11-May security patch trouble

[ToBeNamedLater]

I applied the 8.0.1 security patch to CF version 8,0,1,195765 Standard.

All data sources verify OK when checked through the CF Administrator, but when running any application, all database connections fail.Pages that do not involve a data connection work fine.

The error is:

Can't find data source "TheDatabaseName" or, when using the client variables database a more generic "Operation failed on the ClientVariables data source."

I backed out the update, and things work again.

All patches up to now have been applied. (Specifically: C:/ColdFusion8/runtime/../lib/updates/hf801-1875.jar;   C:/ColdFusion8/runtime/../lib/updates/hf801-1878.jar;   C:/ColdFusion8/runtime/../lib/updates/hf801-77218.jar;   C:/ColdFusion8/runtime/../lib/updates/chf8010003.jar;  )

Anyone have an idea about what's going on here?

[-__cfSearching__-]

A few people have posted links/comments about this issue already. From the comments on Ben Forta's blog it may be fixed shortly..?

http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:333613

http://forta.com/blog/index.cfm/2010/5/11/ColdFusion-Security-Hotfix-Released#comments

[ToBeNamedLater]

Beautiful. Thank you very much.

[ilssac]

Repeated from House Of Fusion

Looks like there is an issue with CF8.0.1 64-bit with Hotfix 4 applied,
where it doesn't like the filename convention of the security update. It
appears that only CF8.0.1 64-bit with Hotfix 4 is impacted, so if you're
using that version don't apply the update yet.

--- Ben

[ToBeNamedLater]

No, it's more than that. I have 8.0.1 on 32-bit XP with the updates outlined in my original post and have the same trouble.

[ilssac]

That feedback has started to show up after Ben's post.

[Guest]

We're running 8.0.1 Rollup-4 on Win2003 Server 32bit with Java 1.6.0_20 and we're also experiencing epic failure as well too...  All websites using a datasource are complaining about not being able to find said datasource even though they verify correctly in the CFIDE.  Removing the jar file fixes the issue as others have stated.

[ilssac]

That was supposedly addressed by an update to the patch this morning.

As posted on Ben Forta's Blog this  morning.

http://forta.com/blog/index.cfm/2010/5/11/ColdFusion-Security-Hotfix-Released

Issue resolved - it was isolated to CF8.0.1 with  hotfix 4 (32 and 64  bit). Please review the updated technote
http://kb2.adobe.com/cps/841/cpsid_84102.html

If you continue to experience difficulty, comments to Ben Forta's blog is probably the most direct connection to the engineers.  But I'm sure we would like to hear about it here as well.

[Guest]

You know, it would be nice if Adobe's Support Forum was the most direct place to post information on topics like this...

[ilssac]

brentil wrote:

You know, it would be nice if Adobe's Support Forum was the most direct place to post information on topics like this...

Well this is, and always has been, a community support forum.  I.E. a place for users who share in the use of tools and products to gather and discuss.  It has never been an offical channel for support form Adobe nor Macromedia before them nor Allair before them.

As Ben Forta is an offical ColdFusion Evangilist and an actual Adobe employee, I'm not too bothered by his blog being a more direct connection then this commuity forum.

Now if you want to say something about the offical Technote being broadcast that it has been updated.  Now that would be something I would get behind.

[Guest]

Yes I agree, I had quickly looked at the page but failed to notice the update quote at the top.  The previous pages used to have a footer that indicated the last updated timeframe which seems to be no longer in use.  I had also focused on the primary bulletin itself which does not indicate there has been any type of update.

http://www.adobe.com/support/security/bulletins/apsb10-11.html

I just installed the new jar file and restarted the CF services on our development machine.  Everything seems to be working this time around.

[Guest]

Are you missing hf4 ?

Why didn't you delete the other hf1,2 when you installed 3 as per the installation instructions, why didn't you remove the previous hot fixes?