[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
** Changed in: unixodbc (Ubuntu Focal) Importance: Undecided => Wishlist ** Changed in: unixodbc (Ubuntu Jammy) Importance: Undecided => Wishlist ** Changed in: unixodbc (Ubuntu Noble) Importance: Undecided => Wishlist ** Changed in: unixodbc (Ubuntu Oracular) Importance: Undecided => Wishlist -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
Ubuntu 24.10 (Oracular Oriole) has reached end of life, so this bug will not be fixed for that specific release. ** Changed in: unixodbc (Ubuntu Oracular) Status: Triaged => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
I am dropping the server-todo tag on this one: - this is fixed from plucky onward now. - There is a clear workaround for the bug, which is installing the unixodbc-dev package. - Finally, the proper fix involves changing a dependency chain direction, which could lead to interesting regressions on user expectations when using this package. ** Tags removed: server-todo ** Changed in: unixodbc (Ubuntu Noble) Assignee: Athos Ribeiro (athos-ribeiro) => (unassigned) ** Changed in: unixodbc (Ubuntu Oracular) Assignee: Athos Ribeiro (athos-ribeiro) => (unassigned) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
** Changed in: unixodbc (Ubuntu Noble) Assignee: (unassigned) => Athos Ribeiro (athos-ribeiro) ** Changed in: unixodbc (Ubuntu Oracular) Assignee: (unassigned) => Athos Ribeiro (athos-ribeiro) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
This bug was fixed in the package unixodbc - 2.3.12-2ubuntu1 --- unixodbc (2.3.12-2ubuntu1) plucky; urgency=medium * Merge with Debian unstable (LP: #2085303, #2085815). Remaining changes: - SECURITY UPDATE: Out-of-bounds write + debian/patches/CVE-2024-1013.patch: PostgreSQL driver: Fix incompatible pointer-to-integer types + CVE-2024-1013 -- Athos Ribeiro Wed, 08 Jan 2025 10:17:53 -0300 ** Changed in: unixodbc (Ubuntu) Status: In Progress => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-1013 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
** Changed in: unixodbc (Debian) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
** Changed in: unixodbc (Ubuntu) Status: Triaged => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
** Tags removed: server-triage-discuss ** Tags added: server-todo -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
This was fixed in Debian in 2.3.12-2. Once it is merged (or sync'd) into Ubuntu, this should be closed for the devel tracker. This is the changelog with the fixes: unixodbc (2.3.12-2) unstable; urgency=medium . * debian/control: + libodbc2 now Recommends libodbccr2. + libodbccr2 no longer Depends on libodbc2. + libodbccr2 Enhances libodbc2. + Raise Standards-Version to 4.7.0 from 4.6.2 (no changes needed). * debian/copyright: Update for 2024. * debian/patches: Add 0001-configure-ac-cursor-lib.patch to enable a versioned cursor library (Closes: #1089695, LP: #2085815). * debian/rules: Pass --enable-cursor-ver to configure. Hence, the fix suggestion (1) from my comment above was fixed. For completeness, we should make sure no reverse dependencies on the -dev package will be affected (i.e., no packages were pulling the -dev package as a runtime dependency). If any packages are affected, they should be fixed (by depending on the versioned lib). The fix for (2) was applied by reverting the dependency direction (as per one of our suggestions). - When using the cursor, libodbc2 will now open the lib provided by libodbccr2 instead of the one in - Installing libodbc2 will now also pull in libodbccr2 (unless users do not install recommended packages) Finally, we should understand if such changes would be suitable for SRUs. Note that a straightforward workaround is available (installing unixodbc-dev). ** Tags added: server-triage-discuss -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
** Changed in: unixodbc (Debian) Status: Unknown => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
** Tags removed: server-todo -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
** Bug watch added: Debian Bug tracker #1089695 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1089695 ** Also affects: unixodbc (Debian) via https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1089695 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
** Tags removed: server-triage-discuss ** Changed in: unixodbc (Ubuntu) Assignee: (unassigned) => Athos Ribeiro (athos-ribeiro) ** Tags added: server-todo -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
** Also affects: unixodbc (Ubuntu Noble) Importance: Undecided Status: New ** Also affects: unixodbc (Ubuntu Oracular) Importance: Undecided Status: New ** Also affects: unixodbc (Ubuntu Jammy) Importance: Undecided Status: New ** Also affects: unixodbc (Ubuntu Focal) Importance: Undecided Status: New ** Changed in: unixodbc (Ubuntu) Status: New => Triaged ** Changed in: unixodbc (Ubuntu Focal) Status: New => Triaged ** Changed in: unixodbc (Ubuntu Jammy) Status: New => Triaged ** Changed in: unixodbc (Ubuntu Noble) Status: New => Triaged ** Changed in: unixodbc (Ubuntu Oracular) Status: New => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
the missing libodbccr.so issue happens when this code runs: https://sources.debian.org/src/unixodbc/2.3.12-1/DriverManager/SQLConnect.c/?hl=2451#L2451 Here we see that, instead of linking libodbccr2, libodbc2 opens it in runtime with dlopen. Hence, at a first glance, libodbc2 should at least suggest libodbccr2 A second issue, as shown by the original report, is that the missing package is unixodbc-dev instead of libodbccr2. This happens because DEFINE_CURSOR_LIB_VER is not defined, as shown in the following snippet: https://sources.debian.org/src/unixodbc/2.3.12-1/DriverManager/SQLConnect.c/?hl=2451#L606. This makes libodbc2 try loading the unbersioned shared library libodbccr.so instead of the versioned one (libodbccr.so.2). This issue affects all supported ubuntu series. Again, at a first look, one may identify 2 fixes being needed here: 1: the unixodbc package should be built with DEFINE_CURSOR_LIB_VER set so the runtime dlopen call looks for the versioned shared object so we do not need to depend on a -dev package in production environments; and 2: libodbc2 should depend, recommend, or at least suggest libodbccr2 The problem is that fix (2) would create a circular dependency since libodbccr2 already depends on libodbc2. Interestingly, none of the binaries are linked against the other. In this case, a solution would indeed be to make php-odbc depend on both libs (or at least suggest/recommend the libodbccr2) after fix (1) is applied. I also wonder if libodbccr2 should really depend on libodbc2 since they are not linked (maybe the dependency should go the other way around, which would be an alternative for fix (2)). This needs further investigation, i.e., we need an answer to "why does libodbccr2 depend on libodbc2?" Finally, regardless of the solution found, it would be nice to discuss this issue with Debian (both with php-odbc and unixodbc maintainers) before commiting to a fix here to avoid carrying a delta indefinitely on one or both these packages. Moreover, I am inclined to say that this change in behavior may not be fit for an SRU depending on how we define what a fix is for this case since this could break working database connections for users (this could work though IF we find out that libodbc2 should depend on libodbccr2). Next steps here would be to file a bug in debian which would reach both php-odbc and unixodbc maintainers and finding the answer to "why does libodbccr2 depend on libodbc2?" A reproducer using lxc is attached. ** Attachment added: "Bug reproducer" https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+attachment/5834802/+files/reproducer.sh -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2085815] Re: php8.1-odbc missing dependency to unixodbc-dev
** Tags added: server-triage-discuss -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2085815 Title: php8.1-odbc missing dependency to unixodbc-dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unixodbc/+bug/2085815/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
