updating java / JDK with ColdFusion 9

Hi folks, A question about what is considered the appropriate version of Java for use with CF 9.   As I understand it _24 is the last version officially suggested by Adobe. But that is susceptible to this exploit: http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.htm l So, have people had success with more recent versions?  Or has Adobe suggested any more recent versions specifically? Thanks, Nick

I routinely use 1.6.0_32 and 33 on the servers at Cfwebtools.  No issues. Sent from my iPhone On Jul 22, 2012, at 6:51 PM, "Nick Gleason" <n.gleason@citysoft.com> wrote: ----- Excess quoted text cut - see Original Post for more -----

----- Excess quoted text cut - see Original Post for more ----- Generally, you can use the latest point release for a supported major version. Adobe can't possibly test them all as they come out, so they're always behind. That said, a lot of the vulnerabilities listed in that document (maybe all - I didn't read it that thoroughly) are not things you generally have to worry about on a web server. Most of the items involve Java Web Start or running Java applets. Servlets/JSP and those sorts of things tend to have far fewer vulnerabilities. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite.

I'm using the latest release without any problems. On Sun, Jul 22, 2012 at 7:51 PM, Nick Gleason <n.gleason@citysoft.com>wrote: ----- Excess quoted text cut - see Original Post for more -----

Many thanks for the responses!  It sounds like upgrading should be pretty smooth. Last question.  If there is some sort of problem that emerges as a result of upgrading the JDK, how easy / hard would it be to re-install an earlier version?  Can you go back or does that present additional complexity / problems? Nick ----------------------------------------

> Last question.  If there is some sort of problem that emerges as a result > of upgrading the JDK, how easy / hard would it be to re-install an earlier > version?  Can you go back or does that present additional complexity / > problems? Unless you were to overwrite or delete the old Java SDK, it should be trivial to change from one to the other. By default, when you install a new Java SDK, it will create a new directory and not interfere with whatever others you already have installed. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite.