Skip to content

modules: mbedtls: update to 3.6.3 #87637

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 3 commits into from
Apr 9, 2025
Merged

modules: mbedtls: update to 3.6.3 #87637

merged 3 commits into from
Apr 9, 2025

Conversation

@tomi-font
Copy link
Contributor

@tomi-font tomi-font commented Mar 25, 2025

Pull in Mbed TLS 3.6.3, updated from 3.6.2.

More details regarding the Mbed TLS 3.6.3 release at: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.3

@zephyrbot zephyrbot added the size: XS A PR changing only a single line of code label Mar 25, 2025
@zephyrbot
Copy link

zephyrbot commented Mar 25, 2025 •
edited by github-actions bot
Loading

The following west manifest projects have changed revision in this Pull Request:

Name Old Revision New Revision Diff
mbedtls zephyrproject-rtos/mbedtls@3bc59ad zephyrproject-rtos/mbedtls@5f88993 (zephyr) zephyrproject-rtos/[email protected]

✅ All manifest checks OK

Note: This message is automatically posted and updated by the Manifest GitHub Action.

@zephyrbot zephyrbot added manifest manifest-mbedtls DNM (manifest) This PR should not be merged (controlled by action-manifest) labels Mar 25, 2025
@tomi-font tomi-font force-pushed the mbedtls_update_3.6.3 branch 2 times, most recently from 6293d55 to 820a953 Compare April 1, 2025 07:03
@github-actions github-actions bot added the Release Notes To be mentioned in the release notes label Apr 1, 2025
tomi-font added 3 commits April 1, 2025 10:04
@tomi-font
modules: mbedtls: update to 3.6.3
9a44627 
Pull in Mbed TLS 3.6.3, updated from 3.6.2.

More details regarding the Mbed TLS 3.6.3 release at:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.3

Signed-off-by: Tomi Fontanilles <[email protected]>
@tomi-font
doc: releases: add release notes for Mbed TLS update
f80398d 
Add release notes regarding the Mbed TLS 3.6.3 update.

Signed-off-by: Tomi Fontanilles <[email protected]>
@tomi-font
doc: releases: fix "Security Vulnerability Related" section for 4.1
9a9ba78 
The sentences were not in proper order.

Signed-off-by: Tomi Fontanilles <[email protected]>
@tomi-font tomi-font force-pushed the mbedtls_update_3.6.3 branch from 820a953 to 9a9ba78 Compare April 1, 2025 07:06
@github-actions github-actions bot removed the DNM (manifest) This PR should not be merged (controlled by action-manifest) label Apr 1, 2025
@tomi-font tomi-font added DNM This PR should not be merged (Do Not Merge) DNM (manifest) This PR should not be merged (controlled by action-manifest) and removed DNM This PR should not be merged (Do Not Merge) size: XS A PR changing only a single line of code DNM (manifest) This PR should not be merged (controlled by action-manifest) labels Apr 1, 2025
@tomi-font
Copy link
Contributor Author

tomi-font commented Apr 3, 2025

@kartben @fabiobaltieri please review

@wearyzen
Copy link
Contributor

wearyzen commented Apr 8, 2025 •
edited
Loading

Hi @tomi-font, may I know if you would be backporting this to the other supported versions of Zephyr?
Also, maybe there should be a label for PRs that are related to CVEs so that they are picked up on priority.

@tomi-font
Copy link
Contributor Author

tomi-font commented Apr 9, 2025

Hi @tomi-font, may I know if you would be backporting this to the other supported versions of Zephyr?

I have backported it to 3.7 already: #87946

Do you also mean 4.0 and 4.1?

Also, maybe there should be a label for PRs that are related to CVEs so that they are picked up on priority.

Yeah, doesn't sound like a bad idea. Or some sort of prioritization. cc @ceolin @d3zd3z

@kartben kartben merged commit d688e96 into zephyrproject-rtos:main Apr 9, 2025
35 of 38 checks passed
@wearyzen
Copy link
Contributor

wearyzen commented Apr 9, 2025

Hi @tomi-font, may I know if you would be backporting this to the other supported versions of Zephyr?

I have backported it to 3.7 already: #87946

Do you also mean 4.0 and 4.1?

Yeah, I was referring to 4.0 and 4.1since I think security fixes are supported on them as well.

Also, maybe there should be a label for PRs that are related to CVEs so that they are picked up on priority.

Yeah, doesn't sound like a bad idea. Or some sort of prioritization. cc @ceolin @d3zd3z

This was referenced Apr 11, 2025
Merged
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@fabiobaltieri fabiobaltieri fabiobaltieri approved these changes

@carlescufi carlescufi carlescufi approved these changes

@aescolar aescolar aescolar approved these changes

@valeriosetti valeriosetti valeriosetti approved these changes

@wearyzen wearyzen wearyzen approved these changes

@d3zd3z d3zd3z Awaiting requested review from d3zd3z

@ceolin ceolin Awaiting requested review from ceolin

@ithinuel ithinuel Awaiting requested review from ithinuel

@kartben kartben Awaiting requested review from kartben

Assignees

@kartben kartben

@fabiobaltieri fabiobaltieri

Labels

manifest manifest-mbedtls Release Notes To be mentioned in the release notes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

8 participants

@tomi-font @zephyrbot @wearyzen @fabiobaltieri @carlescufi @aescolar @valeriosetti @kartben