[release/9.0-staging] [QUIC] Update MsQuic library version #113205
+1
−1
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Backport of #113159 to release/9.0-staging
Contributes to #113136
Customer Impact
Security in-depth change in msquic library - found internally.
We are updating just msquic dependency to 2.4.8 (we have reship msquic binaries on Windows -- on Linux we rely on external package published by msquic team directly). No unique changes to .NET code.
Note: We have done similar update in 2024/3 in 8.0 branch (9.0 hasn't had such change yet) - see commit 1207c32.
Regression
No
Testing
CI run - System.Net.Quic tests ran and passed - see #113205 (comment).
Risk
Low. Update of msquic library that is backward compatible (msquic team guaratnees it).
Also, customers on Linux get this version automatically with updates from their package managers.