[DRE-maint] Regression in stretch update of ruby-activerecord 2:5.2.2.1+dfsg-1+deb10u4

Abhijith PA abhijith at disroot.org
Fri Sep 9 13:34:03 BST 2022


Hello Raphael,

On 07/09/22 11:10 AM, Raphael Hertzog wrote:
> Hello Abhijith and the LTS team,
> 
> in Kali we have applied the last ruby-active* security updates and this
> broke the web API part of autopkgtest.kali.org.

Can you share how autopkgtest.kali.org service setup and how 
is it running. I am using https://ci.debian.net/doc/file.HACKING.html 
to reproduce this. What is your rack server like and you also run any 
proxy server.  

 
> Specifically line 51 in
> /usr/share/rubygems-integration/all/gems/activerecord-5.2.2.1/lib/active_record/coders/yaml_column.rb
> makes a call to YAML.safe_load() with parameters that the YAML implementation in ruby 2.5 in stretch
> does not support.
> 
> We have this error in our logs:
> 
> App 7518 output: 2022-09-07 07:55:07 - ArgumentError - unknown keywords: permitted_classes, aliases:

Even though I understand it now, Its just can't reproduce it with a 
local debci setup. Is this only triggered on certain action.


--abhijith



More information about the Pkg-ruby-extras-maintainers mailing list