Skip to content

Conversation

@jakub-nowakowski-percona
Copy link
Contributor

https://perconadev.atlassian.net/browse/PXB-3624

Problem

Wrong uninitialization order resulted in libcurl connections using libev event loops that have already been destroyed.

We discovered that libcurl versions affected by CVE-2025-0665 cause a crash in xbcloud.

Fix

Uninitialization order of libcurl multi handles and libev event loops has been fixed.

Support for affected versions of libcurl has been dropped, and a warning is now displayed when xbcloud is run with an unsupported version of libcurl.

@jakub-nowakowski-percona jakub-nowakowski-percona changed the title PXB-3624: Fix HTTP connection uninitialization order [8.0] PXB-3624: Fix HTTP connection uninitialization order Dec 9, 2025
https://perconadev.atlassian.net/browse/PXB-3624

Problem
=======

Wrong uninitialization order resulted in libcurl connections using
libev event loops that have already been destroyed.

We discovered that libcurl versions affected by CVE-2025-0665 cause
a crash in xbcloud.

Fix
===

Uninitialization order of libcurl multi handles and libev event loops
has been fixed.

Support for affected versions of libcurl has been dropped, and a warning
is now displayed when xbcloud is run with an unsupported version of
libcurl.
@satya-bodapati
Copy link
Contributor

@jakub-nowakowski-percona PR looks good. Can you provide jenkins link?

@jakub-nowakowski-percona
Copy link
Contributor Author

@jakub-nowakowski-percona jakub-nowakowski-percona merged commit 936b55c into percona:8.0 Dec 12, 2025
5 checks passed
@jakub-nowakowski-percona jakub-nowakowski-percona deleted the PXB-3624-8.0 branch December 12, 2025 13:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants