Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

modules: mbedtls: update to 3.6.3 #87637

Merged
merged 3 commits into from
Apr 9, 2025
Merged

modules: mbedtls: update to 3.6.3 #87637

merged 3 commits into from
Apr 9, 2025

Conversation

tomi-font
Copy link
Collaborator

Pull in Mbed TLS 3.6.3, updated from 3.6.2.

More details regarding the Mbed TLS 3.6.3 release at: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.3

@zephyrbot zephyrbot added the size: XS A PR changing only a single line of code label Mar 25, 2025
@zephyrbot
Copy link
Collaborator

zephyrbot commented Mar 25, 2025 •
edited by github-actions bot
Loading

The following west manifest projects have changed revision in this Pull Request:

Name Old Revision New Revision Diff
mbedtls zephyrproject-rtos/mbedtls@3bc59ad zephyrproject-rtos/mbedtls@5f88993 (zephyr) zephyrproject-rtos/mbedtls@3bc59adb..5f889934

✅ All manifest checks OK

Note: This message is automatically posted and updated by the Manifest GitHub Action.

@zephyrbot zephyrbot added manifest manifest-mbedtls DNM (manifest) This PR should not be merged (controlled by action-manifest) labels Mar 25, 2025
@tomi-font tomi-font force-pushed the mbedtls_update_3.6.3 branch 2 times, most recently from 6293d55 to 820a953 Compare April 1, 2025 07:03
@github-actions github-actions bot added the Release Notes To be mentioned in the release notes label Apr 1, 2025
tomi-font added 3 commits April 1, 2025 10:04
@tomi-font
modules: mbedtls: update to 3.6.3
9a44627 
Pull in Mbed TLS 3.6.3, updated from 3.6.2.

More details regarding the Mbed TLS 3.6.3 release at:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.3

Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
@tomi-font
doc: releases: add release notes for Mbed TLS update
f80398d 
Add release notes regarding the Mbed TLS 3.6.3 update.

Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
@tomi-font
doc: releases: fix "Security Vulnerability Related" section for 4.1
9a9ba78 
The sentences were not in proper order.

Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
@tomi-font tomi-font force-pushed the mbedtls_update_3.6.3 branch from 820a953 to 9a9ba78 Compare April 1, 2025 07:06
@github-actions github-actions bot removed the DNM (manifest) This PR should not be merged (controlled by action-manifest) label Apr 1, 2025
@tomi-font tomi-font added DNM This PR should not be merged (Do Not Merge) DNM (manifest) This PR should not be merged (controlled by action-manifest) and removed DNM This PR should not be merged (Do Not Merge) size: XS A PR changing only a single line of code DNM (manifest) This PR should not be merged (controlled by action-manifest) labels Apr 1, 2025
@tomi-font
Copy link
Collaborator Author

@kartben @fabiobaltieri please review

@wearyzen
Copy link
Collaborator

wearyzen commented Apr 8, 2025 •
edited
Loading

Hi @tomi-font, may I know if you would be backporting this to the other supported versions of Zephyr?
Also, maybe there should be a label for PRs that are related to CVEs so that they are picked up on priority.

@tomi-font
Copy link
Collaborator Author

Hi @tomi-font, may I know if you would be backporting this to the other supported versions of Zephyr?

I have backported it to 3.7 already: #87946

Do you also mean 4.0 and 4.1?

Also, maybe there should be a label for PRs that are related to CVEs so that they are picked up on priority.

Yeah, doesn't sound like a bad idea. Or some sort of prioritization. cc @ceolin @d3zd3z

@kartben kartben merged commit d688e96 into zephyrproject-rtos:main Apr 9, 2025
35 of 38 checks passed
@wearyzen
Copy link
Collaborator

wearyzen commented Apr 9, 2025

Hi @tomi-font, may I know if you would be backporting this to the other supported versions of Zephyr?

I have backported it to 3.7 already: #87946

Do you also mean 4.0 and 4.1?

Yeah, I was referring to 4.0 and 4.1since I think security fixes are supported on them as well.

Also, maybe there should be a label for PRs that are related to CVEs so that they are picked up on priority.

Yeah, doesn't sound like a bad idea. Or some sort of prioritization. cc @ceolin @d3zd3z

This was referenced Apr 11, 2025
Open
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@fabiobaltieri fabiobaltieri fabiobaltieri approved these changes

@carlescufi carlescufi carlescufi approved these changes

@aescolar aescolar aescolar approved these changes

@valeriosetti valeriosetti valeriosetti approved these changes

@wearyzen wearyzen wearyzen approved these changes

@d3zd3z d3zd3z Awaiting requested review from d3zd3z

@ceolin ceolin Awaiting requested review from ceolin

@ithinuel ithinuel Awaiting requested review from ithinuel

@kartben kartben Awaiting requested review from kartben

Assignees

@kartben kartben

@fabiobaltieri fabiobaltieri

Labels
manifest manifest-mbedtls Release Notes To be mentioned in the release notes
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
8 participants
@tomi-font @zephyrbot @wearyzen @fabiobaltieri @carlescufi @aescolar @valeriosetti @kartben