<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<pre>This message was generated by the Security Alerts service ( Free Trial 14th of August - 14th of September )
<a class="moz-txt-link-freetext" href="http://www.opensips.org/Resources/AlertsMain">http://www.opensips.org/Resources/AlertsMain</a>
<b>
SVN commit</b>:
<a class="moz-txt-link-freetext" href="http://opensips.svn.sourceforge.net/viewvc/opensips?view=revision&revision=9197"><meta http-equiv="content-type" content="text/html; charset=UTF-8"></a><a href="http://opensips.svn.sourceforge.net/viewvc/opensips?view=revision&revision=9234">http://opensips.svn.sourceforge.net/viewvc/opensips?view=revision&revision=9234</a>
<b>Severity</b>: Medium
<b>Version</b> : 1.8, trunk
<b>Affected modules</b> : DB_Flatstore
<b>Effect</b> : Flatstore database records were not inserted in file
<b>Affected scenarios</b>: When using the db_flatstore module for inserting records into a
file, if the database directory does not exist, or doesn't have write permissions, the
records would not be inserted.
<b>Description:</b> The problem was that the db_flatstore module was not checking if the
database directory exists and if OpenSIPS has the proper permissions to write into it.
Therefore, OpenSIPS would have started, even if it is not able to set a proper database
connection. As a fix, if the directory does not exist, OpenSIPS will not start.
<b>Risks</b> : Essential data, such as accounting information, is lost until the administrator
detects the problem and fixes it.
<b>Update</b> :
- if you have an SVN checkout, 1.8 and trunk were fixed; so update to a revision later
than 9234 (trunk) or 9235 (1.8 branch)
- if you have OpenSIPS from sources, download and apply the patch from
<meta http-equiv="content-type" content="text/html; charset=UTF-8"><a href="http://opensips.svn.sourceforge.net/viewvc/opensips/branches/1.8/modules/db_flatstore/flatstore.c?r1=9235&r2=9234&pathrev=9235"><meta http-equiv="content-type" content="text/html; charset=UTF-8"></a><a href="http://opensips.svn.sourceforge.net/viewvc/opensips/branches/1.8/modules/db_flatstore/flatstore.c?view=patch&r1=9235&r2=9234&pathrev=9235">http://opensips.svn.sourceforge.net/viewvc/opensips/branches/1.8/modules/db_flatstore/flatstore.c?view=patch&r1=9235&r2=9234&pathrev=9235</a>
or see the attached patch;
- if using tarballs, they were already regenerated (and include the fix)
- If using the official Debian package (apt.opensips.org), they are also re-generated
including the fix.</pre>
<pre class="moz-signature" cols="72">--
Razvan Crainea
OpenSIPS Core Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a>
</pre>
</body>
</html>