Re: Redmine ActionView::Template::Error after recent Rails security update

I now think that I had misunderstood the situation. I'm not sure why it works on our test server, but our production Redmine instance reverted to its broken state this morning. It probably worked directly after the upgrade because I had not restarted apache2.

Looking at the package versions, I now think that the fixed packages had not yet made their way into the repository, so when I ran "apt-get upgrade", I was reinstalling the broken packages.

I've now installed the packages from https://people.debian.org/~utkarsh/lts/rails/ on the test server and restarted apache2, and it's working. However, it was working there before the upgrade, so I'm not sure of the reason for the difference between the test and production servers.

For the production server, I've just applied the same fix as before - temporarily downgrading the packages. I'll upgrade again when the fixed packages make their way into the repository.

On Tue, 13 Sept 2022 at 22:17, Jude Hungerford <jude.hungerford@asylumseekerscentre.org.au> wrote:

I believe the packages had been deployed to buster-backports by the time I got a test server working, so I've tested them directly from there. All seems well on the test server, so I upgraded the packages on the production server, and our Redmine instance is working there as well.

Thank you all for your work on this, it's much appreciated.

On Tue, 13 Sept 2022 at 20:29, Utkarsh Gupta <guptautkarsh2102@gmail.com> wrote:
Hi Sven,

On Tue, Sep 13, 2022 at 12:50 PM Sven Eckelmann <sven@narfation.org> wrote:
>
> On Monday, 12 September 2022 18:54:36 CEST Utkarsh Gupta wrote:
> > I have fixed the regression and uploaded the binaries here:
> > https://people.debian.org/~utkarsh/lts/rails/
>
> Thanks.
>
> > Could either (or both!) of you test this and let me know if this fixes
> > the regression for you?
>
> I have tried them out and at least on first glance, it seems to work
> fine.

Thank you for letting us know. In case you run into any issues, let me know.

- u

--
Jude Hungerford
Database Developer (Tuesday, Thursday, plus check calendar)
Asylum Seekers Centre
43 Bedford Street, Newtown NSW 2042
https://asylumseekerscentre.org.au

I acknowledge the Traditional Owners of the land on which ASC stands, the Gadigal people of the Eora nation, and their continuing connection to land, waters and community. I pay respect to their knowledge, their survival, and elders past and present.
This email and any attachments are confidential between Asylum Seekers Centre and the addressee.

Jude Hungerford
Database Developer (Tuesday, Thursday, plus check calendar)

Asylum Seekers Centre
43 Bedford Street, Newtown NSW 2042
https://asylumseekerscentre.org.au

I acknowledge the Traditional Owners of the land on which ASC stands, the Gadigal people of the Eora nation, and their continuing connection to land, waters and community. I pay respect to their knowledge, their survival, and elders past and present.

This email and any attachments are confidential between Asylum Seekers Centre and the addressee.