Feedback-ID: i131946ab:Fastmail
Message-ID: <4006636a-134c-e096-2954-c8669d444b64@enterprisedb.com>
Date: Tue, 14 Mar 2023 08:25:55 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
 Gecko/20100101 Thunderbird/102.8.0
Subject: Re: ICU 54 and earlier are too dangerous
Content-Language: en-US
To: Tom Lane <tgl@sss.pgh.pa.us>, Jeff Davis <pgsql@j-davis.com>
Cc: pgsql-hackers@postgresql.org
References: <ea927ede4e8a8f3ba515b15a083577a68e9f9201.camel@j-davis.com>
 <2453427.1678753577@sss.pgh.pa.us>
From: Peter Eisentraut <peter.eisentraut@enterprisedb.com>
In-Reply-To: <2453427.1678753577@sss.pgh.pa.us>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: 
 <https://www.postgresql.org/message-id/4006636a-134c-e096-2954-c8669d444b64%40enterprisedb.com>
Precedence: bulk

On 14.03.23 01:26, Tom Lane wrote:
>> Unless someone has a better idea, I think we need to bump the minimum
>> required ICU version to 55. That would solve the issue in v16 and
>> later, but those using old versions of ICU and old versions of postgres
>> would still be vulnerable to these kinds of typos.
> ... that seems like an overreaction.  We know from the buildfarm
> that there's still a lot of old ICU out there.  Is it really improving
> anybody's life to try to forbid them from using such a version?

If I'm getting the dates right, the 10-year support of RHEL 7 will 
expire in June 2024.  So if we follow past practices, we could drop 
support for RHEL 7 in PG17.  This would allow us to drop support for old 
libicu, and also old openssl, zlib, maybe more.

So if we don't feel like we need to do an emergency change here, there 
is a path to do this in a principled way in the near future.