Error 500 after latert update

I have hotfixed it for now, will try the patch in an hour or so. Thanks for the fast response!

That did not solve it..

you'll have to recreate your htaccess again

Or did you mean create a new profile? I only redeployed it.

I just had another (better) look at my .htaccess file:

#
# Apache/PHP/Drupal settings:
#


# Protect files and directories from prying eyes.
<FilesMatch "\.(engine|inc|info|install|make|module|profile|test|po|sh|.*sql|theme|tpl(\.php)?|xtmpl)(~|\.sw[op]|\.bak|\.orig|\.save)?$|^(\..*|Entries.*|Repository|Root|Tag|Template|composer\.(json|lock))$|^#.*#$|\.php(~|\.sw[op]|\.bak|\.orig\.save)$">
  Order allow,deny
</FilesMatch>

+FollowSymLinks

# Don't show directory listings for URLs which map to a directory.
Options -Indexes

# Follow symbolic links in this directory.
Options 

# Make Drupal handle any 404 errors.
# ...

Aligning that with the template file:"

#
# Apache/PHP/Drupal settings:
#
%%%rules_before%%%

# Protect files and directories from prying eyes.
<FilesMatch "\.(engine|inc|info|install|make|module|profile|test|po|sh|.*sql|theme|tpl(\.php)?|xtmpl)(~|\.sw[op]|\.bak|\.orig|\.save)?$|^(\..*|Entries.*|Repository|Root|Tag|Template|composer\.(json|lock))$|^#.*#$|\.php(~|\.sw[op]|\.bak|\.orig\.save)$">
  Order allow,deny
</FilesMatch>

%%%prevent_txt%%%

# Don't show directory listings for URLs which map to a directory.
Options -Indexes

# Follow symbolic links in this directory.
Options %%%symbolic_links%%%

# Make Drupal handle any 404 errors.
# ...

So it seems the +FollowSymLinks is placed at the %%%prevent_txt%%%position.

Almost like all values are shifted in the replacements... (I did notice that $prevent_txt_rules is only defined if $prevent_txt_config is TRUE, so there can be an undefined variable in the replacements. Could that be the cause?)

Update, yup that did it. The undefined variable was skipped and the whole replacement array shifted.

Making sure that $prevent_txt_rules is always defined:

  $prevent_txt_rules = '';
  if($prevent_txt_config){
    $prevent_txt_rules = '# Prevent core text files from being read via the web.' . PHP_EOL;
    $prevent_txt_rules .= '<FilesMatch (^COPYRIGHT|CHANGELOG|INSTALL.mysql|INSTALL.pgsql|INSTALL.sqlite|INSTALL|LICENSE|MAINTAINERS|README|UPGRADE).*\.txt$">' . PHP_EOL;
    $prevent_txt_rules .= 'Order allow,deny' . PHP_EOL;
    $prevent_txt_rules .= '</FilesMatch>' . PHP_EOL;
  }

Recreating the profile and deploying it made everything show up again.

UPDATE: Your patch is not required as that now results in Options Options +FollowSymLinks.

@Jibus, did you upload the wrong file? They are identical ;)

Yes, that seems to do it. It appeared I was able to re-deploy my old profile now without issues.

I'll check one other site to be sure, but I guess this did it.

Confirming this is fixed. I have a follow-up though... #2868596: Protect Core text files setting is not persistent.