Re: Bump required libcurl version to 7.17.1
| From: | Levi Morrison via internals | Date: | Sun, 12 Jan 2020 22:32:45 +0000 |
| Subject: | Re: Bump required libcurl version to 7.17.1 | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-108105@lists.php.net to get a copy of this message | ||
On Sat, Jan 11, 2020 at 4:57 AM Olumide Samson <oludonsexy@gmail.com> wrote:
>
> Why not the most recent and stable version?
>
> I'm thinking modern version has many bugs fixed and many vulnerabilities
> fixed, even with improvements that make things more faster and lighter...
Using the most recent version would make it more difficult for people
on supported but not cutting edge operating systems to build from
source. IMO, it should be buildable on all major Linux operating
systems in regular support using their native packaging system. The
oldest supported OS and version I can even conceivably care about is
RHEL/CentOS 6 (which is in extended security mode), which appears to
use curl 7.19; after that RHEL/CentOS 7 uses curl 7.29.
In other words, I recommend against *requiring* the latest curl
version and but do recommend bumping the minimum up to at least v7.19.
Unless we really need something from newer versions (which it doesn't
look like we do), anything newer than 7.29 would just cause friction
for people building from source.