Bug 2353916 - mbedtls update 3.6
Summary: mbedtls update 3.6
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: dolphin-emu
Version: rawhide
Hardware: All
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Jeremy Newton
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-03-20 17:19 UTC by Bill Roberts
Modified: 2025-03-30 00:16 UTC (History)
2 users (show)

Fixed In Version: dolphin-emu-2503-5.fc43 dolphin-emu-2503-5.fc42
Clone Of:
Environment:
Last Closed: 2025-03-21 15:11:54 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Bill Roberts 2025-03-20 17:19:12 UTC
Hello,

We are working on updating the mbedtls package to version 3.6.2 and dolphin-emu depends on it. It appears the new version cannot be easily updated to because upstream is not moving as they require TLS 1.1 support. See this PR that was closed and never merged: https://github.com/dolphin-emu/dolphin/pull/12246

What would you like to do here? Bundle it like what was done for implot?


Reproducible: Always

Comment 1 Jeremy Newton 2025-03-20 19:57:56 UTC
Yeah I'll probably bundle as it seems unavoidable. I'll close this once I have it bundled in rawhide.

I noticed upstream actually still bundles 2.28.0 in their source, so I would need to update it to 2.28.9 to sanely bundle it in Fedora.

Comment 2 Jeremy Newton 2025-03-21 12:56:03 UTC
Done:
https://bodhi.fedoraproject.org/updates/FEDORA-2025-c6ccaaa5f0

Quick question, this is only for Fedora 43 right? If you need F42 backported, please reopen.

Comment 3 Jeremy Newton 2025-03-21 12:59:39 UTC
Hmm I forgot to drop the build require in the specfile... Just pushed a build, should be available shortly:
https://koji.fedoraproject.org/koji/taskinfo?taskID=130562821

It built fine locally, so should pass no problem. Bundling is already done.

Comment 4 Jeremy Newton 2025-03-21 14:05:48 UTC
Hmm one second, looks like the cmake logic is broken

Comment 5 Bill Roberts 2025-03-21 15:01:09 UTC
Thanks Jeremy, yeah we are going to do F42 as well, would you like a separate bug for F42?

Comment 6 Jeremy Newton 2025-03-21 15:04:31 UTC
No that's ok, I'll just backport it once rawhide builds.

Comment 7 Fedora Update System 2025-03-21 15:08:27 UTC
FEDORA-2025-4ebce56417 (dolphin-emu-2503-5.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-4ebce56417

Comment 8 Fedora Update System 2025-03-21 15:11:54 UTC
FEDORA-2025-4ebce56417 (dolphin-emu-2503-5.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 9 Jeremy Newton 2025-03-21 15:26:13 UTC
Ok F42 is building:
https://koji.fedoraproject.org/koji/taskinfo?taskID=130567192

If more components need v2.28, please let me know, I'd prefer we setup a compat package to consolidate bugfixes rather than a bunch of bundled libs if this is more than a one off.

Comment 10 Bill Roberts 2025-03-21 15:33:34 UTC
I think it's just this and freeopcua, all the other dependencies have upstream support to move. freeopcua seems to be dead, so it might just get dropped if the maintainer doesn't want to deal with it.

Comment 11 Jeremy Newton 2025-03-21 15:53:11 UTC
(In reply to Bill Roberts from comment #10)
> I think it's just this and freeopcua, all the other dependencies have
> upstream support to move. freeopcua seems to be dead, so it might just get
> dropped if the maintainer doesn't want to deal with it.

Gotcha thanks, yeah it's best we keep it bundled then. Unfortunately dolphin-emu supports old hardware that needs old TLS.

Comment 12 Fedora Update System 2025-03-21 15:58:10 UTC
FEDORA-2025-f42aa90ce3 (dolphin-emu-2503-5.fc42) has been submitted as an update to Fedora 42.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-f42aa90ce3

Comment 13 Fedora Update System 2025-03-22 02:23:02 UTC
FEDORA-2025-f42aa90ce3 has been pushed to the Fedora 42 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-f42aa90ce3`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-f42aa90ce3

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 14 Peter Robinson 2025-03-24 15:34:41 UTC
> If more components need v2.28, please let me know, I'd prefer we setup a
> compat package to consolidate bugfixes rather than a bunch of bundled libs
> if this is more than a one off.

The problem with 2.28 is that it's no longer maintained and there will be CVEs so we actually don't want to encourage anyone to use it.

Comment 15 Jeremy Newton 2025-03-25 15:29:46 UTC
(In reply to Peter Robinson from comment #14)
> > If more components need v2.28, please let me know, I'd prefer we setup a
> > compat package to consolidate bugfixes rather than a bunch of bundled libs
> > if this is more than a one off.
> 
> The problem with 2.28 is that it's no longer maintained and there will be
> CVEs so we actually don't want to encourage anyone to use it.

Gotcha, bundling will keep it isolated.

Comment 16 Fedora Update System 2025-03-30 00:16:03 UTC
FEDORA-2025-f42aa90ce3 (dolphin-emu-2503-5.fc42) has been pushed to the Fedora 42 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.