-
Notifications
You must be signed in to change notification settings - Fork 5k
[release/9.0-staging] [QUIC] Update MsQuic library version #113205
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[release/9.0-staging] [QUIC] Update MsQuic library version #113205
Conversation
Tagging subscribers to this area: @dotnet/ncl |
The tests ran and passed on Windows supporting MsQuic (i.e. TLS 1.3), e.g.: https://helixr1107v0xd1eu3ibi6ka.blob.core.windows.net/dotnet-runtime-refs-pull-113205-merge-fcc1694d55ed42c999/System.Net.Quic.Functional.Tests/1/console.8c9c2296.log?helixlogtype=result
Kusto Query used:
|
Approved over email. |
/ba-g aot SmokeTest failure is #103839 |
Backport of #113159 to release/9.0-staging
Contributes to #113136
Customer Impact
Security in-depth change in msquic library - found internally.
We are updating just msquic dependency to 2.4.8 (we have reship msquic binaries on Windows -- on Linux we rely on external package published by msquic team directly). No unique changes to .NET code.
Note: We have done similar update in 2024/3 in 8.0 branch (9.0 hasn't had such change yet) - see commit 1207c32.
Regression
No
Testing
CI run - System.Net.Quic tests ran and passed - see #113205 (comment).
Risk
Low. Update of msquic library that is backward compatible (msquic team guaratnees it).
Also, customers on Linux get this version automatically with updates from their package managers.