[php-maint] Bug#780764: php5-curl: Cookie header not send on request

[Carlos C Soto]

Package: php5-curl
Version: 5.4.38-0+deb7u1
Severity: important

Dear PHP Maintainers,

When setting a curl CURLOPT_COOKIEFILE and CURLOPT_COOKIEJAR the Cookie header is not set after receive a Set-Cookie from the server.

This error was not present in wheezy 5.4.36-0+deb7u3 and is not present on jessie 5.6.6+dfsg-2.
This error is present on 5.4.36-0+deb7u3 after a wheezy-security update.
Downgrading version 5.4.38-0+deb7u1 to 5.4.36-0+deb7u3 solves the problem for me.

Example (example.com is not the real host):
  > POST /BuzonDigital/Acceso/SignUp HTTP/1.1
  User-Agent: Mozilla/5.0 (X11; Linux x86_64; en-us) Gecko/20100101 Curl/20140110
  Host: www.example.com
  Accept: */*
  Content-Length: 43
  Content-Type: application/x-www-form-urlencoded

  < HTTP/1.1 302 Found
  < Cache-Control: private
  < Content-Type: text/html; charset=utf-8
  < Location: /BuzonDigital/Home/Bienvenido
  < Server: Microsoft-IIS/7.5
  < X-AspNetMvc-Version: 3.0
  < X-AspNet-Version: 4.0.30319
  < Set-Cookie: .ASPXAUTH=8F68B591851568FFB64A3E051DDAD33619338A85677CE83CDAA2355B570E45BE2FF4BDCF4F17121E9818EE348113DA325F9F5B4FC9996A8BCA53D36CD44B0524F84832A8B5109E4263A57D48028050B8F723E7A79BE9C0BCC2684ED28A21FBB757E8F6AD7150589299E081787F; path=/; HttpOnly
  < X-Powered-By: ASP.NET
  < Date: Wed, 18 Mar 2015 22:17:36 GMT
  < Content-Length: 146
  < 

  > GET /BuzonDigital/Home/Bienvenido HTTP/1.1
  User-Agent: Mozilla/5.0 (X11; Linux x86_64; en-us) Gecko/20100101 Curl/20140110
  Host: www.example.com
  Accept: */*
  Referer: https://www.example.com/BuzonDigital/Acceso/SignUp

  < HTTP/1.1 302 Found
  < ...

The Cookie header was not sent on GET request


-- System Information:
Debian Release: 7.8
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'stable-updates')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=es_MX.UTF-8, LC_CTYPE=es_MX.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages php5-curl depends on:
ii  dpkg                                   1.16.15
ii  libapache2-mod-php5 [phpapi-20100525]  5.4.38-0+deb7u1
ii  libc6                                  2.13-38+deb7u8
ii  libcurl3                               7.26.0-1+wheezy12
ii  php5-cli [phpapi-20100525]             5.4.38-0+deb7u1
ii  php5-common                            5.4.38-0+deb7u1
ii  ucf                                    3.0025+nmu3

php5-curl recommends no packages.

php5-curl suggests no packages.

-- no debconf information