Feature #5558
closedUpdate 3rd party software
0%
Description
Prebuilt 3.3.6 Windows binaries include OpenSSL 1.0.2d which was released in July 2015. Latest OpenSSL 1.0.2 release is 1.0.2k released in January 2017. (OpenSSL newslog page )
SQLite version in the master branch is 3.8.10.1 released in May 2015. Just considering the performance improvements in recent SQLite versions, it would be nice if 3.16.2 was included in Wt. (SQLite chronology page )
Prebuilt 3.3.6 Windows binaries include zlib 1.2.8 released in April 2013. Latest version is 1.2.11 released in January 2017. (zlib changelog )
I suspect libpng and Haru pdf libraries shipped on Windows are also several versions behind. IMHO, the security vulnerability fixed in libpng in December 2016 alone should justify such an update.
Considering the Wt4 efforts, 3.3.7 might be used longer than previous 3.x releases. Updated 3rd party libraries on Windows would make the release more robust.
Updated by Roel Standaert over 6 years ago
We've updated SQLite and the Windows builds of the latest release candidate should have more recent versions of the included libraries.