[Bug 1281646] Re: php5-curl: Curl truncates basic auth password after semicolon
** Changed in: php5 (Debian) Status: New = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1281646 Title: php5-curl: Curl truncates basic auth password after semicolon To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1281646/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1281646] Re: php5-curl: Curl truncates basic auth password after semicolon
Thank you for taking the time to report this bug and helping to make Ubuntu better. Maybe you can tell me where to report this bug so it gets fixed in current stable Ubuntu 13.10. I'm sorry that this bug hasn't yet been fixed for you. Reporting a bug doesn't by itself mean that the bug will necessarily be fixed, since this requires developer resource, which is limited and must be prioritised. This is generally done on the perception of how many users are affected, which here appears to be two users in six months. If you'd like to get the bug fixed to your schedule, then please provide a patch, or find somebody who can - ideally to Debian, so that both distributions can benefit. ** Changed in: php5 (Ubuntu) Importance: Undecided = Medium -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1281646 Title: php5-curl: Curl truncates basic auth password after semicolon To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1281646/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1281646] Re: php5-curl: Curl truncates basic auth password after semicolon
** Bug watch added: Debian Bug tracker #717267 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717267 ** Also affects: php5 (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717267 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1281646 Title: php5-curl: Curl truncates basic auth password after semicolon To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1281646/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1281646] Re: php5-curl: Curl truncates basic auth password after semicolon
Hi Robie, after more investigation it was a bug in curl itself, so it affects all applications that use curl and its parameter CURLOPT_USERPWD. I don't know if other scripting languages use curl and that feature, but also shell scripts using curl are affected, so potentially many users. It has been fixed in curl 7.34.0: - login options: remove the ;[options] support from CURLOPT_USERPWD See: http://curl.haxx.se/changes.html http://sourceforge.net/p/curl/bugs/1311/ I don't know when the new curl version will be available in 13.10, or if this specific bugfix will be packported. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1281646 Title: php5-curl: Curl truncates basic auth password after semicolon To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1281646/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1281646] Re: php5-curl: Curl truncates basic auth password after semicolon
Michael, Thanks - that's very useful. If I understand this correctly, the ';' had special meaning, so backporting this might affect other users who are relying on this feature. Thus, on balance, I don't think it makes sense to backport this patch to 13.10; we'd just be swapping one set of broken users for another. The current development release (Trusty) is on 7.35.0, so this bug is presumed fixed now. Since the bug status reflects the state of the current development release, I'll change it accordingly. ** Changed in: php5 (Ubuntu) Status: New = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1281646 Title: php5-curl: Curl truncates basic auth password after semicolon To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1281646/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1281646] Re: php5-curl: Curl truncates basic auth password after semicolon
** Changed in: php5 (Debian) Status: Unknown = New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/1281646 Title: php5-curl: Curl truncates basic auth password after semicolon To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1281646/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
