[CDRIVER-4444] Upgrade libmongocrypt dependency to 1.5.2 Created: 29/Jul/22  Updated: 28/Oct/23  Resolved: 01/Aug/22

Status: Closed
Project: C Driver
Component/s: Client Side Encryption
Affects Version/s: None
Fix Version/s: 1.23.0, 1.22.1

Type: Task Priority: Blocker - P1
Reporter: PM Bot Assignee: Ezra Chung
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Issue split
Related
is related to PHPC-2120 Upgrade libmongocrypt dependency to 1... Closed
Upstream Changes Summary:

DRIVERS-2403:
Release libmongocrypt bindings and/or drivers to use libmongocrypt 1.5.2 ASAP to provide a fix for MONGOCRYPT-464.

If possible, pull the affected bindings releases (using libmongocrypt 1.5.0 or 1.5.1) from package managers concurrently with releasing the new package.

Use the following blurb for release notes:

"""
Fix a potential data corruption bug in RewrapManyDataKey when rotating encrypted data encryption keys backed by GCP or Azure key services.

The following conditions will trigger this bug:

A GCP-backed or Azure-backed data encryption key being rewrapped requires fetching an access token for decryption of the data encryption key.

The result of this bug is that the key material for all data encryption keys being rewrapped is replaced by new randomly generated material, destroying the original key material.

To mitigate potential data corruption, upgrade to this version or higher before using RewrapManyDataKey to rotate Azure-backed or GCP-backed data encryption keys. A backup of the key vault collection should always be taken before key rotation.
"""

Upgrading to 1.5.2 will result in test failures in some CSFLE unified specification tests with an error like "The parameter is incorrect. HTTP status=400". See DRIVERS-2404 for instructions to update the tests.


 Description   

This ticket was split from DRIVERS-2403, please see that ticket for a detailed description.



 Comments   
Comment by Ezra Chung [ 01/Aug/22 ]

Commit (r1.22): https://github.com/mongodb/mongo-c-driver/commit/28330f9db338a6b1cb748a20fb6f653cb9544a8f

Comment by Ezra Chung [ 01/Aug/22 ]

PR: https://github.com/mongodb/mongo-c-driver/pull/1082

Commit: https://github.com/mongodb/mongo-c-driver/commit/2966c67d69bc22c3f68fc4f2b2d2164b7cf5b665

Generated at Wed Feb 07 21:20:56 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.