[Pkg-freeradius-maintainers] Bug#1076022: Backport some security settings from upstream 3.2.5 release to mitigate BlastRADIUS

[Santiago Ruano Rincón]

Hello,

El 09/08/24 a las 11:57, Bernhard Schmidt escribió:
> Hi,
> 
> > Yes but time here is short, last PU is end of august
> > > I can test drive the bulleye version on one of our production servers
> > > after 20th, and I can certainly ask in the higher education group in
> > > Germany who can test either locally available .debs or better use
> > > -proposed uploads before the point release.
> > 
> > Fine thansk
> > 
> > Bookworm backport could go along ASAP. Risk is low here
> 
> I've asked around and found a few who could test drive .debs next week. If
> you build binaries (or if you have a branch with the proposed changes for
> bookworm too) I can send them over.

Nice!

The binary packages are part of the artifacts from the build jobs, that
can be downloaded from:
* bullseye: https://salsa.debian.org/debian/freeradius/-/jobs/6100084
* bookworm: https://salsa.debian.org/debian/freeradius/-/jobs/6100049

For convenience, there are deb repositories available, following the
instructions found at:
* bullseye: https://debian.pages.debian.net/-/freeradius/-/jobs/6100087/artifacts/aptly/index.html
* bookworm: https://debian.pages.debian.net/-/freeradius/-/jobs/6100052/artifacts/aptly/index.html

> 
> > > Do we have a date for the next point release already?
> > Last day of august
> 
> okay, so uploading on 23rd at the latest. I'll get to it early CW 34, but
> you are totally free to give it a go before, no objections.

ACK! In any case, I would prefer if you could test them in your
production severs, so let's see after the 20th. Is that OK for you?

Thank you,

 -- Santiago
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-freeradius-maintainers/attachments/20240810/c81805b4/attachment.sig>