touch-packages team mailing list archive

[Parker Moore <parkrmoore@xxxxxxxxx>]

I have a use-case that requires this update. v7.22 doesn't handle
protocol-relative `Location` headers.

When I curl an endpoint (e.g. https://example.org/some-redirect-url)
that gives:

    Location: //example.org/some-url/to/a/page/somewhere.html

The current libcurl version on precise -- v7.22 -- barfs on this and
redirects the client to an unacceptable:

    https://example.org//example.org/some-url/to/a/page/somewhere.html

v7.30 fixes this and correctly redirects to:

    https://example.org//example.org/some-url/to/a/page/somewhere.html

What is needed to push out this change?

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to curl in Ubuntu.
https://bugs.launchpad.net/bugs/1219306

Title:
  Update libcurl package in 12.04LTS to version 7.3x

Status in “curl” package in Ubuntu:
  Confirmed

Bug description:
  The latest versions of curl solves a problem whereas there will be
  loss of information, and inconsistent interpretation of data, due to
  headers inserted by intermediate proxy/ies.

  See the details in: https://github.com/bagder/curl/pull/60 and
  http://sourceforge.net/p/curl/bugs/1204/

  The package for 12.04 uses de 7.22 version as a base, and the current
  (as of today) version is 7.32.0
  (http://curl.haxx.se/changes.html#7_32_0).

  There are other security fixes in the 7.3x version family.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/curl/+bug/1219306/+subscriptions