libcurl update causes "OpenSSL SSL_read: Success" error for SSL connections

CODE grunt

Member
Aug 15, 2017
6
1
3
Canada
cPanel Access Level
Root Administrator
WHM updated last night apparently with a problematic version of libcurl. The symptom is that PHP initiated libcurl SSL connections fail with the following error:

OpenSSL SSL_read: Success

No data is returned from the call. This completely breaks outbound API and webservice calls for some services.

This appears to due to this bug:


Reverting libcurl works for CLI usage but does not affect regular web usage because the version installed with EasyApache (ea-php56-php-curl.x86_64 for example) is the affected version 7.67.0.

Any suggestions on how to safely revert the version used by the PHP module appreciated.
 

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,304
363
Houston
Hello,

Yes this is something we're aware of and the only solution right now is to downgrade curl with:

Code:
yum -y downgrade ea-libcurl-7.66.0-1.1.2.cpanel
then add ea-libcurl to exclude in /etc/yum.conf until the updated package is pushed out. This should be done early next week.