Skip to main content
Owainnorth
Inspiring
December 16, 2011
Question

MPSB05-13 Cumulative Security Updater broken link

  • December 16, 2011
  • 1 reply
  • 1511 views

I need to find the following hotfix for JRun in CF8:

MPSB05-13 Cumulative Security Updater for JRun 4.0 server

but the link doesn't work any more. Does anyone have an updated link?


http://www.adobe.com/devnet/security/security_zone/mpsb05-13.html

    This topic has been closed for replies.

    1 reply

    Charlie Arehart
    Community Expert
    Community Expert
    December 19, 2011

    Are you sure you need the hotfix for CF? Often when a hotfix exists for JRun, it is referring to the standalone edition of JRun, and not the Multiserver form of deployment (which of course runs atop a deployment of jRun). I don’t know about this particular fix. The fact that the link can’t be found (even via a search on the Adobe site) suggests it may not be needed. I see that it’s from 2005 (on http://www.adobe.com/support/security/.) What’s making you “need” it?

    /charlie

    /Charlie (troubleshooter, carehart. org)
    Owainnorth
    Inspiring
    December 19, 2011

    One of our ColdFusion 8 boxes is required to be PCI compliant, and the company who do our scans have suddenly decided that JRun 4 has a vuln from back in the day, which means the test now fails. Details of the vuln here. What's stupid is it only lists ColdFusion 6 as affected, but as CF8 still uses JRun 4 they've decided it now fails too.

    Has never been a problem before, and is a right pain to be honest. But isn't that just PCI scans all over...

    Owainnorth
    Inspiring
    December 20, 2011

    To be honest, the PCI compliance is  a complete sack of steaming pointlessness anyway.

    It certainly is.  Just like most other sorts of accreditation.  Still: if a person can't make a living doing SEO, they're perhaps able to do PCI auditing instead ;-)

    --

    Adam


    Now that is very much true.