New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Escape filename expansions Attributes used in xlat expansions involving filenames will now be subject to tight escaping rules to prevent injection attacks, and to allow maximum compatibility. A little scary this wasn't done already, but for most systems it would have been pretty hard to exploit in a useful way. Arran Cudbard-Bell@2014-12-04T20:40:39Z Files modified: * src/include/radiusd.h * src/main/util.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0b2710d117ef16f24f4fb... ====== Formatting Arran Cudbard-Bell@2014-12-04T20:40:35Z Files modified: * src/lib/print.c * src/lib/value.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d51b7ba2dd0a169e0d7f... ====== Note on why we don't need to escaping for execve Arran Cudbard-Bell@2014-12-04T20:40:30Z Files modified: * src/main/exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f5b90e786bd1fdd5ca2ea... ====== Cache Stripped-User-Domain too Arran Cudbard-Bell@2014-12-04T16:15:01Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b4a3457405567008a400a... ====== Update range of cached TLS attributes Arran Cudbard-Bell@2014-12-04T16:12:14Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/938e0dcadd5533f2ccfb1... ====== Formatting Arran Cudbard-Bell@2014-12-04T16:12:00Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b1b64fbe57a05f92dee1e... ====== Duplicate init Arran Cudbard-Bell@2014-12-04T16:11:56Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c0f096fa7d08f67f0f35e... ====== Slightly better debug output Arran Cudbard-Bell@2014-12-04T02:45:36Z Files modified: * src/lib/pair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ac378fd1d8725ec7376aa... ====== Escape backslashes only when necessary Alan T. DeKok (via Arran Cudbard-Bell)@2014-12-04T02:36:15Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/884edf7addb6038c4df18... ====== Fix issue that caused radclient to default to sending Accounting-Request when auto was specified and Packet-Type was set Arran Cudbard-Bell@2014-12-04T02:35:48Z Files modified: * src/main/radclient.c * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c48eaecad4c04aacd2ba... ====== -- This commit summary was generated @2014-12-05T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).