L.P.H. van Belle belle at
Tue Sep 3 16:05:16 CEST 2019


> -----Oorspronkelijk bericht-----
> Van: Alan DeKok [mailto:aland at] 
> Verzonden: dinsdag 3 september 2019 14:40
> Aan: FreeRadius users mailing list
> CC: L.P.H. van Belle
> Onderwerp: Re: tlscache
> On Sep 3, 2019, at 8:33 AM, L.P.H. van Belle via 
> Freeradius-Users <freeradius-users at> wrote
> > Now i can only speak for Debian. 
> > From above link, there are no sources available, i would 
> like to have a look at the debian source of that. 
>   See the "debian" directory of the server distribution.

Since im also packaging samba, i do know this yes. 

> > I might learn something from it, any reason for not sharing 
> the sources? 
>   Everything is shared and is publicly available.  The 
> corporate packages are built using docker images, using the 
> docker scripts in "scripts/docker".
>   We don't distribute *source* packages simply because we 
> haven't bothered.  If someone submits patches to create 
> debian "src" packages, then those can go into the main server 
> distribution.

Ok, i did some extra research,  noticed in the debian changelogs the line : 
freeradius (3.0.19+dfsg-1) unstable; urgency=medium

     - disable-session-cache-CVE-2017-9148.patch

I already tested a rebuild from testing to buster that works fine, and easy rebuild. 

Thanks again for the info. 



More information about the Freeradius-Users mailing list