[Pkg-freeradius-maintainers] Bug#1076022: Backport some security settings from upstream 3.2.5 release to mitigate BlastRADIUS

[Herwin Weststrate]

On Sat, Aug 10, 2024 at 07:36:37AM -0300, Santiago Ruano Rincón wrote:
> Hello,
> 
> El 09/08/24 a las 11:57, Bernhard Schmidt escribió:
> > Hi,
> > 
> > > Yes but time here is short, last PU is end of august
> > > > I can test drive the bulleye version on one of our production servers
> > > > after 20th, and I can certainly ask in the higher education group in
> > > > Germany who can test either locally available .debs or better use
> > > > -proposed uploads before the point release.
> > > 
> > > Fine thansk
> > > 
> > > Bookworm backport could go along ASAP. Risk is low here
> > 
> > I've asked around and found a few who could test drive .debs next week. If
> > you build binaries (or if you have a branch with the proposed changes for
> > bookworm too) I can send them over.
> 
> Nice!
> 
> The binary packages are part of the artifacts from the build jobs, that
> can be downloaded from:
> * bullseye: https://salsa.debian.org/debian/freeradius/-/jobs/6100084
> * bookworm: https://salsa.debian.org/debian/freeradius/-/jobs/6100049
> 
> For convenience, there are deb repositories available, following the
> instructions found at:
> * bullseye: https://debian.pages.debian.net/-/freeradius/-/jobs/6100087/artifacts/aptly/index.html
> * bookworm: https://debian.pages.debian.net/-/freeradius/-/jobs/6100052/artifacts/aptly/index.html
> 

I will try to run some tests with these packages. I will have to fit it
in between my regular work, so it might take a few days.

-- 
Herwin