Bug 33893 - curl update makes git fail if there's a .netrc - "fatal: unable to access 'https://foobar.example.com/repository': .netrc parser error"
Summary: curl update makes git fail if there's a .netrc - "fatal: unable to access 'ht...
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL: https://github.com/curl/curl/issues/1...
Whiteboard: MGA9-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks: 33992
  Show dependency treegraph
 
Reported: 2025-01-07 13:06 CET by Christian Lohmaier
Modified: 2025-03-28 20:18 CET (History)
4 users (show)

See Also:
Source RPM: curl-7.88.1-4.5.mga9.src.rpm
CVE:
Status comment:


Attachments

Description Christian Lohmaier 2025-01-07 13:06:26 CET
Description of problem:
curl update that addresses .netrc related issue breaks git.
Curl itself can still use the netrc as expected, doesn't fail, but git does.


Version-Release number of selected component (if applicable):
curl 7.88.1-4.5 and git 2.41.1-1 respectively

How reproducible:
100%

Steps to Reproduce:
1. create a ~/.netrc file:
machine foobar.examle.com
login sampleuser
password 1234xdeadbeefwhatever

2. try to checkout or pull from a repo using https:// scheme
$ git clone https://github.com/curl/curl.git
Cloning into 'curl'...
fatal: unable to access 'https://github.com/curl/curl.git/': .netrc parser error

3. try to checkout or pull from a repo using git:// scheme → still works
Comment 1 Dan Fandrich 2025-01-08 00:56:28 CET
Thanks for the reproduction recipe—I'm able to reproduce this. The strange thing is that all the curl regression tests passed with this release, including the netrc ones. Also, running curl -n works without any issue as well, both with the host in the .netrc and with a different host. The symptoms make it look like an issue in git instead, except that the problem goes away after downgrading to lib64curl4-7.88.1-4.4.mga9.x86_64.rpm

Status: NEW => ASSIGNED
Assignee: bugsquad => dan
CC: (none) => dan

Comment 2 Dan Fandrich 2025-01-08 01:22:15 CET
Looks like this is https://github.com/curl/curl/issues/15496
Comment 3 Christian Lohmaier 2025-01-08 15:20:45 CET
yes, sorry, I did put that ticket in the URL field when filing the bug, but failed to point it out in the description, sorry for that.
Comment 4 Dan Fandrich 2025-01-08 17:11:35 CET
I didn't spot that!

I now have a patched local build working. I'll push it to updates_testing tomorrow.
Comment 5 Dan Fandrich 2025-01-09 22:58:34 CET
curl-7.88.1-4.6.mga9 is now available in updates_testing.

RPMS for x86_64:
curl-7.88.1-4.6.mga9.x86_64.rpm
curl-examples-7.88.1-4.6.mga9.noarch.rpm
lib64curl4-7.88.1-4.6.mga9.x86_64.rpm
lib64curl-devel-7.88.1-4.6.mga9.x86_64.rpm

Whiteboard: (none) => has_procedure
Assignee: dan => qa-bugs

Comment 6 Christian Lohmaier 2025-01-10 14:53:47 CET
can confirm that the version from testing solves the problem for me. Thx!
katnatek 2025-01-10 19:42:06 CET

Keywords: (none) => advisory

Comment 7 katnatek 2025-01-11 17:24:50 CET
RH x86_64

installing lib64curl-devel-7.88.1-4.6.mga9.x86_64.rpm lib64curl4-7.88.1-4.6.mga9.x86_64.rpm curl-7.88.1-4.6.mga9.x86_64.rpm from //home/katnatek/qa-testing/x86_64
Preparing...                     ##################################################################################################
      1/3: lib64curl4            ##################################################################################################
      2/3: lib64curl-devel       ##################################################################################################
      3/3: curl                  ##################################################################################################
      1/3: removing lib64curl-devel-1:7.88.1-4.5.mga9.x86_64
                                 ##################################################################################################
      2/3: removing curl-1:7.88.1-4.5.mga9.x86_64
                                 ##################################################################################################
      3/3: removing lib64curl4-1:7.88.1-4.5.mga9.x86_64
                                 #################################################################################################

curl is set as dowloder for urpmi

LC_ALL=C urpmi.update -a --debug -ff

show that curl works
Comment 8 Herman Viaene 2025-01-13 15:27:18 CET
MGA9-64 Plasma Wayland on Compaq H000SB
No installation issues.
Ref bug 33844 Comments 4 and 54 fro testing.
$ curl -I https://www.mageia.org/fr/
HTTP/1.1 200 OK
Date: Mon, 13 Jan 2025 14:20:55 GMT
Server: Apache
Vary: User-Agent
Content-Type: text/html; charset=UTF-8

$ curl -O https://geex.freeboxos.fr/distrib/9/x86_64/install/images/Mageia-9-netinstall-x86_64.iso
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 70.0M  100 70.0M    0     0  10.0M      0  0:00:06  0:00:06 --:--:-- 10.8M
Same results, so good to go.

Whiteboard: has_procedure => MGA9-64-OK
CC: (none) => herman.viaene

Comment 9 Thomas Andrews 2025-01-14 18:23:21 CET
Validating.

Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

Comment 10 Mageia Robot 2025-01-16 08:15:26 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGAA-2025-0004.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED

Dan Fandrich 2025-03-28 20:18:55 CET

Blocks: (none) => 33992


Note You need to log in before you can comment on or make changes to this bug.