#1033887 libcurl 7.74.0-1.3+deb11u7 regression

Package:
amanda-common
Source:
amanda-common
Description:
Advanced Maryland Automatic Network Disk Archiver (Libs)
Submitter:
Blaise Vogel
Date:
2025-02-25 22:21:02 UTC
Severity:
normal
#1033887#5
Date:
2023-04-03 13:38:57 UTC
From:
To:
Since version 7.74.0-1.3+deb11u7 of libcurl, we can no longer use S3 or Openstack changer.
Following error occurs, by example with amlabel:

Error writing label: While writing amanda header: The request signature we calculated does not match the signature you provided. Check your key and signing method. (SignatureDoesNotMatch) (HTTP 403).

Returning to the previous version solve the problem.

apt install libcurl4=7.74.0-1.3+deb11u3

Debian Bullseye - Kernel 5.10.0-21-amd64
#1033887#10
Date:
2025-02-25 22:10:17 UTC
From:
To:
The bug is still there in bookworm as of today (amanda
3.5.1-11+deb12u2). I tried to use backblaze as the s3 backend and the
error message was

Mo Feb 24 19:28:40.857946745 2025: pid 943177: thd-0x55c777b67a00:
amlabel: PUT
https://s3.eu-central-003.backblazeb2.com/xxxxxxx8bbef9d30000000002-backups/DailySet2%2Fslot-01special-tapestart
failed with 403/SignatureDoesNotMatch

Reading from s3 storage works, writing fails.

There is a bug report in upstream:
https://github.com/zmanda/amanda/issues/213

Upstream has a pull request: https://github.com/zmanda/amanda/pull/244

I applied the pull request's commit patch to amanda 3.5.1-11+deb12u2 .
It solves the problem for me. Find the patch in the attachment.

Regards,
Moritz