Difference between revisions of "GLIBC 2.28"

From OS4X
Jump to navigation Jump to search
(Created page with "= GLIBC system requirements = What are the reasons and implications about this system requirement? = At a glance = *openSSL 1.1.1 is end of life since September 11th 2023, pu...")
 
 
Line 13: Line 13:
  
 
== Use openSSL 1.1.1 as long as possible ==
 
== Use openSSL 1.1.1 as long as possible ==
As long as there are not security issues known, OS4X may be compiled with the obsoleted openSSL version 1.1.1. If you require such a version, please send a request to [mailto:support@os4x.com?subject=Support%20for%20openSSL%201.1.1&body=Hello%2C%0D%0A%0D%0Awe%20need%20support%20for%20an%20outdated%20openSSL%20version%20due%20to%20an%20outdated%20GLIBC%20version.%0D%0A support@os4x.com]. This
+
As long as there are no known security issues, OS4X may be compiled with the obsoleted openSSL version 1.1.1. If you require such a version, please send a request to [mailto:support@os4x.com?subject=Support%20for%20openSSL%201.1.1&body=Hello%2C%0D%0A%0D%0Awe%20need%20support%20for%20an%20outdated%20openSSL%20version%20due%20to%20an%20outdated%20GLIBC%20version.%0D%0A support@os4x.com]. We will provide you an OS4X version with the outdated openSSL version.
  
 
= External ressources =
 
= External ressources =
 
*https://savannah.gnu.org/forum/forum.php?forum_id=9205
 
*https://savannah.gnu.org/forum/forum.php?forum_id=9205
 
*https://gist.github.com/wagenet/35adca1a032cec2999d47b6c40aa45b1
 
*https://gist.github.com/wagenet/35adca1a032cec2999d47b6c40aa45b1

Latest revision as of 12:19, 18 September 2023

GLIBC system requirements

What are the reasons and implications about this system requirement?

At a glance

  • openSSL 1.1.1 is end of life since September 11th 2023, pushing system vendors to use the most recent version 3.0 or 3.1.
  • MySQL uses openSSL for secure connections, too. openSSL 3 support is implemented in MySQL since version 8.1.0.
  • MySQL 8.1 uses GLIBC function fcntl64, which was introduced in GLIBC version 2.28

Alternatives

openSSL Premium Level support

openSSL offers a paid support option for backports of security bugfixes for version 1.1.1: "Premium Level Support". The costs are US$50000 yearly (see https://www.openssl.org/support/contracts.html#premium).

Use openSSL 1.1.1 as long as possible

As long as there are no known security issues, OS4X may be compiled with the obsoleted openSSL version 1.1.1. If you require such a version, please send a request to support@os4x.com. We will provide you an OS4X version with the outdated openSSL version.

External ressources