Bug 2353916

Summary: mbedtls update 3.6
Product: [Fedora] Fedora Reporter: Bill Roberts <bill.roberts>
Component: dolphin-emuAssignee: Jeremy Newton <alexjnewt>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: rawhideCC: alexjnewt, pbrobinson
Target Milestone: ---Keywords: Reopened, Upgrades
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: dolphin-emu-2503-5.fc43 dolphin-emu-2503-5.fc42 Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-03-21 15:11:54 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Bill Roberts 2025-03-20 17:19:12 UTC
Hello,

We are working on updating the mbedtls package to version 3.6.2 and dolphin-emu depends on it. It appears the new version cannot be easily updated to because upstream is not moving as they require TLS 1.1 support. See this PR that was closed and never merged: https://github.com/dolphin-emu/dolphin/pull/12246

What would you like to do here? Bundle it like what was done for implot?


Reproducible: Always

Comment 1 Jeremy Newton 2025-03-20 19:57:56 UTC
Yeah I'll probably bundle as it seems unavoidable. I'll close this once I have it bundled in rawhide.

I noticed upstream actually still bundles 2.28.0 in their source, so I would need to update it to 2.28.9 to sanely bundle it in Fedora.

Comment 2 Jeremy Newton 2025-03-21 12:56:03 UTC
Done:
https://bodhi.fedoraproject.org/updates/FEDORA-2025-c6ccaaa5f0

Quick question, this is only for Fedora 43 right? If you need F42 backported, please reopen.

Comment 3 Jeremy Newton 2025-03-21 12:59:39 UTC
Hmm I forgot to drop the build require in the specfile... Just pushed a build, should be available shortly:
https://koji.fedoraproject.org/koji/taskinfo?taskID=130562821

It built fine locally, so should pass no problem. Bundling is already done.

Comment 4 Jeremy Newton 2025-03-21 14:05:48 UTC
Hmm one second, looks like the cmake logic is broken

Comment 5 Bill Roberts 2025-03-21 15:01:09 UTC
Thanks Jeremy, yeah we are going to do F42 as well, would you like a separate bug for F42?

Comment 6 Jeremy Newton 2025-03-21 15:04:31 UTC
No that's ok, I'll just backport it once rawhide builds.

Comment 7 Fedora Update System 2025-03-21 15:08:27 UTC
FEDORA-2025-4ebce56417 (dolphin-emu-2503-5.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-4ebce56417

Comment 8 Fedora Update System 2025-03-21 15:11:54 UTC
FEDORA-2025-4ebce56417 (dolphin-emu-2503-5.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 9 Jeremy Newton 2025-03-21 15:26:13 UTC
Ok F42 is building:
https://koji.fedoraproject.org/koji/taskinfo?taskID=130567192

If more components need v2.28, please let me know, I'd prefer we setup a compat package to consolidate bugfixes rather than a bunch of bundled libs if this is more than a one off.

Comment 10 Bill Roberts 2025-03-21 15:33:34 UTC
I think it's just this and freeopcua, all the other dependencies have upstream support to move. freeopcua seems to be dead, so it might just get dropped if the maintainer doesn't want to deal with it.

Comment 11 Jeremy Newton 2025-03-21 15:53:11 UTC
(In reply to Bill Roberts from comment #10)
> I think it's just this and freeopcua, all the other dependencies have
> upstream support to move. freeopcua seems to be dead, so it might just get
> dropped if the maintainer doesn't want to deal with it.

Gotcha thanks, yeah it's best we keep it bundled then. Unfortunately dolphin-emu supports old hardware that needs old TLS.

Comment 12 Fedora Update System 2025-03-21 15:58:10 UTC
FEDORA-2025-f42aa90ce3 (dolphin-emu-2503-5.fc42) has been submitted as an update to Fedora 42.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-f42aa90ce3

Comment 13 Fedora Update System 2025-03-22 02:23:02 UTC
FEDORA-2025-f42aa90ce3 has been pushed to the Fedora 42 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-f42aa90ce3`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-f42aa90ce3

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 14 Peter Robinson 2025-03-24 15:34:41 UTC
> If more components need v2.28, please let me know, I'd prefer we setup a
> compat package to consolidate bugfixes rather than a bunch of bundled libs
> if this is more than a one off.

The problem with 2.28 is that it's no longer maintained and there will be CVEs so we actually don't want to encourage anyone to use it.

Comment 15 Jeremy Newton 2025-03-25 15:29:46 UTC
(In reply to Peter Robinson from comment #14)
> > If more components need v2.28, please let me know, I'd prefer we setup a
> > compat package to consolidate bugfixes rather than a bunch of bundled libs
> > if this is more than a one off.
> 
> The problem with 2.28 is that it's no longer maintained and there will be
> CVEs so we actually don't want to encourage anyone to use it.

Gotcha, bundling will keep it isolated.

Comment 16 Fedora Update System 2025-03-30 00:16:03 UTC
FEDORA-2025-f42aa90ce3 (dolphin-emu-2503-5.fc42) has been pushed to the Fedora 42 stable repository.
If problem still persists, please make note of it in this bug report.