Recently Oracle published a security alert and recommended updating to JRE 6 update 24 (or higher). As such, we've now tested and officially support the use of JRE 1.6.0_24 with ColdFusion 8.x and 9.x as noted in this security bulletin.