Re: [openmq-dev] Request: Update OpenMQ C Client to use new versions of

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

Re: [openmq-dev] Request: Update OpenMQ C Client to use new versions of NSS and NSPR

From: Piotr Żygieło <piotr.zygielo@xxxxxxxxx>
Date: Mon, 14 Mar 2022 21:29:01 +0100
Delivered-to: openmq-dev@xxxxxxxxxxx
List-archive: <https://www.eclipse.org/mailman/private/openmq-dev/>
List-help: <mailto:openmq-dev-request@eclipse.org?subject=help>
List-subscribe: <https://www.eclipse.org/mailman/listinfo/openmq-dev>, <mailto:openmq-dev-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://www.eclipse.org/mailman/options/openmq-dev>, <mailto:openmq-dev-request@eclipse.org?subject=unsubscribe>

On Mon, 14 Mar 2022 at 21:19, George Lee via openmq-dev
<openmq-dev@xxxxxxxxxxx> wrote:
>
> Would it be possible for the OpenMQ C Client to be updated to use recent versions of NSS/NSPR? Based on the latest OpenMQ release notes, it seems like it's currently using NSS 3.12.8 with NSPR 4.8.6, which are from 2015. We've been warned that those versions could pose security risks.
>
> The latest versions appear to be NSS 3.76 with NSPR 4.32.

NSS and NSPR _are not_ distributed with OpenMQ.

Versions currently used (only in tests in GH workflow) are:
-  ubuntu: 3.49, 4.25
-  macos: 3.76, 4.33

-- 
Piotrek

References:
- [openmq-dev] Request: Update OpenMQ C Client to use new versions of NSS and NSPR
  - From: George Lee

Prev by Date: [openmq-dev] Request: Update OpenMQ C Client to use new versions of NSS and NSPR
Next by Date: Re: [openmq-dev] How to build OpenMQ C Client for Windows
Previous by thread: [openmq-dev] Request: Update OpenMQ C Client to use new versions of NSS and NSPR
Next by thread: [openmq-dev] OpenMQ 6.4.0 Release Preparation
Index(es):
- Date
- Thread

Breadcrumbs