search for: cgi_multipart_eof_fix

This might just have affected my particular setup but thought it might be worth noting for others. >gem -v 0.9.2 >gem list --local cgi_multipart_eof_fix (1.0.0) Fix an exploitable bug in CGI multipart parsing which affects Ruby <= 1.8.5. mongrel (1.0.1, 1.0, 0.3.20, 0.3.18, 0.3.13.4) A small fast HTTP library and server that runs Rails, Camping, Nitro and Iowa apps. >gem outdated cgi_multipart_eof_fix (1.0.0 < 1.0.0) whic...

...cuting `restart_mongrel_cluster'' * executing "sudo mongrel_rails cluster::restart -C /var/www/apps/person/current/config/mongrel_cluster.yml" servers: ["localhost"] [localhost] executing command ** [out :: localhost] ** Ruby version is not up-to-date; loading cgi_multipart_eof_fix ** [out :: localhost] stopping port 3000 ** [out :: localhost] ** Ruby version is not up-to-date; loading cgi_multipart_eof_fix ** [out :: localhost] stopping port 3001 ** [out :: localhost] ** Ruby version is not up-to-date; loading cgi_multipart_eof_fix ** [out :: localhost] ** [out :: loca...

I''ve noticed that the copy of Mongrel installed by the camping-omnibus gem doesn''t work with Ruby 1.8.6. Or to be more specific, cgi_multipart_eof_fix (which Mongrel is dependent upon) doesn''t work: > $ sudo gem install mongrel --source http://code.whytheluckystiff.net > > ERROR: Error installing mongrel: > cgi_multipart_eof_fix requires Ruby version <= 1.8.5 It looks like the copy of Mongrel mirrored on code.whythel...

Hi, I wanted to try out Edge Rails 3 today and hit a serious problem trying to run mongrel. script/rails server mongrel just hangs. Interrupting and looking up the spot of the lockup revealed $LOAD_PATH.unshift ''projects/mongrel_experimental/lib/'' Mongrel::Gems.require ''mongrel_experimental'', ">=#{Mongrel::Const::MONGREL_VERSION}" at the bottom

Hopefully that gets everyone''s attention. Evan Weaver has whined enough to make me do a release to change the requirements on the Mongrel gem so that it doesn''t need the cgi_multipart_eof_fix anymore. *************************** THIS ALSO MEANS THAT MONGREL WILL HAVE TO REQUIRE RUBY 1.8.6 OR GREATER! NO EXCEPTIONS! *************************** I know Debian guys like to hack things up so that they can keep their users happy, but I have no idea what anyone else is doing. In one week I...

...ed correctly. When I ran sudo gem install mongrel, I was presented with a series of options that I had no idea of how to respond. Install required dependency daemons? [Yn] y Install required dependency fastthread? [Yn] y Install required dependency gem_plugin? [Yn] y Install required dependency cgi_multipart_eof_fix? [Yn] y After the install, the command "mongrel_rails start -d" was not recognized $ mongrel_rails start -d bash: mongrel_rails: command not found soo... I gave up and did what I had been doing, which is script/server. Lo-and-behold, mongrel starts up... ??? $ script/server => Boo...

It''s time again for your monthly cgi.rb DOS vulnerability. This latest vulnerability is different from the one that cgi_multipart_eof_fix.gem fixed. This one is related to the boundary taken from the web client being used incorrectly. You can read about the vulnerability: http://www.ruby-lang.org/en/news/2006/12/04/another-dos-vulnerability-in-cgi-library The applicable PATCH is here: http://www.ruby-lang.org/cgi-bin/cvsweb.cg...

Hi, I''m having difficulties getting mongrel running on my Debian Etch machine. It seems to install and is listed with my other gems, but things like... "mongrel_rails start ..." ... are not recognised. Perhaps this is something to do with the file "lib" not being found in the install process: ruby extconf.rb install mongrel --include-dependencies checking for main()

Hi, I just did a clean install of Ruby 1.8.5 Rubygems 0.9.0 and the Mongrel and Mongrel_Cluster gems. I used only the Debian Etch package manager, nothing compiled myself. Now, on a testapp when I do a script/server, I get the: ** Ruby version is not up-to-date; loading cgi_multipart_eof_fix warning. But it''s not serving my app. Ruby is immediately on 100% CPU load (and 0.7% memory) and stays there. When I press CTRL-C on the console I started the server from, I get => Booting Mongrel (use ''script/server webrick'' to force WEBrick) => Rails applicatio...

...ured i would try this mailing list... i just updated the ruby version on my ubuntu dapper drake box to the most recent version. i installed it into /usr/local/bin problematically, the previous installation was in /usr/bin mongrel still complains that: "Ruby version is not up-to-date; loading cgi_multipart_eof_fix" from looking at /usr/bin/mongrel_rails, i can see that the first line of the file is: #!/usr/bin/ruby1.8 which is the old version of ruby (1.8.4) I tried changing the shebang to the correct path of #!/usr/local/bin/ruby but then it gave me an error that it couldn''t find "rubyge...

...2.1.1, 2.1.0) actionpack (2.3.2, 2.2.2, 2.1.2, 2.1.1, 2.1.0) activerecord (2.3.2, 2.2.2, 2.1.2, 2.1.1, 2.1.0) activeresource (2.3.2, 2.2.2, 2.1.2, 2.1.1, 2.1.0) activesupport (2.3.2, 2.2.2, 2.1.2, 2.1.1, 2.1.0) bones (2.5.1, 2.5.0, 2.4.2, 2.4.0, 2.3.1, 2.1.1) capistrano (2.5.5, 2.5.3, 2.5.2, 2.5.0) cgi_multipart_eof_fix (2.5.0) columnize (0.3.0, 0.2) daemons (1.0.10) fastthread (1.0.1) fxri (0.3.7) fxruby (1.6.19, 1.6.18, 1.6.17, 1.6.16) gem_plugin (0.2.3) highline (1.5.1, 1.5.0, 1.4.0) hoe (2.0.0, 1.12.2, 1.11.0, 1.8.3, 1.8.2, 1.8.0) htmlentities (4.0.0) linecache (0.43) log4r (1.0.5) mini_magick (1.2.5, 1.2.3) m...

....rb. THE FIX Everyone using Mongrel can get the fix immediately by installing the latest pre-release version 0.3.14: sudo gem install mongrel --source=http://mongrel.rubyforge.org/releases Win32 people and anyone who can''t upgrade that way can get the fix by doing this: 1) gem install cgi_multipart_eof_fix --source=http://mongrel.rubyforge.org/releases 2) Edit your environment.rb to have: require ''cgi_multipart_eof_fix'' 3) Restart your services. People using other frameworks can get the fix by simply requiring rubygems and this fix in some start-up location for your framework. TH...

...ls 2.3.2 If this helps, when I run "gem list" I get this output: *** LOCAL GEMS *** actionmailer (2.3.2, 1.3.6) actionpack (2.3.2, 1.13.6) actionwebservice (1.2.6) activerecord (2.3.2, 1.15.6) activeresource (2.3.2) activesupport (2.3.2, 1.4.4) acts_as_ferret (0.4.1) capistrano (2.0.0) cgi_multipart_eof_fix (2.5.0, 2.2) daemons (1.0.9, 1.0.7) dnssd (0.6.0) fastthread (1.0.1, 1.0) fcgi (0.8.7) ferret (0.11.4) gem_plugin (0.2.3, 0.2.2) highline (1.2.9) hpricot (0.6) libxml-ruby (0.9.5, 0.3.8.4) mongrel (1.1.4, 1.0.1) needle (1.3.0) net-sftp (1.1.0) net-ssh (1.1.2) rails (2.3.2, 1.2.6) rake (0.8.7, 0.7.3...

hi. apologies if this has been asked before... my configs: ruby -v 1.8.5 mongrel 1.0.1 rails 1.2.3 i do a mongrel_rails start -e production -p 4000 -d it''ll say: ''** Ruby version is not up-to-date; loading cgi_multipart_eof_fix'' but that shouldn''t be the problems, since i see that all the time and my clusters work.. ( oh yeah, does it matter i have other clusters running, i doubt it..) however, this single mongrel process is not running in the background no pids written, nothing.. (it will work withou...

I first tried a simple gem ''mongrel'' Then later the solution found here http://jan.varwig.org/archive/rails-3-and-mongrel gem "mongrel" gem "cgi_multipart_eof_fix" gem "fastthread" gem "mongrel_experimental" But still can''t get it to work... Anyone? -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Core" group. To post to this group, send email to rubyonrails-core@goog...

....2, 1.3.6, 1.3.3) actionpack (2.1.1, 2.1.0, 2.0.2, 1.13.6, 1.13.3) actionwebservice (1.2.6, 1.2.3) activerecord (2.1.1, 2.1.0, 2.0.2, 1.15.6, 1.15.3) activeresource (2.1.1, 2.1.0, 2.0.2) activesupport (2.1.1, 2.1.0, 2.0.2, 1.4.4, 1.4.2) acts_as_ferret (0.4.3, 0.4.1) capistrano (2.5.0, 2.1.0, 2.0.0) cgi_multipart_eof_fix (2.5.0, 2.2) daemons (1.0.10, 1.0.9, 1.0.7) dnssd (0.7.0, 0.6.0) fastthread (1.0.1, 1.0) fcgi (0.8.7) ferret (0.11.6, 0.11.4) gem_plugin (0.2.3, 0.2.2) highline (1.4.0, 1.2.9) hpricot (0.6.161, 0.6) libxml-ruby (0.8.3, 0.5.2.0, 0.3.8.4) mbleigh-acts-as-taggable-on (1.0.2) mislav-will_paginate (2.3....

...ls -v Rails 2.1.2 * which rails /usr/local/bin/rails * gem list *** LOCAL GEMS *** actionmailer (2.1.2, 2.1.0, 1.3.6) actionpack (2.1.2, 2.1.0, 1.13.6) actionwebservice (1.2.6) activerecord (2.1.2, 2.1.0, 1.15.6) activeresource (2.1.2, 2.1.0) activesupport (2.1.2, 2.1.0, 1.4.4) capistrano (2.5.0) cgi_multipart_eof_fix (2.5.0) daemons (1.0.10) fastthread (1.0.1) gem_plugin (0.2.3) highline (1.4.0) mongrel (1.1.5) mysql (2.7) net-scp (1.0.1) net-sftp (2.0.1) net-ssh (2.0.4) net-ssh-gateway (1.0.0) rails (2.1.2, 2.1.0, 1.2.6) rake (0.8.3) rubygems-update (1.3.1) Any idea? Thanks in advance for your help. Best, Th...

...st show the gems? Please help gem list *** LOCAL GEMS *** actionmailer (2.3.5, 2.2.2, 1.3.6) actionpack (2.3.5, 2.2.2, 1.13.6) actionwebservice (1.2.6) activerecord (2.3.5, 2.2.2, 1.15.6) activeresource (2.3.5, 2.2.2) activesupport (2.3.5, 2.2.2, 1.4.4) acts_as_ferret (0.4.3) capistrano (2.5.2) cgi_multipart_eof_fix (2.5.0) daemons (1.0.10) dnssd (0.6.0) fastthread (1.0.1) fcgi (0.8.7) ferret (0.11.6) gem_plugin (0.2.3) highline (1.5.0) hpricot (0.6.164) libxml-ruby (1.1.2) mongrel (1.1.5) mysql (2.8.1) needle (1.3.0) net-scp (1.0.2, 1.0.1) net-sftp (2.0.1, 1.1.1) net-ssh (2.0.4, 1.1.4) net-ssh-gateway (1.0.1,...

Hello Everyone, Been head down with personal stuff, but I wanted to shoot out this email saying that I''ve collected the list of volunteers and decided that I''d just hand the keys over to them and see how they do. The list of people I have so far is: Ezra Zygmuntowicz <ezmobius at gmail.com> "Kirk Haines" <wyhaines at gmail.com> "Wayne E. Seguin"

.../gems/abstract-1.0.0/bin - /usr/lib/ruby/gems/1.8/gems/abstract-1.0.0/lib - /usr/lib/ruby/gems/1.8/gems/erubis-2.4.1/bin - /usr/lib/ruby/gems/1.8/gems/erubis-2.4.1/lib - /usr/lib/ruby/gems/1.8/gems/gem_plugin-0.2.3/bin - /usr/lib/ruby/gems/1.8/gems/gem_plugin-0.2.3/lib - /usr/lib/ruby/gems/1.8/gems/cgi_multipart_eof_fix-2.5.0/bin - /usr/lib/ruby/gems/1.8/gems/cgi_multipart_eof_fix-2.5.0/lib - /usr/lib/ruby/gems/1.8/gems/daemons-1.0.9/bin - /usr/lib/ruby/gems/1.8/gems/daemons-1.0.9/lib - /usr/lib/ruby/gems/1.8/gems/fastthread-1.0.1/bin - /usr/lib/ruby/gems/1.8/gems/fastthread-1.0.1/lib - /usr/lib/ruby/gems/1.8/gems...