Unofficial Updater 2 Updates (APSB12-06)

There have been several updates to Unofficial Updater 2 over the past few days.

  • Support for APSB12-06
    • Adobe truely seems to be getting on a quarterly release schedule for ColdFusion security updates since the last one, APSB11-29, was released on December 13, 2011
    • Given that the last few have been cumulative, UU2 now just applies the latest one following the Section 2 instructions
  • UU2 only needs to be run once with an Internet connection
    • This was a suggestion from Adrian Moreno and was something I had been thinking about doing for a bit
    • On the first run, UU2 will download all the hotfixes and security bulletins for both ColdFusion 8.0.1 and 9.0.1 from Adobe and then pack them into Unofficial-Updater2-with-downloads.jar which can be run later. This was done since UU2 can not directly package the updates from Adobe
    • UU2 will also create unofficial-updater2.txt in <cfusion-home>/lib/updates which will contain the date that UU2 was run and the date the files were downloaded from Adobe
  • Updates for download URLs that Adobe changed
  • Wiki updates

The latest installer is available for download from github.

  1. #1 by Henry - March 19, 2012 at 10:30 AM

    Thanks, just tried...

    - Can't apply to all instances,
    only to cfusion (for multiple instance installation)

    - Java swing dialog for selecting folder is buggy, often stuck and double click becomes renaming folder, weird.

    - Default backup location (C:\) does not work on Windows 7 (or Vista I guess) 'cause of no admin permission. Had to use another user accessible folder such as Desktop or Documents

    The Unofficial-Updater2-with-downloads.jar, although not meant to be invoked directly, its validation is sort of outdated and complained about Application.cfm not found. Unofficial-Updater2.jar is fine.

    It'd be awesome if it can automatically stop and restart CF Services.
  2. #2 by David Epler - March 20, 2012 at 7:37 AM


    To apply to multiple instances you would need to run UU2 against each individual instance. There is no direct way for UU2 to determine where all the instances are for directories (CFIDE and WEB-INF)

    Unfortunately the buggy swing interface is due to Ant Installer which has not been updated for several years. It was a trade off to get the dependencies down to just Java 1.5+ to run vs requiring Java + Ant + ant-contrib.

    The backup location is pointed to C:\ as a default, because if it is left blank Ant Installer has problems with the "Select Folder" dialog. The intent is for the user to specify the actual backup location they want the files stored at.

    Both Unofficial-Updater2.jar and the repacked Unofficial-Updater2-with-downloads.jar use the exact same validation for inputs. The not finding Application.cfm is there to ensure that the directory inputed for CFIDE is correct. There is also a file check for the WEB-INF directory as well.

    Due to the wide variety of installation types and OSes, there wasn't a way for me to consistently stop and start the CF Service.

    Thank you for the feedback. If any of these need to be addressed further please file it as an issue on github,
  3. #3 by Richard Hughes - March 21, 2012 at 5:55 AM

    I have CF7 & CF901, but UU2 wants to install for CF8, I change the paths for CF9 but it later fails. IS there a way to force CF9?
  4. #4 by David Epler - March 21, 2012 at 7:13 AM


    Are you running CF 9.0.0 or CF 9.0.1? UU2 is specifically built to only patch 8.0.1 or 9.0.1. If it doesn't find those explicit versions it will fail and not run.

    If you could post the content of both the Output and Error tab to an issue on github, I would have a better understanding as to what might be causing the problem.
  5. #5 by Mike Tangorre - October 22, 2012 at 7:50 PM

    @David Epler

    First off, this is a great tool and a huge time saver. Thank you for putting it together!

    How might I go about automating the running of the tool to make dealing with multiple instances easier. I am thinking possible batch script (Windows)? I have seen a lot of mention of the text version of the tool being run from the command line, but I haven't run into anything on automating the tool to run against multiple instances etc.

    Any insight would be much appreciated! Thank you!
  6. #6 by Misty - August 19, 2013 at 2:54 PM

    Epler, Man you rock. Amazing JOB, Flawlesss work, Hats off
(will not be published)
Leave this field empty: