Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:108106 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 88832 invoked from network); 13 Jan 2020 00:50:18 -0000 Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5) by pb1.pair.com with SMTP; 13 Jan 2020 00:50:18 -0000 Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 1C1831804F6 for ; Sun, 12 Jan 2020 14:56:48 -0800 (PST) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,HTML_MESSAGE, RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.2 X-Spam-ASN: AS15169 209.85.128.0/17 X-Spam-Virus: No X-Envelope-From: Received: from mail-ed1-f43.google.com (mail-ed1-f43.google.com [209.85.208.43]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Sun, 12 Jan 2020 14:56:47 -0800 (PST) Received: by mail-ed1-f43.google.com with SMTP id r21so6885148edq.0 for ; Sun, 12 Jan 2020 14:56:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=6H/KhpflJEra7kmyZtPu8KpTyzr+4KLTqAoj1k52bJw=; b=XrsFK8XRLNdF4Fo0FE8oFB2IqbHejESMoAjU3JtnDpmvfZGOB2ssmHRex30eAKMcmf 40BtCpRFPyWSDI5MIP6WMgghVagJhQ8Sg8x/D9qtH1uapKUOECXDu4dhaztPxIr3btAT AxAhWKGe4/wiFP+T99rouOsFFxD3iUKc+p51GQniPrcsNQ2iGU+YmpvgsuJSU75OgPW9 e5QZQHNK3LH1+C4hjIYH5cnTR1qyDN9aBMWdf1fLzVcHSDBKM+RW003FPvwligpAXEPY U222tAlRtVtOTszLxMQP/1A57p+5LB88tCB+VZu8CLFqXE8IC9bio8XkZhAvYeKWJfDs kZfA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=6H/KhpflJEra7kmyZtPu8KpTyzr+4KLTqAoj1k52bJw=; b=R+qTYS+06HbFQoPT8tuC5c212ustBISIhaR6wbyL+N0zX2tsD8e2+/+dgZooa1l/Uv Oqdkg7aFoc0irTIRZy0EQtiS2GtuwezSjbU58lvlFcxD8qCVliIaGWQPw30DZK+7CUmc DSqu8lc1uYH6V1orFznH6A9t2OYXwQwIUInDI9LkFlFN+hBOQIxqnwin6uLDteeaXFHI 2xC9ItWat4JKIokulZ3CCQcLHSpN7Xfn0yicgPvzYDjhF2XMFiksUOPP5iriVKP0JHy2 siG35yac3frsLrUMSbTrHjY77rSoIwHf/Tk8XNR3nNa5X8Z78eB5W8lrLaqC0zHuxcy8 baMw== X-Gm-Message-State: APjAAAXCV4NHGcF8cZuh9yrcU0l9FTpUTO9srSNie0d3nKFQooSchnfE Zgm+2+ZDdyoQk/aUUDMv7IdReb7vGBuWvwTi6unO/SW9Pp93Vg== X-Google-Smtp-Source: APXvYqyUqW5tlt63jBEuXhLBhuDoIn4FT72UVSbUjmt/sEnRUHsgN8c3qLZN7jbqviuOULr6Oajj1Rsq201Oog9hoXg= X-Received: by 2002:a17:906:4888:: with SMTP id v8mr13681675ejq.329.1578869805918; Sun, 12 Jan 2020 14:56:45 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: Date: Sun, 12 Jan 2020 23:56:33 +0100 Message-ID: To: Levi Morrison Cc: Olumide Samson , Pierre Joye , "Christoph M. Becker" , PHP internals Content-Type: multipart/alternative; boundary="000000000000edafbe059bf94511" Subject: Re: [PHP-DEV] Bump required libcurl version to 7.17.1 From: george.banyard@gmail.com ("G. P. B.") --000000000000edafbe059bf94511 Content-Type: text/plain; charset="UTF-8" On Sun, 12 Jan 2020 at 23:33, Levi Morrison via internals < internals@lists.php.net> wrote: > On Sat, Jan 11, 2020 at 4:57 AM Olumide Samson > wrote: > > > > Why not the most recent and stable version? > > > > I'm thinking modern version has many bugs fixed and many vulnerabilities > > fixed, even with improvements that make things more faster and lighter... > > Using the most recent version would make it more difficult for people > on supported but not cutting edge operating systems to build from > source. IMO, it should be buildable on all major Linux operating > systems in regular support using their native packaging system. The > oldest supported OS and version I can even conceivably care about is > RHEL/CentOS 6 (which is in extended security mode), which appears to > use curl 7.19; after that RHEL/CentOS 7 uses curl 7.29. > > In other words, I recommend against *requiring* the latest curl > version and but do recommend bumping the minimum up to at least v7.19. > Unless we really need something from newer versions (which it doesn't > look like we do), anything newer than 7.29 would just cause friction > for people building from source. > > -- > PHP Internals - PHP Runtime Development Mailing List > To unsubscribe, visit: http://www.php.net/unsub.php > As this is targeting PHP 8 I would say 7.29 would be better IMHO as RHEL/CentOS 6 EOL is November 30, 2020 [1] [2] which means it would be EOL just after PHP 8 is released (if PHP 8 is release on the yearly schedule). My two cents Best regards George P. Banyard [1] https://endoflife.software/operating-systems/linux/centos [2] https://access.redhat.com/discussions/2399461 --000000000000edafbe059bf94511--