Secure your Redmine install by patching Ruby on Rails

How to go about securing your Redmine install on Ruby on Rails

Fairly recently the Ruby on Rails community released some patches to fix some rather serious security problems with Rails. If you haven’t patched yet you really, really should.

The only application that I was working on at the time had on a public server was our Redmine installation, one of the issues with Redmine is that is can be pretty picky about which versions of Rails it will play with so I was a little worried about updating it and potentially breaking everything.

If you have already installed Redmine then you are in luck, to patch Rails is incredibly easy. Shut down Redmine and run the following;

gem update

That is it! It updates all the gems installed to the latest versions (in the case of 3.2.x it took me to 3.2.11). Turn Redmine back on and enjoy the project management goodness knowing your Rails setup is nice and patched.


Recent posts View all

Ruby

The best way to test model scopes in Rails

Learn about Rails scopes and how to best test them with both Rspec and Minitest

Ruby

Finding out what called a Ruby method

A quick way to understand what is calling your code using the caller method