Package: libcurl4
Version: 7.74.0-1.3+b1
Severity: important
X-Debbugs-Cc: dmitr...@gmail.com

curl ignores User-Agent when sending second and further requests made via the 
same HTTP/2 connection.

This bug was introduced in the 7.71 and fixed in 7.75 upstream.

Here is commit of the fix: 
https://github.com/curl/curl/commit/0936ecd0ee5e3e28c098fefc9e2c0e6847cb7a82

Here is discussion of the issue: https://github.com/curl/curl/issues/6312

Please consider applying this patch into stable because many REST APIs require 
User-Agent to be specified. Without this fix libcurl4 in bullseye is hardly 
usable for heavy REST apps.

-- System Information:
Debian Release: 11.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 
'oldstable-proposed-updates-debug'), (500, 'oldstable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-8-amd64 (SMP w/32 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), LANGUAGE=ru
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libcurl4 depends on:
ii  libbrotli1        1.0.9-2+b2
ii  libc6             2.31-13
ii  libgssapi-krb5-2  1.18.3-6
ii  libidn2-0         2.3.0-5
ii  libldap-2.4-2     2.4.57+dfsg-3
ii  libnghttp2-14     1.43.0-1
ii  libpsl5           0.21.0-1.2
ii  librtmp1          2.4+20151223.gitfa8646d.1-2+b2
ii  libssh2-1         1.9.0-2
ii  libssl1.1         1.1.1k-1
ii  zlib1g            1:1.2.11.dfsg-2

Versions of packages libcurl4 recommends:
ii  ca-certificates  20210119

libcurl4 suggests no packages.

-- no debconf information

Reply via email to