Secure your Redmine install by patching Ruby on Rails

How to go about securing your Redmine install on Ruby on Rails

Fairly recently the Ruby on Rails community released some patches to fix some rather serious security problems with Rails. If you haven't patched yet you really, really should.

The only application we had on a public server was our Redmine installation, one of the issues with Redmine is that is can be pretty picky about which versions of Rails it will play with so I was a little worried about updating it and potentially breaking everything.

If you followed my guide for installing Redmine then you are in luck, to patch Rails is incredibly easy. Shut down Redmine and run the following;

gem update

That is it! It updates all the gems installed to the latest versions (in the case of 3.2.x it took me to 3.2.11). Turn Redmine back on and enjoy the project management goodness knowing your Rails setup is nice and patched.


Recent posts View all

Web Dev

Creating Docker images with M1 Macs

I ran into an issue with my Dockerfile when using it on a Linux machine, setting a platform fixed the issue

Web Dev

What does --no-owner mean in Postgres?

You have read a guide to doing Postgres exports or imports and seen --no-owner, this is what it means