Modernize or Die® - CFML News for July 21st, 2020 - Episode 62

2020-07-21 Weekly News - Episode 62

Watch the video version on YouTube at https://youtu.be/YpYEy2sUw18

Hosts:
Eric Peterson - Senior Developer for Ortus Solutions
Brad Wood - Software Consultant for Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

Get live training from the makers of your favorite Box Product.
ColdBox Hero to Superhero API Edition July 23 & 24 - still time to register.
CFCasts is releasing new Free and Paid content every week

Patreon Support

We are at the 63% mark for fully funding all of our Modernize or Die Podcasts via our Patreon site: https://patreon.com/ortussolutions . If you love our podcasts and all we do for the #coldfusion #cfml community considers chipping in, we are almost there!
https://www.ortussolutions.com/blog/we-need-your-help

New Patreon supporter Mario Rodrigues

News and Events

ICYMI Adobe Security Patch Day

CommandBox versions are on ForgeBox

Adobe has released security updates for ColdFusion versions 2016 and 2018. These updates resolve multiple important vulnerabilities that could lead to privilege escalation.

Vulnerability Details: DLL search-order hijacking - Privilege escalation

Note: Adobe recommends updating your ColdFusion JDK/JRE to the latest version of the LTS releases for 1.8 and JDK 11. Applying the ColdFusion update without a corresponding JDK update will NOT secure the server.  See the relevant Tech Notes for more details.
Adobe  also recommends customers apply the security configuration settings as outlined on the ColdFusion Security page as well as review the respective Lockdown guides.  ( linked in the security bulletin )

Adobe Docker Images have been updated as well.
CommandBox Docker images updated on ForgeBox

Security Bulletin: https://helpx.adobe.com/security/products/coldfusion/apsb20-43.html
Blog: https://community.adobe.com/t5/coldfusion/coldfusion-2018-release-update-10-and-coldfusion-2016-release-update-16-released/td-p/11287201?page=1

CFCasts Content Updates

What’s New in CommandBox 5
https://cfcasts.com/series/commandbox5

ColdBox Master Class
https://cfcasts.com/series/cb-master-class

Send your suggestions at https://cfcasts.com/support

ICYMI - ColdFusion Meetup - "What Web Developers Can Learn From Native Mobile Developers", w/ TJ VanToll

Thursday July 16 at 12pm US Eastern Time, UTC-4
Web developers tend to be unabashed defenders of the web platform, and tend to view native mobile platforms as proprietary, gated and bloated.
As a long-time web developer I felt this way too, but then something unexpected happened: I joined the dark side, and spent five years of my career working on—*gasp*—iOS and Android applications.
Now, like an explorer returning from a multi-year safari—I have so much to share! In this talk I’ll discuss how native development has improved the way I write code for the web, and how you can incorporate the best native app performance and testing tips into your web workflows.
Meetup Group Link: https://www.meetup.com/coldfusionmeetup/events/271613429/
Recording: https://www.youtube.com/watch?v=HVc9UW1T3ew&list=PLG2EHzEbhy0-QirMKgSxhjkUyTSSTvHjL

ColdFusion Meetup - "Intro to NativeScript", with Alex Ziskind

Thursday July 23rd at 6pm US Eastern Time, UTC-4.
Web developers are people too. They have needs and wants beyond just slinging code that is destined for the modern browser. They may also dream of building native mobile apps. But learning XCode and Android Studio and objective C might not be in the cards.
This is where NativeScript comes in; a framework that allows web developers to build native mobile apps using JavaScript and CSS. Alex Ziskind, the creator of NativeScripting.com, a school for learning NativeScript, will show you how to get started.
Meetup Group Link: https://www.meetup.com/coldfusionmeetup/events/271844332/

Adobe Webinar - Understanding the what, when and how of API Manager architecture and its various components w