Re: freeRadius 1.0.4

["Adam D. Barratt" <debian-security@adam-barratt.org.uk>]

On Tuesday, July 19, 2005 2:08 PM, Chey <chey.smith@gmail.com> wrote:

> Hello,
>   I am wondering when Debian will have freeRadius 1.0.4 available
> as an upgrade in "Sarge". There are security issues in freeRadius
> versions prior to 1.0.3 for people who use SQL.
>
> http://www.freeradius.org/security.html

Sarge /won't/ get 1.0.4, as stable doesn't get new upstreams versions of
packages.

However, reading the changelog for the freeradius package in Sarge, it would
appear that fixes for both have already been backported to Debian's 1.0.2
packages - see
http://packages.debian.org/changelogs/pool/main/f/freeradius/freeradius_1.0.2-4/changelog#version1.0.2-4

Regards,

Adam