KeePass2 no PUT at WebDAV-Sync with mono-3.x

[David Lechner]

[Impact] database disappears when one saves on webdav folder

[TESTCASE]
setup writeable webdev with a database
open a database via "Open URL"
save database

Original report:
This bug was reported upstream at https://sourceforge.net/p/keepass/discussion/329221/thread/9422258c/

There was a change introduced in Mono 3.x that breaks http writes in keepass2. This causes dataloss for the user because remote files are deleted when trying to save or synchronize a file remotely.

I have submitted this patch upsteam. https://sourceforge.net/p/keepass/patches/89/

Because of the dataloss, I think this is worth of attention for patching the current version of keepass2 in trusty.

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "Patch that was submitted upsteam" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]

[Julian Taylor (jtaylor)]

thanks I'll try to have a look in the next few days

[David Lechner (dlech)]

Dominik took my patch and made it much more robust. I have taken his changes and created new patches.

[David Lechner (dlech)]

These patches should apply cleanly using quilt with the respective KeePass versions.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Julian Taylor (jtaylor)]

I have uploaded the fix to debian, it should make its way to ubuntu trusty in by tomorrow
I have tested it with local webdav and it seems to work, but if possibly can you try too? when available just download the utopic package from the main page. It should work fine in trusty.
I'll start the SRU shortly after it landed in utopic.
thanks for the patch.

[Launchpad Janitor (janitor)]

This bug was fixed in the package keepass2 - 2.26+dfsg-2

---------------
keepass2 (2.26+dfsg-2) unstable; urgency=medium

  * fix-webdav-storage-with-mono-2.11.patch:
    fix possible dataloss when storing database via webdav (LP: #1315962)
    thanks to David Lechner for the original patch

 -- Julian Taylor <email address hidden> Tue, 13 May 2014 19:30:54 +0200

[Julian Taylor (jtaylor)]

I have uploaded a fix to trusty-proposed, please test it when it is accepted

[Scott Kitterman (kitterman)]

Hello David, or anyone else affected,

Accepted keepass2 into trusty-proposed. The package will build now and be available at http://launchpad.net/ubuntu/+source/keepass2/2.25+dfsg-1ubuntu0.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[Julian Taylor (jtaylor)]

the testcase works with the proposed version

[Launchpad Janitor (janitor)]

This bug was fixed in the package keepass2 - 2.25+dfsg-1ubuntu0.1

---------------
keepass2 (2.25+dfsg-1ubuntu0.1) trusty-proposed; urgency=medium

  * fix possible dataloss when storing database via webdav (LP: #1315962)
    thanks to David Lechner for the original patch
 -- Julian Taylor <email address hidden> Fri, 23 May 2014 10:00:20 +0200

[Colin Watson (cjwatson)]

The verification of the Stable Release Update for keepass2 has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regresssions.