[Debian-iot-maintainers] Bug#1074248: transition: mbedtls

[Andrea Pappacoda]

Package: release.debian.org
Severity: normal
X-Debbugs-Cc: mbedtls at packages.debian.org
Control: affects -1 + src:mbedtls
User: release.debian.org at packages.debian.org
Usertags: transition

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi :)

I'm working on transitioning mbedtls from version 2.28 LTS to 3.6 LTS. There
are a few packages currently failing to build with this new API (and ABI)
breaking release, so this might take a while.

This is my first "big" transition, so be sure to provide even the most stupid
suggestion!

I've used the ratt package to rebuild all the reverse dependencies, and here
are the results:

    $ grep ^Status: * | grep -v success
    bctoolbox_5.2.0-2.1:Status: attempted
    bibledit_5.1.013-1:Status: attempted
    bibledit-cloud_5.1.013-1:Status: attempted
    dislocker_0.7.3-3.1:Status: attempted
    dolphin-emu_5.0-19870+dfsg-1:Status: attempted
    gauche_0.9.14-5:Status: attempted
    gauche-c-wrapper_0.6.1-12:Status: attempted
    geany-plugins_2.0-4:Status: given-back
    haxe_1:4.3.4-1:Status: attempted
    kicad_8.0.3+dfsg-1:Status: attempted
    lib60870_2.3.2-1:Status: attempted
    libgit2_1.7.2+ds-1:Status: attempted
    lief_0.9.0-1:Status: attempted
    micropython_1.22.1+ds-1:Status: attempted
    mongrel2_1.12.2-3:Status: attempted
    ncbi-blast+_2.12.0+ds-4:Status: attempted
    ncbi-vdb_3.0.2+dfsg-2:Status: attempted
    neko_2.3.0-2:Status: attempted
    privoxy_3.0.34-5:Status: attempted
    python-mbedtls_2.10.1-1:Status: attempted
    rustc_1.78.0+dfsg1-2:Status: attempted
    rust-parsec-service_1.3.0-5:Status: attempted
    rust-psa-crypto_0.9.2-3:Status: attempted
    rust-psa-crypto-sys_0.9.3-2:Status: attempted
    rust-ripasso_0.6.5-2:Status: given-back
    rust-ripasso-cursive_0.6.5-3:Status: given-back
    rust-sequoia-octopus-librnp_1.8.1-4:Status: given-back
    shadowsocks-libev_3.3.5+ds-10:Status: attempted
    yuzu_0-1335+ds-1.4:Status: attempted

Some of these failures are not relevant. shadowsocks-libev, for example, isn't
in testing and is scheduled for removal (see bug #1072934). rustc, instead,
failed because I had no space left on my device. Most packages, though, are
genuinely failing with MbedTLS 3.x.

I'll start filing bugs against the affected packages soon-ish.

Bye :D

Ben file:

title = "mbedtls";
is_affected = .depends ~ "libmbedcrypto7t64" | .depends ~ "libmbedtls14t64" |
.depends ~ "libmbedx509-1t64" | .depends ~ "libmbedcrypto16" | .depends ~
"libmbedtls21" | .depends ~ "libmbedx509-7";
is_good = .depends ~ "libmbedcrypto16" | .depends ~ "libmbedtls21" | .depends ~
"libmbedx509-7";
is_bad = .depends ~ "libmbedcrypto7t64" | .depends ~ "libmbedtls14t64" |
.depends ~ "libmbedx509-1t64";


-----BEGIN PGP SIGNATURE-----

iIoEARYIADIWIQS6VuNIvZRFHt7JcAdKkgiiRVB3pwUCZnpv3xQcYW5kcmVhQHBh
cHBhY29kYS5pdAAKCRBKkgiiRVB3p52fAQCAcrn3PF21G0NxOUrNzlqgTaB+0lUb
8JhgVqZ9lNjVowD+NpwL4eoZYC31QkR4z9vLr1ZjUV/fgo2QeBxx7pxc3QE=
=ofOY
-----END PGP SIGNATURE-----