Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 604104 - net-misc/curl-7.52.1: Unable to sustain concurrent https connections when built with openssl
Summary: net-misc/curl-7.52.1: Unable to sustain concurrent https connections when bui...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Anthony Basile
URL: https://github.com/gentoo/gentoo/pull...
Whiteboard:
Keywords:
Depends on:
Blocks: CVE-2016-9594
  Show dependency tree
 
Reported: 2016-12-30 01:19 UTC by Anthony Ryan
Modified: 2016-12-31 11:23 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Anthony Ryan 2016-12-30 01:19:03 UTC
net-misc/curl-7.52.1 is unable to sustain multiple concurrent https connections with the openssl backend (gnutls users are not affected).

This issue was introduced in:
https://github.com/curl/curl/commit/cb4e2be7c6d42ca0780f8e0a747cecf9ba45f151

And resolved upstream in:
https://github.com/curl/curl/commit/a7b38c9dc98481e4a5fc37e51a8690337c674dfb

Seeing as this version of curl is being stabilized as part of bug 603574 / CVE-2016-9594, I think we need to get this backported. The inability to have multiple concurrent HTTPS connections is a serious issue for stabilization.
Comment 1 Anthony Ryan 2016-12-30 01:20:14 UTC
Upstream issue: https://github.com/curl/curl/issues/1174
Comment 2 Anthony Basile gentoo-dev 2016-12-30 01:47:35 UTC
thanks for catching this.  i backported and rev bumped.  the fix is in with curl-7.52.1-r1.ebuild.
Comment 3 Kyle Sanderson 2016-12-31 05:37:47 UTC
Thanks guys, I was going insane (like, switched from rtorrent to deluge insane)...

Confirmed fixed in curl-7.52.1-r1.ebuild, broken in the still unmasked curl-7.52.1.ebuild
Comment 4 Anthony Basile gentoo-dev 2016-12-31 11:23:07 UTC
(In reply to Kyle Sanderson from comment #3)
> Thanks guys, I was going insane (like, switched from rtorrent to deluge
> insane)...
> 
> Confirmed fixed in curl-7.52.1-r1.ebuild, broken in the still unmasked
> curl-7.52.1.ebuild

as soon as stabilization occurs on 7.52.1-r1 we will yank 7.52.1.  we can't mask it yet.