#1012263 curl: Multi-line header support is broken

Package:
curl
Source:
curl
Description:
command line tool for transferring data with URL syntax
Submitter:
Olivier Gayot
Date:
2022-06-14 17:36:05 UTC
Severity:
critical
Tags:
#1012263#5
Date:
2022-06-02 13:12:50 UTC
From:
To:
Dear Maintainer,

In version 7.83.1, the support for multi-line headers is broken.
This causes autopkgtest regressions in python-tornado:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012224

In Ubuntu, the attached patch was applied to achieve the following:

  * Apply upstream patch to fix multi-line header support (LP: #1976619)

Thanks for considering the patch.

#1012263#18
Date:
2022-06-14 17:33:58 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
curl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1012263@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Samuel Henrique <samueloph@debian.org> (supplier of updated curl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 14 Jun 2022 18:05:23 +0100
Source: curl
Architecture: source
Version: 7.83.1-2
Distribution: unstable
Urgency: medium
Maintainer: Alessandro Ghedini <ghedo@debian.org>
Changed-By: Samuel Henrique <samueloph@debian.org>
Closes: 1011696 1012263
Changes:
 curl (7.83.1-2) unstable; urgency=medium
 .
   * d/p/fix_multiline_header_regression.patch: New upstream patch to fix
     regression (closes: #1012263, #1011696)
Checksums-Sha1:
 c3c30e245c2bb7fc162dbb5edfd71594beb75b47 2959 curl_7.83.1-2.dsc
 02f5c0888708fac61538d97b6bdef0724dfcdfc7 38500 curl_7.83.1-2.debian.tar.xz
 80d25cb0fedd4d514b397b76a5fc85708db7971b 12860 curl_7.83.1-2_amd64.buildinfo
Checksums-Sha256:
 e95b7ae740c4261db6cee38533f25994a99f087db906a7092ee7dc3a12840110 2959 curl_7.83.1-2.dsc
 c6fc59133a8ba1f03a82a713a1eaa3cc9ff7368b465588a95579b5979b7c8d07 38500 curl_7.83.1-2.debian.tar.xz
 44b2f405733eed583cc5f78ecac4c972fb55d1a49b281504e8aa33a41ba20537 12860 curl_7.83.1-2_amd64.buildinfo
Files:
 91cd2d1a0a71cfd75e2c7710f69f2035 2959 web optional curl_7.83.1-2.dsc
 4e31be4b01ec403d276aa877dcded1be 38500 web optional curl_7.83.1-2.debian.tar.xz
 bbd8b5dbac82b7d3c6016e73be977558 12860 web optional curl_7.83.1-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=znPG
-----END PGP SIGNATURE-----