freeradius (3.2.8+dfsg-1ubuntu4) stonking; urgency=medium

  * d/p/lp2154922-Use-ASN1_STRING-functions-for-OpenSSL-4.0-compat.patch:
    Fix FTBFS with OpenSSL 4.0 (LP: #2154922)

 -- Guilherme Puida Moreira <guilherme.moreira@canonical.com>  Wed, 05 Aug 2026 10:16:21 -0300

freeradius (3.2.8+dfsg-1ubuntu3) stonking; urgency=medium

  * No-change rebuild against libssl4

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Fri, 24 Jul 2026 15:17:04 +0000

freeradius (3.2.8+dfsg-1ubuntu2) resolute; urgency=medium

  * No-change rebuild with Python 3.14 as default

 -- Graham Inggs <ginggs@ubuntu.com>  Wed, 28 Jan 2026 17:14:22 +0000

freeradius (3.2.8+dfsg-1ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2126026). Remaining changes:
    - d/rules & d/freeradius-utils.install: remove `radlast` from builds. there
      is no `last` implementation available in oracular+ and compilation has
      become optional. (LP #2096611)
    - d/NEWS: add entry for Ubuntu specific change
  * Dropped:
    - d/p/openssl-3.5.2-compat.patch (LP #2122490)
      + Patch to fix compatibility with OpenSSL 3.5.2
      [In upstream 3.2.8]

 -- Andreas Hasenack <andreas.hasenack@canonical.com>  Tue, 06 Jan 2026 17:09:52 -0300

freeradius (3.2.8+dfsg-1) unstable; urgency=medium

  * Update d/watch to use https instead of ftp
  * New upstream version 3.2.8+dfsg
    - Remove OpenSSL 3.5.2 patch applied upstream
    - Refresh patch for new upstream version
  * Remove Mark Hymers from Uploaders (Closes: #1107171)
  * d/salsa-ci.yml:
    - enable licenserecon, with allow_failure for now
    - disable superflous allow_failure statements
  * Adjust d/copyright

 -- Bernhard Schmidt <berni@debian.org>  Thu, 28 Aug 2025 01:09:38 +0200

freeradius (3.2.7+dfsg-2) unstable; urgency=high

  * Team upload.
  * Backport patch to fix compatibility with OpenSSL 3.5.2 (Closes:
    #1111328)

 -- Luca Boccassi <bluca@debian.org>  Thu, 21 Aug 2025 13:06:02 +0100

freeradius (3.2.7+dfsg-1ubuntu2) questing; urgency=medium

  * d/p/openssl-3.5.2-compat.patch (LP: #2122490)
    - Patch to fix compatibility with OpenSSL 3.5.2

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Wed, 10 Sep 2025 10:57:44 +0200

freeradius (3.2.7+dfsg-1ubuntu1) plucky; urgency=medium

  * d/rules & d/freeradius-utils.install
    remove `radlast` from builds. there is no `last` implementation available
    in oracular+ and compilation has become optional. (LP: #2096611)

 -- John Chittum <john.chittum@canonical.com>  Fri, 28 Feb 2025 07:28:14 -0500

freeradius (3.2.7+dfsg-1) unstable; urgency=medium

  * New upstream version 3.2.7+dfsg
    - add new module rlm_proxy_rate_limit.so
    - force building the radlast wrapper script although there currently
      is no "last" implementation in Debian capable to read the old
      wtmp format. Add d/NEWS.Debian to document this.
  * Revert "freeradius-utils: add wtmpdb needed for radlast"
  * Add mariadb dependency to obsolete init script (Closes: #1059490)
  * Remove obsolete files d/README.source and d/freeradius.NEWS
  * Refresh upstream signing key

 -- Bernhard Schmidt <berni@debian.org>  Mon, 10 Feb 2025 22:50:22 +0100

freeradius (3.2.6+dfsg-3) unstable; urgency=medium

  [ Bastien Roucariès ]
  * [CVE-2019-10143] Update logrotate file to be more in line with upstream
    (Closes: #929466)

  [ Arnaud Rebillout ]
  * freeradius-utils: add wtmpdb needed for radlast

  [ Santiago Ruano Rincón ]
  * Add Blast-RADIUS information in d/NEWS.Debian

  [ Bernhard Schmidt ]
  * Build-Depend on libwbclient-dev instead of samba-dev (Closes: #1064542)
  * Delete src/freeradius-devel in dh_clean (Closes: #1044654)
  * Drop obsolete d/README.Debian

 -- Bernhard Schmidt <berni@debian.org>  Sun, 05 Jan 2025 11:43:05 +0100

freeradius (3.2.6+dfsg-2) unstable; urgency=medium

  * Sourceful upload to sync the version in salsa with the version in
    the archive, looks like I accidentally uploaded an interim build.
  * Drop patches applied upstream

 -- Bernhard Schmidt <berni@debian.org>  Sat, 21 Dec 2024 14:37:25 +0100

freeradius (3.2.6+dfsg-1) unstable; urgency=medium

  * New upstream version 3.2.6+dfsg
  * d/tests: Use passlib.hash.sha512_crypt instead of deprecated crypt standard
    library (Closes: #1084635)

 -- Bernhard Schmidt <berni@debian.org>  Sun, 08 Dec 2024 14:54:06 +0100

freeradius (3.2.5+dfsg-3) unstable; urgency=medium

  [ Andreas Hasenack ]
  * Cherry-Pick from upstream: Replace radsecret with shell script to avoid
    dependency on extra perl modules (Closes: #1076458)

 -- Bernhard Schmidt <berni@debian.org>  Wed, 17 Jul 2024 22:44:55 +0200

freeradius (3.2.5+dfsg-2) unstable; urgency=medium

  * Fix parallel builds
  * Fix python3 autopkgtest
  * freeradius-utils: add perl modules needed for radsecret, run radsecret
    in autopkgtest instead of radlast (which needs wtmp)
  * d/freeradius.service: Use MemoryMax= instead of MemoryLimit=
    (Closes: #1072253)

 -- Bernhard Schmidt <berni@debian.org>  Wed, 10 Jul 2024 22:45:00 +0200

freeradius (3.2.5+dfsg-1) unstable; urgency=medium

  * New upstream version 3.2.5+dfsg
    This release adds a few hardening mitigations for the BlastRADIUS protocol
    vulnerability (CVE-2024-3596).
    - add new radsecret binary
    - add new rlm_dpsk and rlm_eap_teap modules
  * d/watch: Limit to 3.2 series

 -- Bernhard Schmidt <berni@debian.org>  Tue, 09 Jul 2024 23:31:16 +0200

freeradius (3.2.3+dfsg-2) unstable; urgency=medium

  * Don't build against libpcre3 (Closes: #1000031)
    FreeRADIUS will use Posix regular expressions

 -- Bernhard Schmidt <berni@debian.org>  Sun, 02 Jul 2023 22:23:21 +0200

freeradius (3.2.3+dfsg-1) unstable; urgency=medium

  * New upstream version 3.2.3+dfsg (Closes: #1032572)
    - Drop patches applied upstream
    - d/freeradius-redis.install: Include new rlm_cache_redis module
    - Unfuzz d/p/snakeoil-certs.diff
  * Bump Standards-Version, no changes necessary
  * Drop obsolete lsb-base dependency

 -- Bernhard Schmidt <berni@debian.org>  Fri, 23 Jun 2023 20:20:19 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog freeradius-config`.
