Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:108105
MIME-Version: 1.0
References: <c1c3cc76-b12b-9044-b81f-70f410fecc58@gmx.de> <CAEZPtU5hg7mdHmcfyGzJTER7BjTDCD0KX1R6zX+rtyb7VD7D6w@mail.gmail.com>
 <CAAwbVufZ+-5S-JzVASeYo+5dbJzgnm9ryAWPtVsX6TZ2CyQUig@mail.gmail.com>
In-Reply-To: <CAAwbVufZ+-5S-JzVASeYo+5dbJzgnm9ryAWPtVsX6TZ2CyQUig@mail.gmail.com>
Reply-To: Levi Morrison <levi.morrison@datadoghq.com>
Date: Sun, 12 Jan 2020 15:32:45 -0700
Message-ID: <CAAKU0umqCtk2xd4XPUfz-9r9s_HM94bY1ektcdgidTcoB70fKQ@mail.gmail.com>
To: Olumide Samson <oludonsexy@gmail.com>
Cc: Pierre Joye <pierre.php@gmail.com>, "Christoph M. Becker" <cmbecker69@gmx.de>, 
	PHP internals <internals@lists.php.net>
Content-Type: text/plain; charset="UTF-8"
Subject: Re: [PHP-DEV] Bump required libcurl version to 7.17.1
From: internals@lists.php.net ("Levi Morrison via internals")

On Sat, Jan 11, 2020 at 4:57 AM Olumide Samson <oludonsexy@gmail.com> wrote:
>
> Why not the most recent and stable version?
>
> I'm thinking modern version has many bugs fixed and many vulnerabilities
> fixed, even with improvements that make things more faster and lighter...

Using the most recent version would make it more difficult for people
on supported but not cutting edge operating systems to build from
source. IMO, it should be buildable on all major Linux operating
systems in regular support using their native packaging system. The
oldest supported OS and version I can even conceivably care about is
RHEL/CentOS 6 (which is in extended security mode), which appears to
use curl 7.19; after that RHEL/CentOS 7 uses curl 7.29.

In other words, I recommend against *requiring* the latest curl
version and but do recommend bumping the minimum up to at least v7.19.
Unless we really need something from newer versions (which it doesn't
look like we do), anything newer than 7.29 would just cause friction
for people building from source.