https://stackoverflow.com/questions/15375274
italiano
english
français
española
中国
日本の
العربية
Deutsch
한국어
Português
RussianThe ColdFusion Hotfixes that you mentioned are cumulative. The key is in the name. Notice that the Hotfixes you mentioned, 1 - 2 - 3 and 4, are named Cumulative Hotfix 1, Cumulative Hotfix 2, Cumulative Hotfix 3 and Cumulative Hotfix 4. Meaning that each of those Hotfix versions contain all of the changes from the previous Hotfix(es). However, Adobe also releases some Hotfixes that are not cumulative. See this Hotfix for ColdFusion 9 for example; APSB13-03 (this Hotfix is included in Cumulative Hotfix 4 by the way). Notice that they name these updates "Security update: Hotfix available for ColdFusion". Unfortunately they use that term Hotfix again, but also notice that it does not say Cumulative. It is a bit confusing and in my opinion this has always been a shortcoming for ColdFusion by Adobe. Keeping the servers updated has been an artform in itself. Finally Adobe has tried to remedy this with ColdFusion 10 and it's update process via the ColdFusion administrator.
In the end your best bet is to read the descriptions on the Hotfix pages themselves. They will always report what previous fixes they include if any. You can see what is included with Cumulative Hotfix 4 on the page found here: ColdFusion Help / Cumulative Hotfix 4 | ColdFusion 9.0.1
