Public bug reported:

We have been experiencing segfaults in libcurl 8.5.0 shipped with 24.04,
when using HTTPS and SMTPS connections in the same "multi handle".

A detailed bug report (with a small repro case in C) was reported
upstream:

  https://github.com/curl/curl/issues/19272

but it was closed as the bug appears to have been fixed as a side-effect
of a later change

https://github.com/curl/curl/commit/e3905de8196d67b89df1602feb84c1f993211b20

which was first released in libcurl 8.7.0.

What is the position of the Ubuntu maintainers on this? Would it be
envisageable to upgrade the version of libcurl included in 24.04 to a
more recent version that is not affected by this crashing bug?

Thanks!
Nicolas

PS:

* apt-cache policy libcurl4-openssl-dev

libcurl4-openssl-dev:
  Installed: 8.5.0-2ubuntu10.6
  Candidate: 8.5.0-2ubuntu10.6
  Version table:
 *** 8.5.0-2ubuntu10.6 500
        500 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu noble-security/main amd64 Packages
        100 /var/lib/dpkg/status
     8.5.0-2ubuntu10 500
        500 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages

* lsb_release -rd

No LSB modules are available.
Description:    Ubuntu 24.04.3 LTS
Release:        24.04

** Affects: curl (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2130267

Title:
  segfault when using smtp and http connections in the same multi handle

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/curl/+bug/2130267/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to