[Bug 1281646] Re: php5-curl: Curl truncates basic auth password after semicolon

[Michael Kliewe]

Hi Robie,

after more investigation it was a bug in curl itself, so it affects all
applications that use curl and its parameter CURLOPT_USERPWD. I don't
know if other scripting languages use curl and that feature, but also
shell scripts using curl are affected, so potentially many users.

It has been fixed in curl 7.34.0:
- login options: remove the ;[options] support from CURLOPT_USERPWD

See: http://curl.haxx.se/changes.html
http://sourceforge.net/p/curl/bugs/1311/

I don't know when the new curl version will be available in 13.10, or if
this specific bugfix will be packported.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in Ubuntu.
https://bugs.launchpad.net/bugs/1281646

Title:
  php5-curl: Curl truncates basic auth password after semicolon

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1281646/+subscriptions