Project

General

Profile

Redmine is down :(

Added by eric boyer about 8 years ago

Hello,

All was OK with redmine and since one week, we can't use redmine :(

We have this message :
"
Internal error

An error occurred on the page you were trying to access.
If you continue to experience problems please contact your Redmine administrator for assistance.

If you are the Redmine administrator, check your log files for details about the error.
"

and in logs :
"
/!\ FAILSAFE /!\ Fri Jan 29 09:11:16 +0100 2016
Status: 500 Internal Server Error
private method `split' called for nil:NilClass
/var/lib/gems/1.8/gems/actionpack-2.3.11/lib/action_controller/request.rb:337:in `query_string'
/var/lib/gems/1.8/gems/rack-1.1.2/lib/rack/request.rb:127:in `GET'
/var/lib/gems/1.8/gems/actionpack-2.3.11/lib/action_controller/request.rb:426:in `query_parameters'
/var/lib/gems/1.8/gems/actionpack-2.3.11/lib/action_controller/request.rb:385:in `parameters'
/var/lib/gems/1.8/gems/actionpack-2.3.11/lib/action_controller/base.rb:1290:in `assign_shortcuts'
/var/lib/gems/1.8/gems/actionpack-2.3.11/lib/action_controller/base.rb:527:in `process_without_filters'
/var/lib/gems/1.8/gems/actionpack-2.3.11/lib/action_controller/filters.rb:606:in `process'
/var/lib/gems/1.8/gems/actionpack-2.3.11/lib/action_controller/rescue.rb:65:in `call_with_exception'
/var/lib/gems/1.8/gems/actionpack-2.3.11/lib/action_controller/dispatcher.rb:90:in `dispatch'
/var/lib/gems/1.8/gems/actionpack-2.3.11/lib/action_controller/dispatcher.rb:121:in `_call'
/var/lib/gems/1.8/gems/actionpack-2.3.11/lib/action_controller/dispatcher.rb:130:in `build_middleware_stack'
/var/lib/gems/1.8/gems/activerecord-2.3.11/lib/active_record/query_cache.rb:29:in `call'
/var/lib/gems/1.8/gems/activerecord-2.3.11/lib/active_record/query_cache.rb:29:in `call'
/var/lib/gems/1.8/gems/activerecord-2.3.11/lib/active_record/connection_adapters/abstract/query_cache.rb:34:in `cache'
/var/lib/gems/1.8/gems/activerecord-2.3.11/lib/active_record/query_cache.rb:9:in `cache'
/var/lib/gems/1.8/gems/activerecord-2.3.11/lib/active_record/query_cache.rb:28:in `call'
/var/lib/gems/1.8/gems/activerecord-2.3.11/lib/active_record/connection_adapters/abstract/connection_pool.rb:361:in `call'
/var/lib/gems/1.8/gems/actionpack-2.3.11/lib/action_controller/string_coercion.rb:25:in `call'
"

the line 337 seems to be
@env['QUERY_STRING'].present? ? @env['QUERY_STRING'] : (@env['REQUEST_URI'].split('?', 2)[1] || '')

What could be wrong please ?

thanks a lot
Best Regards

My system : RAILS_ENV=production script/about

About your application's environment
Ruby version 1.8.7 (i486-linux)
RubyGems version 1.3.7
Rack version 1.1.2
Rails version 2.3.11
Active Record version 2.3.11
Active Resource version 2.3.11
Action Mailer version 2.3.11
Active Support version 2.3.11
Application root /var/www/redmine-1.2
Environment production
Database adapter mysql
Database schema version 20110511000000

About your Redmine plugins
Redmine Gitosis plugin 0.0.5alpha
Issue Importer 0.9


Replies (2)

RE: Redmine is down :( - Added by Linus van Geuns about 8 years ago

If you are running Redmine on debian-lts (squeeze) by any chance, this issue seems to be caused by a passenger security update from the debian-lts team.
In that case you can downgrade package ibapache2-mod-passenger and hold it at the previous version:

aptitude install libapache2-mod-passenger=2.2.11debian-2
aptitude hold libapache2-mod-passenger

This obviously removes the security fix to CVE-2015-7519 and you have to remember to "unhold" and update passenger as soon as this issue has been clarified/fixed.

The update seems to cause the Rails request environent used by

libactionpack-ruby1.8: /usr/lib/ruby/1.8/action_controller/request.rb
to be incomplete.
In particular, @env['REQUEST_URI'] seems to be nil.
(At least as far as I can tell - not a ruby expert)

Further info on the security update:
https://blog.phusion.nl/2015/12/07/cve-2015-7519/
https://lists.debian.org/debian-lts-announce/2016/01/msg00018.html
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812103

RE: Redmine is down :( - Added by eric boyer about 8 years ago

Thanks a lot for the answer

    (1-2/2)