[Pkg-sympa-devel] Bug#863631: sympa: trashes configuration on update without asking

[Dominik George]

Package: sympa
Version: 6.2.16~dfsg-3
Severity: critical
Justification: causes serious data loss

The upgrade to 6.2.16~dfsg-3 from 6.2.16~dfsg-2 in stretch just ditched
SYMPA's config files on my system, leaving it in a broken way, even in
such a broken way that users who tried sending mails did not receive an
error and thought things went through. I think some actions would even
have led to destruction of database data.

I have no idea why the maintainer scripts decided to do that. I
recovered from etckeeper and a system backup.

-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sympa depends on:
ii  adduser                           3.115
ii  ca-certificates                   20161130+nmu1
ii  dbconfig-common                   2.0.8
ii  debconf [debconf-2.0]             1.5.60
ii  fonts-font-awesome                4.7.0~dfsg-1
ii  init-system-helpers               1.48
ii  libarchive-zip-perl               1.59-1
ii  libc6                             2.24-10
ii  libcgi-fast-perl                  1:2.12-1
ii  libcgi-pm-perl                    4.35-1
ii  libclass-singleton-perl           1.5-1
ii  libcrypt-openssl-x509-perl        1.8.7-3
ii  libcrypt-smime-perl               0.19-2
ii  libdatetime-format-mail-perl      0.4030-1
ii  libdbd-csv-perl                   0.4900-1
ii  libdbd-mysql-perl                 4.041-2
ii  libdbd-pg-perl                    3.5.3-1+b2
ii  libdbd-sqlite3-perl               1.54-1
ii  libdbi-perl                       1.636-1+b1
ii  libfcgi-perl                      0.78-2
ii  libfile-copy-recursive-perl       0.38-1
ii  libfile-nfslock-perl              1.27-1
ii  libhtml-format-perl               2.12-1
ii  libhtml-stripscripts-parser-perl  1.03-1
ii  libhtml-tree-perl                 5.03-2
ii  libintl-perl                      1.26-2
ii  libio-stringy-perl                2.111-2
ii  libjs-jquery                      3.1.1-2
ii  libjs-jquery-migrate-1            1.4.1-1
ii  libjs-jquery-placeholder          2.3.1-2
ii  libjs-jquery-ui                   1.12.1+dfsg-4
ii  libjs-modernizr                   2.6.2+ds1-1
ii  libjs-twitter-bootstrap           2.0.2+dfsg-10
ii  libmail-dkim-perl                 0.40-1
ii  libmailtools-perl                 2.18-1
ii  libmime-charset-perl              1.012-2
ii  libmime-encwords-perl             1.014.3-2
ii  libmime-lite-html-perl            1.24-2
ii  libmime-tools-perl                5.508-1
ii  libmsgcat-perl                    1.03-6+b3
ii  libnet-cidr-perl                  0.18-1
ii  libnet-dns-perl                   1.07-1
ii  libnet-ldap-perl                  1:0.6500+dfsg-1
ii  libnet-netmask-perl               1.9022-1
ii  libregexp-common-perl             2016060801-1
ii  libsoap-lite-perl                 1.20-1
ii  libtemplate-perl                  2.24-1.2+b3
ii  libterm-progressbar-perl          2.18-1
ii  libunicode-linebreak-perl         0.0.20160702-1+b1
ii  libxml-libxml-perl                2.0128+dfsg-1+b1
ii  lsb-base                          9.20161125
ii  mhonarc                           2.6.19-2
ii  perl                              5.24.1-2
pn  perl:any                          <none>
ii  postfix [mail-transport-agent]    3.1.4-4
ii  rsyslog [system-log-daemon]       8.24.0-1
ii  sqlite3                           3.16.2-3

Versions of packages sympa recommends:
ii  apache2-suexec-pristine [apache2-suexec]  2.4.25-3
ii  doc-base                                  0.10.7
ii  libapache2-mod-fcgid                      1:2.3.9-1+b1
pn  libcrypt-ciphersaber-perl                 <none>
ii  libio-socket-ssl-perl                     2.044-1
ii  locales                                   2.24-10
ii  logrotate                                 3.11.0-0.1
ii  postgresql                                9.6+181

Versions of packages sympa suggests:
ii  apache2 [httpd-cgi]  2.4.25-3
pn  libauthcas-perl      <none>
pn  libdbd-odbc-perl     <none>
pn  libdbd-oracle-perl   <none>

-- Configuration Files:
/etc/sympa/auth.conf changed [not included]

-- debconf information excluded