Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 937139

Summary: =net-misc/curl-8.9.1: SIGPIPE leak (e.g. crashing net-p2p/transmission)
Product: Gentoo Linux Reporter: Michał Górny <mgorny>
Component: Current packagesAssignee: Matt Jolly <kangie>
Status: RESOLVED FIXED    
Severity: normal CC: base-system, candrews, contyk, kangie, zeekec
Priority: Normal Keywords: PATCH
Version: unspecified   
Hardware: All   
OS: Linux   
See Also: https://github.com/transmission/transmission/issues/7035
https://github.com/curl/curl/issues/14344
https://github.com/curl/curl/pull/14390
Whiteboard:
Package list:
Runtime testing required: ---

Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2024-08-02 14:53:47 UTC
See linked report.  Apparently there's a regression that causes libcurl to leak SIGPIPE into programs using it, effectively causing them (e.g. transmission) to crash.
Comment 1 Matt Jolly gentoo-dev 2024-08-03 06:44:08 UTC
Ack. I'll keep an eye on the upstream discussion.
Comment 3 Larry the Git Cow gentoo-dev 2024-08-05 07:23:13 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=508591b213da065801a691a68860eb3d21d898d4

commit 508591b213da065801a691a68860eb3d21d898d4
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2024-08-05 07:07:51 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2024-08-05 07:23:03 +0000

    net-misc/curl: add 8.9.1-r1
    
    This revbump includes a patch for a regression where
    libcurl could leak SIGPIPE into programs using it,
    for example Transmission.
    
    See: https://github.com/curl/curl/issues/14344
    Closes: https://bugs.gentoo.org/937139
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 net-misc/curl/curl-8.9.1-r1.ebuild           | 384 +++++++++++++++++++++++++++
 net-misc/curl/curl-9999.ebuild               |   1 +
 net-misc/curl/files/curl-8.9.1-sigpipe.patch |  26 ++
 3 files changed, 411 insertions(+)