[Pkg-freeradius-maintainers] Bug#1076022: Additional patch for bullseye's FreeRADIUS (was: Backport some security settings from upstream 3.2.5 release to mitigate BlastRADIUS)

[Santiago Ruano Rincón]

El 22/08/24 a las 17:14, Herwin Weststrate escribió:
> On Tue, Aug 20, 2024 at 10:42:10PM -0300, Santiago Ruano Rincón wrote:
> > Hi!
> > 
> > El 20/08/24 a las 15:14, Santiago Ruano Rincón escribió:
> > I have pushed an additional patch to the WIP bullseye branch:
> > https://salsa.debian.org/debian/freeradius/-/commit/e320f4945e88a129d602aad586ac9a927cb344ea
> > Alan, if you ever have some free time, would you be so kind to tell me
> > if that additional patch (for 3.0.21) makes sense?
> > 
> > The built packages can be downloaded from:
> > https://salsa.debian.org/debian/freeradius/-/jobs/6156291/artifacts/download,
> > or via the repo as described at:
> > https://debian.pages.debian.net/-/freeradius/-/jobs/6156294/artifacts/aptly/index.html
> > Herwin, if possible, could you please give it a try?
> > I think the behaviour matches the upstream's bookworm, but I would be
> > great to have an extra pair of eyes :-)
> 
> It looks like this has fixed it. This was the last issue I found, so
> both versions got my stamp of approval.
> 
> I'll be on holiday tomorrow until the end of the month, so if a new
> version will be released, I won't have a chance to look at it.

Herwin, thank you for testing! Much appreciated :-)


El 21/08/24 a las 13:58, Alan DeKok escribió:
>   The patch looks good to me, thanks.

Thank you, Alan!


Bernhard, Bastien (in CC) is willing to handle the PUs. Please, let us
know if it is still OK for you. In any case, we would like to avoid
duplicated work.

Cheers,

 -- Santiago
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-freeradius-maintainers/attachments/20240822/53bbd3ca/attachment.sig>