freeradius (2.2.8+dfsg-0.1ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: read/write overflow in make_secret()
    - debian/patches/CVE-2017-10978.patch: check lengths in
      src/lib/radius.c.
    - CVE-2017-10978
  * SECURITY UPDATE: write overflow in rad_coalesce
    - debian/patches/CVE-2017-10979.patch: check for long attributes in
      src/lib/dhcp.c, src/lib/radius.c.
    - CVE-2017-10979
  * SECURITY UPDATE: memory leak in decode_tlv()
    - debian/patches/CVE-2017-10980.patch: fix memory leak in
      src/lib/dhcp.c.
    - CVE-2017-10980
  * SECURITY UPDATE: memory leak in fr_dhcp_decode()
    - debian/patches/CVE-2017-10981.patch: fix another memory leak in
      src/lib/dhcp.c.
    - CVE-2017-10981
  * SECURITY UPDATE: read overflow in fr_dhcp_decode_options()
    - debian/patches/CVE-2017-10982.patch: check for long options in
      src/lib/dhcp.c.
    - CVE-2017-10982
  * SECURITY UPDATE: read overflow when decoding option 63
    - debian/patches/CVE-2017-10983.patch: decode correct option in
      src/lib/dhcp.c.
    - CVE-2017-10983

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 26 Jul 2017 10:32:39 -0400

freeradius (2.2.8+dfsg-0.1build2) xenial; urgency=medium

  * Rebuild against libmysqlclient20.

 -- Robie Basak <robie.basak@ubuntu.com>  Tue, 05 Apr 2016 12:22:24 +0000

freeradius (2.2.8+dfsg-0.1build1) xenial; urgency=medium

  * Rebuild for Perl 5.22.1.

 -- Colin Watson <cjwatson@ubuntu.com>  Fri, 18 Dec 2015 01:07:36 +0000

freeradius (2.2.8+dfsg-0.1) unstable; urgency=medium

  * Non-maintainer Upload
  * New Upstream version
    * Add myself to uploaders
  * Include ubuntu multiarch python patch
  * Include ubuntu autotests (Thanks probably to
    yolanda.robla@canonical.com, marc.deslauriers@ubuntu.com)
  * New standards version; no changes

 -- Sam Hartman <hartmans@debian.org>  Mon, 14 Sep 2015 07:27:09 -0400

freeradius (2.2.5+dfsg-0.2) unstable; urgency=high

  * Disable OpenSSL version check; Debian will maintain ABI stability or
    change the soname, Closes: #765871
    * Non-Maintainer Upload

 -- Sam Hartman <hartmans@debian.org>  Thu, 23 Oct 2014 21:45:36 -0400

freeradius (2.2.5+dfsg-0.1) unstable; urgency=medium

  * Non-maintainer Upload
    * Remove remnants of freeradius-dilaupadmin, Closes: #669741
    * Permit creating freerad to fail because user might exist, Closes: #661915
    * Update to standards version 3.9.5, no changes
  * New upstream version, Closes: #740857, #691770
    - Include dictionary.mikrotik, Closes: #672200

 -- Sam Hartman <hartmans@debian.org>  Tue, 30 Sep 2014 19:18:08 -0400

freeradius (2.1.12+dfsg-1.3) unstable; urgency=low

  * Non-maintainer upload.
  * Remove freeradius-dialupadmin, Closes: #711486. I understand there's a
    patch in the bug that could get this working.
    However, it's been removed upstream for 3.x, my hope is to package
    3.0.2 soon, and a PHP script that copies all the get/post data
    into globals so as to administer an authentication server is more
    scary than I choose to contemplate. 
  * Add IODBC include directories, Thanks Maximiliano Curia
    , Closes: #740060


 -- Sam Hartman <hartmans@debian.org>  Wed, 12 Mar 2014 20:36:19 -0400

freeradius (2.1.12+dfsg-1.2) unstable; urgency=high

  * Non-maintainer upload.
  * Fix expired passwords when using the unix module (CVE-2011-4966,
    Closes: #694407).

 -- Kees Cook <kees@debian.org>  Sun, 16 Dec 2012 12:44:35 -0800

freeradius (2.1.12+dfsg-1.1) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix pre-authentication buffer overflow in EAP handling
    (CVE-2012-3547; Closes: #687175, #687178).

 -- Nico Golde <nion@debian.org>  Tue, 11 Sep 2012 19:38:02 +0200

freeradius (2.1.12+dfsg-1) unstable; urgency=low

  * New upstream version, closes: #675698.
    + Fix for a segmentation fault in rlm_eap, closes: #645998.
  * Backport upstream commits to fix our bug reports:
    + Fix for a crash on SIGHUP in config file handling,
      378f2517357f11f9900c3799c6a469ee2fda7bdf
      ab73a3debf93492804e7af253ba45a7b017a18d1
      closes: #606450
    + Fix for a segmentation fault in radmin through environment variables,
      ce1bb741773b253c4ccf24accccf6305e202a322
      516dbaabf0ea80d0ff0643dc2ae9a10c4d31494c
      closes: #662194
  * Use dpkg-buildflags for configure, by Moritz Muehlenhoff, closes: #657838.
  * Mark rlm_jradius as stable to get it to build and ship, closes: #599067.
  * Switch to dpkg-source 3.0 (quilt) format.
  * Polished packaging a wee bit and updated the Standards-Version.

 -- Josip Rodin <joy-packages@debian.org>  Fri, 29 Jun 2012 14:32:33 +0200

# For older changelog entries, run 'apt-get changelog libfreeradius2'
