Many of the dependencies listed in conanfile.py seem severely outdated, dating back to 2023. Besides making it really hard to build the project on a modern system (especially with a modern compiler version), they are likely to contain bugs and vulnerabilities. While I haven't looked in detail at other dependencies, at least the OpenSSL version is very worrying:
OpenSSL 1.1.1 series are not maintained since Sep 2023. The used 1.1.1t version has at least 9 reported vulnerabilities, including some rated "high". That said, this number is likely underestimated, because the 1.1.1 branch is no longer maintained, and new OpenSSL vulnerabilities are no longer tested or marked against that version.
Could you please look into updating the dependencies used to newer versions that are secure, supported and compatible with modern systems?
Many of the dependencies listed in
conanfile.pyseem severely outdated, dating back to 2023. Besides making it really hard to build the project on a modern system (especially with a modern compiler version), they are likely to contain bugs and vulnerabilities. While I haven't looked in detail at other dependencies, at least the OpenSSL version is very worrying:milvus-lite/conanfile.py
Line 27 in d07a3fa
OpenSSL 1.1.1 series are not maintained since Sep 2023. The used 1.1.1t version has at least 9 reported vulnerabilities, including some rated "high". That said, this number is likely underestimated, because the 1.1.1 branch is no longer maintained, and new OpenSSL vulnerabilities are no longer tested or marked against that version.
Could you please look into updating the dependencies used to newer versions that are secure, supported and compatible with modern systems?