This is confirmed: The hotfix does in fact break transfer
applications. I've been in discussions with the Adobe technical
response team who confirmed this (their engineering team has been able
to reproduce my error). Transfer will need to be updated in some way
before anyone should install this patch. Here is the next text from
the security bulletin:

Vulnerability CVE-2010-1294, included in this security fix, now
prevents unauthorized access to datasources via the Service Factory.
This may cause issues with certain frameworks/applications that are
accessing datasources without proper authentication.

On May 14, 2:52 pm, mark mazelin <[email protected]> wrote:
> Tom:
>
> Are you also running ColdSpring? I'm trying to track down the
> responsible framework. My app is running Transfer 1.1.g, ColdSpring
> 1.2 RC1 and ColdSpring Bean Utils 1.2. I have 3 statements for
> coldspring.beans.DefaultXmlBeanFactory that call
> loadBeansFromXmlFile(). It's dying on one that instantiates my
> transfer gateways and service objects. I'm wondering if this is more
> of a ColdSpring/BeanUtils issue than a Transfer issue.
>
> Mark
>
> On May 14, 11:12 am, Tom McNeer <[email protected]> wrote:
>
>
>
> > > I had to remove the patch to get my app to work again. Anyone else
> > > experiencing this?
>
> > Yep. Just did the same thing on my dev server: Server 2008, but 32-bit.
>
> > --
> > Thanks,
>
> > Tom
>
> > Tom McNeer
> > MediumCoolhttp://www.mediumcool.com
> > 1735 Johnson Road NE
> > Atlanta, GA 30306
> > 404.589.0560
>
> > --
> > Before posting questions to the group please 
> > read:http://groups.google.com/group/transfer-dev/web/how-to-ask-support-qu...
>
> > Try out the new Transfer ORM Custom Google 
> > Search:http://www.google.com/cse/home?cx=002375903941309441958:2s7wbd5ocb8
>
> > You received this message because you are subscribed to the Google Groups 
> > "transfer-dev" group.
> > To post to this group, send email to [email protected]
> > To unsubscribe from this group, send email to 
> > [email protected]
> > For more options, visit this group 
> > athttp://groups.google.com/group/transfer-dev?hl=en
>
> --
> Before posting questions to the group please 
> read:http://groups.google.com/group/transfer-dev/web/how-to-ask-support-qu...
>
> Try out the new Transfer ORM Custom Google 
> Search:http://www.google.com/cse/home?cx=002375903941309441958:2s7wbd5ocb8
>
> You received this message because you are subscribed to the Google Groups 
> "transfer-dev" group.
> To post to this group, send email to [email protected]
> To unsubscribe from this group, send email to 
> [email protected]
> For more options, visit this group 
> athttp://groups.google.com/group/transfer-dev?hl=en

-- 
Before posting questions to the group please read:
http://groups.google.com/group/transfer-dev/web/how-to-ask-support-questions-on-transfer

Try out the new Transfer ORM Custom Google Search:
http://www.google.com/cse/home?cx=002375903941309441958:2s7wbd5ocb8

You received this message because you are subscribed to the Google Groups 
"transfer-dev" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/transfer-dev?hl=en

Reply via email to