SNOW-928053: Upgrade to openssl3.0.11 and libcurl 8.4.0 #566
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
sfc-gh-ext-simba-jz
force-pushed
the
upgrade-openssl-curl
branch
4 times, most recently
from
a92feef to
7c7699f
Compare
ghost
force-pushed
the
upgrade-openssl-curl
branch
from
3d7ab3f to
96c96b0
Compare
sfc-gh-ext-simba-jz
force-pushed
the
upgrade-openssl-curl
branch
2 times, most recently
from
6f10469 to
a8b3131
Compare
sfc-gh-ext-simba-jz
changed the title
2. update source versions and build versions respectively
…do not follow the checksrc doc, but break the debug build
ghost
force-pushed
the
upgrade-openssl-curl
branch
from
fa2c65f to
164bafd
Compare
|
There are 5000+ files.... |
|
@sfc-gh-ext-simba-jz could you please update description why we are upgrading? |
|
Security concerns, I think. I was assigned the task in our OEM release 3.1.2 (during the release curl made a new release 8.4.0 from 8.3.0). The next monthly release should be 3.1.3, which make sense to include all those upgrades. |
sfc-gh-igarish
approved these changes
Oct 25, 2023
|
Yes, there are over 5000 files, we replace openssl-3.0.9 and curl-8.1.2 with opessl-3.0.11 and curl-8.4.0. You don't need to pay attention to openssl because we don't change anything in openssl, just grab and use. We do modify curl for OCSP support, and I have patched everything what we have done in curl-8.1.2 to curl-8.4.0. So the actual change doesn't sound that scary. |
ghost
mentioned this pull request
This pull request was closed.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Update openssl and curl for security concerns
upgrade dependencies openssl-3.0.11 and curl-8.4.0
patch snowflake change of ocsp on curl-8.1.2 to curl-8.4
update source and build versions of related build scripts