Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#79191 - [curl] Please backport credentials regression fix

Attached to Project: Arch Linux
Opened by Emil (xexaxo) - Monday, 24 July 2023, 12:00 GMT
Last edited by Leonidas Spyropoulos (inglor) - Monday, 24 July 2023, 21:27 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Christian Hesse (eworm)
Leonidas Spyropoulos (inglor)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

Curl 8.2.0 has introduced a regression where basic AUTH is not handled properly when redirects are present - see the upstream issue [1]. In practical sense, this has broken gitlab [2] [3] and likely others. Can we backport the upstream commit [4] in the Arch package, until there is an official (fixed) release?

Thanks in advance

Additional info:
* package version(s)
8.2.0-2

* link to upstream bug report, if any
[1] https://github.com/curl/curl/issues/11486
[2] https://gitlab.com/gitlab-com/gl-infra/production/-/issues/16066
[3] https://forum.gitlab.com/t/ci-job-token-access-denied-despite-having-token-access-configured/87058/10
[4] https://github.com/curl/curl/pull/11492

Steps to reproduce:
- The curl issue [1] has a nice reproducer
This task depends upon

Closed by  Leonidas Spyropoulos (inglor)
Monday, 24 July 2023, 21:27 GMT
Reason for closing:  Fixed
Additional comments about closing:  8.2.0-3 in core-testing

Loading...