</a></p><p><strong>Hosts:</strong><br>Eric Peterson - Senior Developer for Ortus Solutions<br>Brad Wood - Software Consultant for Ortus Solutions</p><p><em>Thanks to our Sponsor - Ortus Solutions</em></p><p>Get live training from the makers of your favorite Box Product.<br>ColdBox Hero to Superhero API Edition July 23 &amp; 24 - still time to register.<br>CFCasts is releasing new Free and Paid content every week</p><p><em>Patreon Support<br></em><br>We are at the 63% mark for fully funding all of our Modernize or Die Podcasts via our Patreon site: <a href="https://patreon.com/ortussolutions">https://patreon.com/ortussolutions</a> . If you love our podcasts and all we do for the #coldfusion #cfml community considers chipping in, we are almost there!<br><a href="https://www.ortussolutions.com/blog/we-need-your-help%20">https://www.ortussolutions.com/blog/we-need-your-help </a></p><p>New Patreon supporter Mario Rodrigues</p><p><strong>News and Events</strong></p><p><br><em>ICYMI Adobe Security Patch Day</em></p><p>CommandBox versions are on ForgeBox</p><p>Adobe has released security updates for ColdFusion versions 2016 and 2018. These updates resolve multiple important vulnerabilities that could lead to privilege escalation. </p><p>Vulnerability Details: DLL search-order hijacking - Privilege escalation </p><p>Note: Adobe recommends updating your ColdFusion JDK/JRE to the latest version of the LTS releases for 1.8 and JDK 11. Applying the ColdFusion update without a corresponding JDK update will NOT secure the server.  See the relevant Tech Notes for more details. <br>Adobe  also recommends customers apply the security configuration settings as outlined on the ColdFusion Security page as well as review the respective Lockdown guides.  ( linked in the security bulletin )</p><p>Adobe Docker Images have been updated as well.<br>CommandBox Docker