Modernize or Die® - CFML News for July 30th, 2019

Watch the full video Online on Youtube - https://youtu.be/ASLg8JGvD2Y2019-07-30 Weekly News - Episode 12Hosts:Gavin Pickin - Software Consultant for Ortus SolutionsBrad Wood - Lead Architect for Ortus SolutionsNews and EventsSecurity Alert - VE-2019-7839: COLDFUSION CODE EXECUTION THROUGH JNBRIDGEJuly 25, 2019 | Trend Micro Research TeamA remote code execution vulnerability has been reported in Adobe ColdFusion. This vulnerability is due to the JNBridge binary protocol port being exposed without any authentication.A remote unauthenticated attacker can exploit this vulnerability by sending a crafted JNBridge binary protocol message to an affected server. Successful exploitation results in remote code execution as the root or SYSTEM user.Brad tweeted about this security alert“#ColdFusion folks, hackers waste no time developing exploits for CF when a patch comes out. I hope you have the same sense of urgency when it comes to installing the patches! Also ensure your firewall is only allowing HTTP/S traffic through! #CFML” https://www.zerodayinitiative.com/blog/2019/7/25/cve-2019-7839-coldfusion-code-execution-through-jnbridgePete Frietag from Foundeo released another CFML News Issue No 32Go online to register and get those newsletters emailed to you. Great summary of everything CFML - highlighting the best blog posts and news.https://tinyletter.com/cfml/letters/cfml-news-issue-32CBORM Updated - Version 2 Released + New GitBookA complete rewrite of the module to support a more modern and fluent approach to working with Hibernate/ColdFusion ORM.  In this release we had to support 3 versions of Hibernate: 3 (Lucee), 4 (ACF 2016) and 5 (ACF 2018), which in itself proved to be a gargantuan task.We also focused on bringing more functional programming aspects to working with collections of entities and even introduced cbStreams as part of the cborm module.  This gives you the ability to produce streams out of any method that produces a collection of entities.We also focused on converting the state of an object graph to a raw ColdFusion data struct as we live in the world of APIs.  We include the mementifier module which allows every single entity to have a getMemento() method that will convert itself and its relationships to raw CF data constructs so you can take that state and either marshall it to another format (json,xml,excel) or audit the state.https://coldbox-orm.ortusbooks.com/New landing page for OrtusBooks.com - see all of our bookshttps://ortusbooks.com/Time to get the word outWe’ve had 500+ views on Youtube with 100+ new subscribersWe’ve had 1000+ podcast downloadsBut until this last week, Ben Nadel ( who has been blogging like a mad man about ColdFusion lately ) didn’t know we had a CFML podcast, let alone 2.So i need everyone go to on twitter and tweet that you’re watching / listening to the #modernizeordie #cfmlnews #podcast and why you think others should watch / listen to it.Adobe CF Summit early birdStill available as of July 23rd - are they still available now? Get them before they go up.Certificate Program + Conference Pass $498.00ColdFusion Security Preconference + Conference Pass $348.00Conference Pass $99.00ColdFusion Docker Preconference + Conference Pass $348.00Adobe CF Summit - ConferenceLas Vegas at the Mirage October 1-2 ( Tuesday + Wednesday )Biggest CFML Conference of the Year - 500+ peopleGreat Adobe PartyRegister Now - Early bird was only $99 https://cfsummit.adobeevents.com/Early-bird registration has been extended to June 30, 2019Call for Speakers is now closed!!!Speakers are listed on the websiteAdobe CF Summit Speakers Announced - 31 so farhttps://cfsummit.adobeevents.com/speakers/ Lots of Ortus SpeakersLuis MajanoBrad WoodEric PetersonGavin PickinAdobe Speakers 5+Rakshith NareshUday OgraKailash BihaniPiyush Kumar NayakSuchika SinghLots of other great community speakers 15+Including but not limited to:Pete FrietagGeorge MurphyBrian KlaasMatt ClementeGiancarlo GomezMatt GiffordCarl Von StettenDaniel FredericksUma GhotikarAbram AdamsDan WilsonDavid Tattersal ( Fusion Reactor )Charlie ArehartDave FergusonAdobe CF Summit - WorkshopsAdobe ColdFusion Specialist Certificate ProgramFrom the CF Summit Website:The Adobe ColdFusion Specialist is a full-day certificate classroom program, delivered by top Adobe ColdFusion experts. You will be enrolled into the course as soon as you register and will receive course instructions and prep materials two weeks prior to the on-site program date. Following the training you will complete an online assessment – upon successful completion, you will receive your Adobe ColdFusion Specialist certificate.Register: https://cfsummit.adobeevents.com/adobe-coldfusion-specialist/ LocationThe Mirage, Las Vegas3400 S Las Vegas BlvdLas Vegas, Nevada, United States89109Dates:Monday September 30, 2019 - 8:00 AM - 5:00 PMPrice: $399.00 - early bird pricingPre-conference Training 1: Hands-on ColdFusion Security WorkshopTrainer : Pete Freitag, Principal Consultant, Foundeo Inc.Pre-conference Training 2: Going from Zero to 60 with Docker and ColdFusion imagesTrainer: Charlie Arehart, Independent Consultant, Careharthttps://cfsummit.adobeevents.com/register/registration/select Ortus Solutions Training Workshops at CF Summit after the ConferenceOrtus will be doing 2  2-day trainings on Thursday October 3rd, and Friday October the 4th. We have two great workshops to select from and they will be held in a much more exclusive and comfortable environment that will ...