Adobe® ColdFusion® 10 Server Lockdown Guide

Section 7: Patch Management Procedures
Staying up to date with patches is essential to maintaining security on the server. The system
administrator should monitor the vendors security pages for all software in use. Most vendors have a
security mailing list that will notify you by email when vulnerabilities are discovered.
Check the following websites frequently:
Adobe Security Bulletins: http://www.adobe.com/support/security/
Microsoft Security Tech Center: http://technet.microsoft.com/en-us/security/default.aspx
RedHat Security: http://www.redhat.com/security/updates/
Changelog for Apache 2.2 web server: http://www.apache.org/dist/httpd/CHANGES_2.2
To keep updated with ColdFusion 10 updates you can use the server update feature in ColdFusion
administrator. Consider setting up an instance to email you when new updates are released. You
should also consider following http://blogs.coldfusion.com/ which is published by the ColdFusion
engineering team, Shilpi Khariwal’s blog (the Security Czar on the ColdFusion engineering team)
http://www.shilpikhariwal.com and finally third a third party commercial service http://hackmycf.com/
83