# changelog

author: Tomas Mraz <tmraz@redhat.com> 1.0.2m-1
changelog:
  - minor upstream release 1.0.2m fixing security issues
  - fix locking of RNG in FIPS mode for some obscure use-cases


author: John Dennis <jdennis@redhat.com> - 2.1.7-8
changelog:
  - resolves: bug#658508 - /etc/pam.d/radiusd uses non-existent password-auth
    module instead of system-auth


author: John Dennis <jdennis@redhat.com> - 2.1.12-1
changelog:
  - Upgrade to latest upstream release: 2.1.12
    resolves: bug#609633
    resolves: bug#546583
    resolves: bug#602567
    resolves: bug#630072
    resolves: bug#658508
  - Upstream changelog for 2.1.12:
    Feature improvements
    * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
      dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
    * Added support for PCRE from Phil Mayers
    * Configurable file permission in rlm_linelog
    * Added "relaxed" option to rlm_attr_filter.  This copies attributes
      if at least one match occurred.
    * Added documentation on dynamic clients.
      See raddb/modules/dynamic_clients.
    * Added support for elliptical curve cryptography.
      See ecdh_curve in raddb/eap.conf.
    * Added support for 802.1X MIBs in checkrad
    * Added support for %{rand:...}, which generates a uniformly
      distributed number between 0 and the number you specify.
    * Created "man" pages for all installed commands, and documented
      options for all commands.  Patch from John Dennis.
    * Allow radsniff to decode encrypted VSAs and CoA packets.
      Patch from Bjorn Mork.
    * Always send Message-Authenticator in radtest. Patch from John Dennis.
      radclient continues to be more flexible.
    * Updated Oracle schema and queries
    * Added SecurID module.  See src/modules/rlm_securid/README

    Bug fixes
    * Fix memory leak in rlm_detail
    * Fix "failed to insert event"
    * Allow virtual servers to be reloaded on HUP.
      It no longer complains about duplicate virtual servers.
    * Fix %{string:...} expansion
    * Fix "server closed socket" loop in radmin
    * Set ownership of control socket when starting up
    * Always allow root to connect to control socket, even if
      "uid" is set.  They're root.  They can already do anything.
    * Save all attributes in Access-Accept when proxying inner-tunnel
      EAP-MSCHAPv2
    * Fixes for DHCP relaying.
    * Check certificate validity when using OCSP.
    * Updated Oracle "configure" script
    * Fixed typos in dictionary.alvarion
    * WARNING on potential proxy loop.
    * Be more aggressive about clearing old requests from the
      internal queue
    * Don't open network sockets when using -C


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  resolves: bug#818885 possible errors in /etc/raddb/sql/postgresql/admin.sql template
    resolves: bug#781877 rlm_dbm_parser has man pages in rlm_dbm_parse.8.gz
    resolves: bug#787111 logrotate script does not reload running daemon
    resolves: bug#846471 freeradius not compiled with --with-udpfromto
    resolves: bug#846474 shadow password expiration does not work
    resolves: bug#846475 Segfault with freeradius-perl threading
    resolves: bug#846476 radtest script is not working with eap-md5 option


author: John Dennis <jdennis@redhat.com> - 2.1.12-5
changelog:
  - resolves: bug#855308
    CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
    certain expiration date fields of a certificate during x509 certificate
    validation


