That's the problem -- thanks for the response!

"JRun too busy or out of memory" as an error message for "form variable limit 
reached" could probably be improved upon ;)


Regards,
Terry



________________________________
 From: Carl Von Stetten <[email protected]>
To: cf-talk <[email protected]> 
Sent: Wednesday, January 16, 2013 8:49 AM
Subject: Re: JRun errors after security patch install
 

Terry,

I assume you are referring to the latest patch released earlier this 
week.  Since it was a cumulative patch, it included some previously 
released security improvements as well as the new ones.  One of the 
older security improvements was to add a "Post Parameter Limit" setting 
to prevent denial of service (DOS) attacks using hash algorithm 
collisions.  You can find details of the issue here 
<http://www.adobe.com/support/security/bulletins/apsb12-06.html>. The 
default value for this new setting is 100, but you can increase it if 
you need to.  Instructions to do this can be found here 
<http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix.html>.

HTH,
-Carl V.
On 1/16/2013 7:36 AM, Terry Ford wrote:
> Hello --
>
> I installed the security patch last night on cf 9.1 linux, and woke up this 
> morning to find that some of our templates no longer work:
>
>
> [Wed Jan 16 09:28:27 2013] [notice] jrApache[1978: 53193]  returning error 
> page for JRun too busy or out of memory
>
>
>
> They return a 500 error to the user.
>
> The commonality in the templates that are doing this is that they have lots 
> of FORM variables.   So, they're dealing with a lot of form input.  They have 
> worked perfectly for years, up til this patch.
>
>
> Has anyone else experienced this?   We are running on linux/apache.
>
> Regards
>
> 



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:353938
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to