How to upgrade of 'curl' package on Debian and Ubuntu systems to fix HTTP/2 bugs

[abraunegg]

Due to issues with Debian, Ubuntu, and their derivatives providing outdated or broken versions of curl—without an adequate resolution (except for Debian 12, which allows updating curl via backports) - @Cyber5imon has shared the following script to manually upgrade curl to version 8.11.0 on Debian and Ubuntu-based platforms:

#!/bin/bash

# Upgrade curl to v8.11.0
sudo apt-get install -y nghttp2 libnghttp2-dev libssl-dev libpsl-dev build-essential wget
wget https://curl.se/download/curl-8.11.0.tar.xz
tar -xvf curl-8.11.0.tar.xz
rm curl-8.11.0.tar.xz
cd curl-8.11.0
./configure --prefix=/usr/local --with-ssl --with-nghttp2 --enable-versioned-symbols
make
sudo make install
sudo ldconfig
cd ..
rm -r curl-8.11.0
curl --version

While results may vary depending on your system setup, this approach has proven to be a viable solution for those who require an updated curl version. If you encounter any issues, please seek support from your distribution.

Instructions for Debian 12 and those based on Debian 12 such as Linux Mint Debian Edition 6 (LMDE6)

1. Configure your system to use Debian 12 Backports
2. Upgrade curl and libcurl using the following as an example:

apt-get install -t bookworm-backports -y curl libcurl4

[atomic-5]

Thanks for the script. Fixed the issue on my Mint 22 system.

[rogercreagh]

Thank you. That worked on Ubuntu 24.04.1
Being cautious I copied and ran each line separately in case of problems - but all was good.

[ArtificialTruth]

EDIT: Issue fixed installing by deactivating conda enviroment with

conda deactivate

Then running above script line by line.

---

I'm having issues removing the old version of curl on ubuntu 22.04
Ran above script then tried to remove curl:

$ sudo apt remove curl
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following packages were automatically installed and are no longer required:
  libllvm11 libnsl-dev libphobos2-ldc-shared98 libtirpc-dev
Use 'sudo apt autoremove' to remove them.
The following packages will be REMOVED:
  curl
0 upgraded, 0 newly installed, 1 to remove and 10 not upgraded.
After this operation, 455 kB disk space will be freed.
Do you want to continue? [Y/n] y
(Reading database ... 310138 files and directories currently installed.)
Removing curl (7.81.0-1ubuntu1.19) ...
Processing triggers for man-db (2.10.2-1) ...

$ curl --version
curl 8.5.0 (x86_64-conda-linux-gnu) libcurl/8.5.0 OpenSSL/3.0.13 zlib/1.2.13 libssh2/1.10.0 nghttp2/1.57.0
Release-Date: 2023-12-06
Protocols: dict file ftp ftps gopher gophers http https imap imaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: alt-svc AsynchDNS GSS-API HSTS HTTP2 HTTPS-proxy IPv6 Kerberos Largefile libz NTLM SPNEGO SSL threadsafe TLS-SRP UnixSockets

However onedrive display config still says:

~$ onedrive/onedrive --display-config 
Curl version                                 = libcurl/7.81.0 OpenSSL/3.0.2 zlib/1.3.1 brotli/1.0.9 zstd/1.4.8 libidn2/2.3.2 libpsl/0.21.0 (+libidn2/2.3.2) libssh/0.9.6/openssl/zlib nghttp2/1.43.0 librtmp/2.3 OpenLDAP/2.5.18

It seems building onedrive from source somehow doesn't use the new curl version.
Perhaps i need to rebuild onedrive from source after installing the new curl version?

[abraunegg]

Please raise your Ubuntu questions with Ubuntu support - I cannot assist with questions or problems with Ubuntu regarding curl/libcurl.

Your alternative option is to stop using Ubuntu and use a better quality distribution such as Debian 12 if you wish to stay with that ecosystem or use a totally different distribution such as Arch, Fedora or similar.

[ArtificialTruth]

Okay, I will assume it is not a problem with Onedrive and instead ubuntu somehow not deleting the old curl.

Thanks for the advice regarding debian.

[rogercreagh]

Since your system seems to be reporting curl version is now 8.5.0 it looks like the install didn't work correctly - it should be 8.11.0

Suggest you run the script again one line at a time and see where it is going wrong. Open the script in a text editor and copy each line in turn and paste it into a terminal and press enter. It may be that you have an alternative repository for curl installed and it is fetching the wrong version.

You could try removing curl before running the lines in the script, and/or clearing the Curl version = line in the onedrive config file. Also check at the top of the onedrive --display-config listing that it is fetching the correct version of onedrive - have you updated to 2.5.3 or is it still running an older version - the script only updates curl, not onedrive.

[ArtificialTruth]

Thank you, I resolved the issue, see above edit.

[the-snaveson]

Thankyou @abraunegg . Your onedrive client is an absolute winner and this curl fix script was pitched perfectly for my level of Linux (in)competence.

[CodeKlopfer]

Thanks, works on my Ubuntu 22.04.5 LTS with freshly released curl-8.11.1.tar.xz

[randellhodges]

I have a similar with with Debian 12 (in a proxmox LXC container)

I installed curl from backports
apt install curl/bookworm-backports

I uninstalled and then reinstalled onedrive with apt (do I need to build onedrive from src to get it to see/use curl 8.11.1?)

curl version

root@fileServer:~# curl --version
curl 8.11.1 (x86_64-pc-linux-gnu) libcurl/8.11.1 GnuTLS/3.7.9 zlib/1.2.13 brotli/1.0.9 zstd/1.5.4 libidn2/2.3.3 libpsl/0.21.2 libssh2/1.10.0 nghttp2/1.52.0 ngtcp2/1.9.1 nghttp3/1.6.0 librtmp/2.3 OpenLDAP/2.5.13
Release-Date: 2024-12-11, security patched: 8.11.1-1~bpo12+1
Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns ldap ldaps mqtt pop3 pop3s rtmp rtsp scp sftp smb smbs smtp smtps telnet tftp ws wss
Features: alt-svc AsynchDNS brotli GSS-API HSTS HTTP2 HTTP3 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM PSL SPNEGO SSL threadsafe TLS-SRP UnixSockets zstd

onedrive version (used the OpenSuSE install instructions)

root@fileServer:~# onedrive --display-config

WARNING: Your cURL/libcurl version (7.88.1) has known HTTP/2 bugs that impact the use of this client.
         Please report this to your distribution, requesting an update to a newer cURL version, or consider upgrading it yourself for optimal stability.
         Downgrading all client operations to use HTTP/1.1 to ensure maximum operational stability.
         Please read https://github.com/abraunegg/onedrive/blob/master/docs/usage.md#compatibility-with-curl for more information.

Application version                          = onedrive v2.5.3-1+np1+1.1
Compiled with                                = LDC 2100
Curl version                                 = libcurl/7.88.1 OpenSSL/3.0.15 zlib/1.2.13 brotli/1.0.9 zstd/1.5.4 libidn2/2.3.3 libpsl/0.21.2 (+libidn2/2.3.3) libssh2/1.10.0 nghttp2/1.52.0 librtmp/2.3 OpenLDAP/2.5.13

[abraunegg]

@randellhodges

I uninstalled and then reinstalled onedrive with apt (do I need to build onedrive from src to get it to see/use curl 8.11.1?)

It looks like you upgraded 'curl' but did not upgrade 'libcurl' on your Debian 12 platform. The client uses 'libcurl' which generally should always be updated when you update 'curl' itself, but it looks like Debian 12 changed that dependency linkage. To correctly update, use the following example:

apt-get install -t bookworm-backports -y curl libcurl4

I would raise a bug with Debian as you should not be able to upgrade 'curl' without upgrading 'libcurl' as well.

[randellhodges]

That indeed fixed it for me. Thank you.