Bug#929269: coturn: overwrites database file /var/lib/turn/turndb on upgrade or reinstall

Ferenc Wágner wferi at debian.org
Mon May 20 12:11:07 BST 2019


Package: coturn
Version: 4.3.1.2-1
Severity: critical
Justification: causes serious data loss

Dear Misi,

The coturn package ships /var/lib/turn/turndb as an empty SQLite
database template, thus unexpectedly overwrites it without warning on
upgrade or reinstall, destroying any data the user might have added to
it (such as user names, passwords, realms, IP addresses and so on).

Please stop shipping this file, the example (as currently shipped)
should be enough.  At most create it in the postinst if it does not
exist yet.
-- 
Thanks,
Feri.



More information about the Pkg-voip-maintainers mailing list