New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Escape filename expansions Attributes used in xlat expansions involving filenames will now be subject to tight escaping rules to prevent injection attacks, and to allow maximum compatibility. A little scary this wasn't done already, but for most systems it would have been pretty hard to exploit in a useful way. Arran Cudbard-Bell@2014-12-04T20:40:20Z Files modified: * src/include/radiusd.h * src/main/util.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/acc89c938d3e41b87e4e8... ====== Formatting Arran Cudbard-Bell@2014-12-04T20:38:05Z Files modified: * src/lib/print.c * src/lib/value.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ca7e4eec068356ca5810d... ====== Note on why we don't need to escaping for execve Arran Cudbard-Bell@2014-12-04T17:54:33Z Files modified: * src/main/exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dddd1a9e19b7f9831fd70... ====== Cache Stripped-User-Domain too Arran Cudbard-Bell@2014-12-04T16:14:51Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3049ce57da1de82405946... ====== Update range of cached TLS attributes Arran Cudbard-Bell@2014-12-04T16:11:46Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8c30c259d8b1703c9dc39... ====== Formatting Arran Cudbard-Bell@2014-12-04T16:09:57Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0d34974901ecb5ddb3de9... ====== Duplicate init Arran Cudbard-Bell@2014-12-04T05:05:30Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bda09a9a5c9e18f030392... ====== Slightly better debug output Arran Cudbard-Bell@2014-12-04T02:44:55Z Files modified: * src/lib/pair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d95cf4f4dc00faa5402b... ====== Fix issue that caused radclient to default to sending Accounting-Request when auto was specified and Packet-Type was set Arran Cudbard-Bell@2014-12-04T02:35:56Z Files modified: * src/main/radclient.c * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a13fe5eb4dfd67c3fdbb3... ====== -- This commit summary was generated @2014-12-05T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).