Activity log for bug #2046263

Date Who What changed Old value New value Message
2023-12-12 15:35:29 Christian Ehrhardt  bug added bug
2023-12-12 15:35:37 Christian Ehrhardt  bug added subscriber Ubuntu Server
2023-12-12 15:35:41 Christian Ehrhardt  bug task added nut (Ubuntu)
2023-12-12 15:35:47 Christian Ehrhardt  tags noble noble server-next
2024-01-02 10:19:09 Christian Ehrhardt  tags noble server-next noble server-todo
2024-01-02 10:59:24 Christian Ehrhardt  description Stub to be handled one or the other way This is a new dependency from nut due do adding apc_modbus to nut, seen in component mismatches. It seems to be most commonly found (top hits) in USV devices which is also how we encounter it (nut manages those). But TBH there are much more devices speaking this protocol, usually (matching the protocol design) from the low level space. There are even HW gateways converting that to network. It seems this is a general nice lib for Ubuntu users in low level spaces. Yet OTOH the CVE history looks intense [4] Maybe we'd want to talk to security in advance? --- Oddly - using this was always in an extra package that is in universe. src:nut \ \- bin:nut-server suggests nut-modbus The reason for this is that there are many protocols across HW generations and manufacturers. And hard depending on all would be quite a punch. So why is this a component mismatch now to begin with? Turns out shlibs is now picking this up from bin:nut-server. $ for p in $(file $(dpkg -L nut-server | xargs) | awk '/executable, x86/ {gsub(":",""); print $1}'); do lddtree $p; done | grep mod 2.8.0-7: - nothing 2.8.1-1build1: /lib/nut/apc_modbus (interpreter => /lib64/ld-linux-x86-64.so.2) libmodbus.so.5 => /lib/x86_64-linux-gnu/libmodbus.so.5 That matches the debian changelog which said 14 * New upstream release 15 - Install new apc_modbus and sms_ser drivers But why would that not be in nut-modbus? AFAICS this has ended up in the wrong package. nut-server has a few very common drivers. And others - mostly rare or those pulling in extra dependencies are in nut-$name packages. IMHO /lib/nut/apc_modbus Should go to bin_nut-modbus just like those already there. /lib/nut/adelsystem_cbi /lib/nut/generic_modbus /lib/nut/huawei-ups2000 /lib/nut/phoenixcontact_modbus /lib/nut/socomec_jbus TODO: 1. discuss 2. move /lib/nut/apc_modbus to bin:but-modbus 3. suggest the same to Debian to avoid modbus being always installed as dependency [1]: https://www.apc.com/de/de/faqs/FA168406/ [2]: https://download.schneider-electric.com/files?p_Doc_Ref=SPD_MPAO-98KJ7F_EN&p_enDocType=Application+Notes&p_File_Name=MPAO-98KJ7F_R1_EN.pdf [3]: https://www.modbus.org/devices.php [4]: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=modbus
2024-01-02 10:59:56 Christian Ehrhardt  tags noble server-todo noble server-todo server-triage-discuss
2024-01-04 10:00:39 Christian Ehrhardt  bug added subscriber MIR approval team
2024-01-04 10:01:19 Christian Ehrhardt  nut (Ubuntu): status New Incomplete
2024-01-04 11:58:04 Christian Ehrhardt  bug watch added https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059985
2024-01-04 11:58:28 Christian Ehrhardt  bug task added nut (Debian)
2024-01-04 12:22:11 Christian Ehrhardt  tags noble server-todo server-triage-discuss noble server-todo
2024-01-04 12:34:00 Bug Watch Updater nut (Debian): status Unknown New
2024-01-10 04:23:32 Bug Watch Updater nut (Debian): status New Fix Released
2024-01-10 15:22:07 Miriam España Acebal nut (Ubuntu): assignee Miriam España Acebal (mirespace)
2024-01-10 15:22:19 Miriam España Acebal libmodbus (Ubuntu): assignee Miriam España Acebal (mirespace)
2024-01-10 15:24:21 Miriam España Acebal libmodbus (Ubuntu): assignee Miriam España Acebal (mirespace)
2024-01-10 15:24:23 Miriam España Acebal nut (Ubuntu): assignee Miriam España Acebal (mirespace)
2024-01-10 16:20:40 Bryce Harrington libmodbus (Ubuntu): status Incomplete Fix Committed
2024-01-10 16:22:13 Christian Ehrhardt  libmodbus (Ubuntu): status Fix Committed Invalid
2024-01-10 16:22:16 Christian Ehrhardt  nut (Ubuntu): status Incomplete Fix Committed
2024-01-12 11:24:53 Christian Ehrhardt  bug watch added https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1060655
2024-01-24 04:54:44 Launchpad Janitor nut (Ubuntu): status Fix Committed Fix Released